Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-04-2017
Ran by rofida (22-04-2017 12:43:04)
Running from C:\Users\rofida\Desktop
Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2015-10-11 17:28:13)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4156086232-4276291699-4231531313-500 - Administrator - Disabled)
Guest (S-1-5-21-4156086232-4276291699-4231531313-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4156086232-4276291699-4231531313-1004 - Limited - Enabled)
rofida (S-1-5-21-4156086232-4276291699-4231531313-1000 - Administrator - Enabled) => C:\Users\rofida
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: ESET Smart Security 8.0 (Disabled - Out of date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Disabled - Out of date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
BitTorrent (HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\...\BitTorrent) (Version: 7.9.9.43086 - BitTorrent Inc.)
Canon LBP2900 (HKLM\...\Canon LBP2900) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.24 - Piriform)
ESET Smart Security (HKLM\...\{F79673B1-1F34-4CC0-B7D9-AB7552687978}) (Version: 8.0.319.0 - ESET, spol s r. o.)
Google Chrome (HKLM\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (Version: 1.3.32.7 - Google Inc.) Hidden
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.20.1337 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
Magic ISO Maker v5.5 (build 0281) (HKLM\...\Magic ISO Maker v5.5 (build 0281)) (Version: - )
Metric Collection SDK 35 (Version: 1.2.0010.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 53.0 (x86 en-US) (HKLM\...\Mozilla Firefox 53.0 (x86 en-US)) (Version: 53.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.0.6312 - Mozilla)
Notepad++ (HKLM\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
Platform (Version: 1.39 - VIA Technologies, Inc.) Hidden
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Skype™ 7.26 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Super Marioty 1.0 (HKLM\...\Super Marioty_is1) (Version: - FreeGamia, Inc.)
Tactical Ops (HKLM\...\Tactical Ops) (Version: - )
UC Browser (HKLM\...\UCBrowser) (Version: 6.1.2015.1007 - UCWeb Inc.)
UMPlayer 0.98 [P4] (HKLM\...\UMPlayer) (Version: 0.98 - Ori Rejwan)
Unity Web Player (HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
VIA Platform Device Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
WinRAR 5.30 بيتا 6 (32-بت) (HKLM\...\WinRAR archiver) (Version: 5.30.6 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4156086232-4276291699-4231531313-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\rofida\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-4156086232-4276291699-4231531313-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0669B03D-9769-4575-922E-D872D4376A5A} - System32\Tasks\{B28708DB-629D-4FAB-8F25-39C5FB6D6616} => C:\Users\rofida\Desktop\pockimon.EXE
Task: {11FE1F51-6D71-4597-9D96-60CB394A75C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)
Task: {1EA14B6D-FA80-4A72-AFFD-5939CDC7E2A5} - \UCBrowserUpdater -> No File <==== ATTENTION
Task: {265F49BA-7E67-42CA-9666-E55B776F059E} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 35 => %ProgramFiles%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe
Task: {3ACF5B30-B7D6-49C3-B7CD-5A8A3AD79685} - System32\Tasks\{B9EFD593-67C7-493E-AA80-5AE87F91DB07} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.28.64.101/ar/abandoninstall?page=tsProgressBar
Task: {63C2A7AE-9B4E-45F7-B524-E6A336278CF0} - \UCBrowserUpdaterCore -> No File <==== ATTENTION
Task: {64C92FA5-9FC1-4373-842F-D73B388628E4} - System32\Tasks\{D6D9CAA7-C52D-4D33-80AD-7BD3E1C2FC09} => C:\Users\rofida\Desktop\pockimon.EXE
Task: {70E35A56-14F4-4786-A6D5-FEA8BD2C8D4D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {A4B1DA39-CAB3-49C0-969D-3C8B589EACD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-07] (Adobe Systems Incorporated)
Task: {B46D30B0-02B5-4052-B77D-DCE97B9E542F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-11-15] (Piriform Ltd)
Task: {EA1F034C-B7CE-47EF-AB0B-59EF96A9F2D5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)
