Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-10-2021
Ran by Patrick Anelia (14-10-2021 20:02:56)
Running from C:\Users\Patrick Anelia\Desktop
Microsoft Windows 10 Home Single Language Version 20H2 19042.1237 (X64) (2021-01-18 03:18:42)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4103905783-786974986-1128566019-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4103905783-786974986-1128566019-503 - Limited - Disabled)
Guest (S-1-5-21-4103905783-786974986-1128566019-501 - Limited - Disabled)
Patrick Anelia (S-1-5-21-4103905783-786974986-1128566019-1001 - Administrator - Enabled) => C:\Users\Patrick Anelia
WDAGUtilityAccount (S-1-5-21-4103905783-786974986-1128566019-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Symantec Endpoint Protection (Disabled - Up to date) {D13BD399-83A0-E2CF-BE1A-249478F15ABB}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Apple Application Support (32-