Task: {FB8C87D0-B83B-4B80-8F5C-C54F351B4F0C} - System32\Tasks\{020E9A6C-3A53-4619-B8F6-13AA175C9A24} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.28.64.101/ar/abandoninstall?page=tsProgressBar
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\rofida\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://chercheztout.com/tram/120
ShortcutWithArgument: C:\Users\rofida\Desktop\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://chercheztout.com/tram/116
ShortcutWithArgument: C:\Users\rofida\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://chercheztout.com/tram/118
ShortcutWithArgument: C:\Users\rofida\Desktop\Pre_Scan_Donate.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxps://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=S3AQ8V3XRWWYN
ShortcutWithArgument: C:\Users\rofida\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
ShortcutWithArgument: C:\Users\rofida\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://chercheztout.com/tram/118
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
==================== Loaded Modules (Whitelisted) ==============
2016-10-02 08:57 - 2017-02-21 10:32 - 00629648 _____ () C:\Program Files\UCBrowser\Application\UCService.exe
2016-05-17 23:42 - 2016-05-17 23:42 - 00267952 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2015-10-12 17:52 - 2012-12-11 11:01 - 00080504 _____ () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
2015-10-12 17:52 - 2012-12-11 11:01 - 00113272 _____ () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
2017-04-08 19:29 - 2017-04-08 19:29 - 00006144 _____ () C:\Users\rofida\AppData\Roaming\70493327\408926.exe
2017-02-23 10:56 - 2017-02-21 10:55 - 02106768 _____ () C:\Program Files\UCBrowser\Application\6.1.2015.1007\UCAgent.exe
2017-04-07 08:59 - 2017-03-29 03:04 - 02187096 _____ () C:\Program Files\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-04-07 08:59 - 2017-03-29 03:04 - 00086360 _____ () C:\Program Files\Google\Chrome\Application\57.0.2987.133\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2017-04-08 19:29 - 00000918 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 clients2.google.com
127.0.0.1 v1.ff.avast.com
127.0.0.1 vlcproxy.ff.avast.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\rofida\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Overwolf => C:\Program Files\Overwolf\Overwolf.exe -silent
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{538C9B17-B07D-4340-911D-CE483C725587}] => (Allow) C:\Windows\System32\CNAB4RPK.EXE
FirewallRules: [{9880CC47-5306-4CC6-89EA-788A04D2260D}] => (Allow) C:\Windows\System32\CNAB4RPK.EXE
FirewallRules: [{3811AECD-181D-47D3-BEB0-BFDB7B8336CA}] => (Allow) C:\Program Files\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{23DC8955-06E5-4963-A578-96AE748801CD}] => (Allow) C:\Program Files\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{321A3326-E91B-4B18-B33C-5D646EA5485A}] => (Allow) C:\Program Files\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{38EF3FE9-49FE-4611-B117-7B52C095F11A}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{F813C3C2-77F9-4570-86DA-EFA410B4864B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{14F1C130-34F3-461E-B3D7-F35F7B8B76D8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{81508240-F8B8-4132-BBC4-57E8FACCD4AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{216AE2D6-1A9A-440D-BCA6-CFF0F59DB4D5}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{86BFE1CC-988D-47D7-8B26-C62202013F7E}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7531F19A-F10F-43A8-AF9D-E53EF56C95F1}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{5ED4760C-ADEA-409F-93AB-36BB5BCC3D52}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{9E6D7B7E-211F-41DA-BB97-8F816AB6C7E1}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{67799F70-8D10-4335-8464-D5A6248A322B}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D566C998-540C-4B48-A281-DF0E1FB3D1AD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
19-04-2017 14:29:56 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/22/2017 12:21:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/22/2017 11:59:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/22/2017 10:47:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/21/2017 10:11:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/21/2017 08:42:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/20/2017 01:17:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/20/2017 05:51:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 07:31:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 06:45:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 04:44:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: اسم التطبيق الذي يحتوي على أخطاء: iexplore.exe، الإصدار: 8.0.7601.19104، الطابع الزمني: 0x5669ba69
اسم الوحدة النمطية التي تحتوي على أخطاء: mshtml.dll، الإصدار: 8.0.7601.19104، الطابع الزمني: 0x5669c45a
رمز الاستثناء: 0xc0000005
إزاحة الخطأ: 0x000d88fc
معرّف العملية التي تحتوي على خطأ: 0xa04
وقت بدء تشغيل التطبيق الذي يحتوي على خطأ: 0x01d2b923cded5f44
مسار التطبيق الذي يحتوي على خطأ: C:\Program Files\Internet Explorer\iexplore.exe
مسار الوحدة النمطية التي تحتوي على خطأ: C:\Windows\System32\mshtml.dll
معرف التقرير: 13073964-2517-11e7-906c-b8975a2af8f7
System errors:
=============
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU G2030 @ 3.00GHz
Percentage of memory in use: 40%
Total physical RAM: 1939.12 MB
Available physical RAM: 1148.79 MB
Total Virtual: 3878.24 MB
Available Virtual: 2751.6 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:62.13 GB) (Free:37.3 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:43.89 GB) (Free:27.74 GB) NTFS
Drive e: () (Fixed) (Total:43.03 GB) (Free:42.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: F8EF9422)
Partition 1: (Active) - (Size=62.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=86.9 GB) - (Type=05)
==================== End of Addition.txt ============================
Ran by rofida (22-04-2017 12:43:04)
Running from C:\Users\rofida\Desktop
Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2015-10-11 17:28:13)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4156086232-4276291699-4231531313-500 - Administrator - Disabled)
Guest (S-1-5-21-4156086232-4276291699-4231531313-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-4156086232-4276291699-4231531313-1004 - Limited - Enabled)
rofida (S-1-5-21-4156086232-4276291699-4231531313-1000 - Administrator - Enabled) => C:\Users\rofida
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: ESET Smart Security 8.0 (Disabled - Out of date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Disabled - Out of date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
BitTorrent (HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\...\BitTorrent) (Version: 7.9.9.43086 - BitTorrent Inc.)
Canon LBP2900 (HKLM\...\Canon LBP2900) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.24 - Piriform)
ESET Smart Security (HKLM\...\{F79673B1-1F34-4CC0-B7D9-AB7552687978}) (Version: 8.0.319.0 - ESET, spol s r. o.)
Google Chrome (HKLM\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (Version: 1.3.32.7 - Google Inc.) Hidden
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.20.1337 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
Magic ISO Maker v5.5 (build 0281) (HKLM\...\Magic ISO Maker v5.5 (build 0281)) (Version: - )
Metric Collection SDK 35 (Version: 1.2.0010.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 53.0 (x86 en-US) (HKLM\...\Mozilla Firefox 53.0 (x86 en-US)) (Version: 53.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.0.6312 - Mozilla)
Notepad++ (HKLM\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
Platform (Version: 1.39 - VIA Technologies, Inc.) Hidden
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Skype™ 7.26 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Super Marioty 1.0 (HKLM\...\Super Marioty_is1) (Version: - FreeGamia, Inc.)
Tactical Ops (HKLM\...\Tactical Ops) (Version: - )
UC Browser (HKLM\...\UCBrowser) (Version: 6.1.2015.1007 - UCWeb Inc.)
UMPlayer 0.98 [P4] (HKLM\...\UMPlayer) (Version: 0.98 - Ori Rejwan)
Unity Web Player (HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
VIA Platform Device Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
WinRAR 5.30 بيتا 6 (32-بت) (HKLM\...\WinRAR archiver) (Version: 5.30.6 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4156086232-4276291699-4231531313-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\rofida\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-4156086232-4276291699-4231531313-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0669B03D-9769-4575-922E-D872D4376A5A} - System32\Tasks\{B28708DB-629D-4FAB-8F25-39C5FB6D6616} => C:\Users\rofida\Desktop\pockimon.EXE
Task: {11FE1F51-6D71-4597-9D96-60CB394A75C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)
Task: {1EA14B6D-FA80-4A72-AFFD-5939CDC7E2A5} - \UCBrowserUpdater -> No File <==== ATTENTION
Task: {265F49BA-7E67-42CA-9666-E55B776F059E} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 35 => %ProgramFiles%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe
Task: {3ACF5B30-B7D6-49C3-B7CD-5A8A3AD79685} - System32\Tasks\{B9EFD593-67C7-493E-AA80-5AE87F91DB07} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.28.64.101/ar/abandoninstall?page=tsProgressBar
Task: {63C2A7AE-9B4E-45F7-B524-E6A336278CF0} - \UCBrowserUpdaterCore -> No File <==== ATTENTION
Task: {64C92FA5-9FC1-4373-842F-D73B388628E4} - System32\Tasks\{D6D9CAA7-C52D-4D33-80AD-7BD3E1C2FC09} => C:\Users\rofida\Desktop\pockimon.EXE
Task: {70E35A56-14F4-4786-A6D5-FEA8BD2C8D4D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {A4B1DA39-CAB3-49C0-969D-3C8B589EACD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-07] (Adobe Systems Incorporated)
Task: {B46D30B0-02B5-4052-B77D-DCE97B9E542F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-11-15] (Piriform Ltd)
Task: {EA1F034C-B7CE-47EF-AB0B-59EF96A9F2D5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-05] (Google Inc.)
Task: {FB8C87D0-B83B-4B80-8F5C-C54F351B4F0C} - System32\Tasks\{020E9A6C-3A53-4619-B8F6-13AA175C9A24} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.28.64.101/ar/abandoninstall?page=tsProgressBar
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\rofida\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://chercheztout.com/tram/120
ShortcutWithArgument: C:\Users\rofida\Desktop\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://chercheztout.com/tram/116
ShortcutWithArgument: C:\Users\rofida\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://chercheztout.com/tram/118
ShortcutWithArgument: C:\Users\rofida\Desktop\Pre_Scan_Donate.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxps://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=S3AQ8V3XRWWYN
ShortcutWithArgument: C:\Users\rofida\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
ShortcutWithArgument: C:\Users\rofida\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://chercheztout.com/tram/118
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://geometrydashlite.org"
==================== Loaded Modules (Whitelisted) ==============
2016-10-02 08:57 - 2017-02-21 10:32 - 00629648 _____ () C:\Program Files\UCBrowser\Application\UCService.exe
2016-05-17 23:42 - 2016-05-17 23:42 - 00267952 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2015-10-12 17:52 - 2012-12-11 11:01 - 00080504 _____ () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
2015-10-12 17:52 - 2012-12-11 11:01 - 00113272 _____ () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
2017-04-08 19:29 - 2017-04-08 19:29 - 00006144 _____ () C:\Users\rofida\AppData\Roaming\70493327\408926.exe
2017-02-23 10:56 - 2017-02-21 10:55 - 02106768 _____ () C:\Program Files\UCBrowser\Application\6.1.2015.1007\UCAgent.exe
2017-04-07 08:59 - 2017-03-29 03:04 - 02187096 _____ () C:\Program Files\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-04-07 08:59 - 2017-03-29 03:04 - 00086360 _____ () C:\Program Files\Google\Chrome\Application\57.0.2987.133\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2017-04-08 19:29 - 00000918 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 clients2.google.com
127.0.0.1 v1.ff.avast.com
127.0.0.1 vlcproxy.ff.avast.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4156086232-4276291699-4231531313-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\rofida\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Overwolf => C:\Program Files\Overwolf\Overwolf.exe -silent
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{538C9B17-B07D-4340-911D-CE483C725587}] => (Allow) C:\Windows\System32\CNAB4RPK.EXE
FirewallRules: [{9880CC47-5306-4CC6-89EA-788A04D2260D}] => (Allow) C:\Windows\System32\CNAB4RPK.EXE
FirewallRules: [{3811AECD-181D-47D3-BEB0-BFDB7B8336CA}] => (Allow) C:\Program Files\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{23DC8955-06E5-4963-A578-96AE748801CD}] => (Allow) C:\Program Files\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{321A3326-E91B-4B18-B33C-5D646EA5485A}] => (Allow) C:\Program Files\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{38EF3FE9-49FE-4611-B117-7B52C095F11A}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{F813C3C2-77F9-4570-86DA-EFA410B4864B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{14F1C130-34F3-461E-B3D7-F35F7B8B76D8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{81508240-F8B8-4132-BBC4-57E8FACCD4AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{216AE2D6-1A9A-440D-BCA6-CFF0F59DB4D5}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{86BFE1CC-988D-47D7-8B26-C62202013F7E}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7531F19A-F10F-43A8-AF9D-E53EF56C95F1}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{5ED4760C-ADEA-409F-93AB-36BB5BCC3D52}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{9E6D7B7E-211F-41DA-BB97-8F816AB6C7E1}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{67799F70-8D10-4335-8464-D5A6248A322B}] => (Allow) C:\Users\rofida\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D566C998-540C-4B48-A281-DF0E1FB3D1AD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
19-04-2017 14:29:56 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/22/2017 12:21:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/22/2017 11:59:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/22/2017 10:47:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/21/2017 10:11:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/21/2017 08:42:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/20/2017 01:17:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/20/2017 05:51:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 07:31:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 06:45:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/19/2017 04:44:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: اسم التطبيق الذي يحتوي على أخطاء: iexplore.exe، الإصدار: 8.0.7601.19104، الطابع الزمني: 0x5669ba69
اسم الوحدة النمطية التي تحتوي على أخطاء: mshtml.dll، الإصدار: 8.0.7601.19104، الطابع الزمني: 0x5669c45a
رمز الاستثناء: 0xc0000005
إزاحة الخطأ: 0x000d88fc
معرّف العملية التي تحتوي على خطأ: 0xa04
وقت بدء تشغيل التطبيق الذي يحتوي على خطأ: 0x01d2b923cded5f44
مسار التطبيق الذي يحتوي على خطأ: C:\Program Files\Internet Explorer\iexplore.exe
مسار الوحدة النمطية التي تحتوي على خطأ: C:\Windows\System32\mshtml.dll
معرف التقرير: 13073964-2517-11e7-906c-b8975a2af8f7
System errors:
=============
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: تعتمد الخدمة Peer Networking Grouping على الخدمة Peer Name Resolution Protocol التي فشلت في بدء التشغيل بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: تعذر بدء تشغيل مجموعة نظراء Peer Name Resolution Protocol نظراً لفشل إنشاء الهوية الافتراضية مع رمز الخطأ: 0x80630801.
Error: (04/22/2017 12:21:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: تم إنهاء خدمة Peer Name Resolution Protocol بسبب الخطأ التالي:
%%-2140993535
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU G2030 @ 3.00GHz
Percentage of memory in use: 40%
Total physical RAM: 1939.12 MB
Available physical RAM: 1148.79 MB
Total Virtual: 3878.24 MB
Available Virtual: 2751.6 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:62.13 GB) (Free:37.3 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:43.89 GB) (Free:27.74 GB) NTFS
Drive e: () (Fixed) (Total:43.03 GB) (Free:42.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: F8EF9422)
Partition 1: (Active) - (Size=62.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=86.9 GB) - (Type=05)
==================== End of Addition.txt ============================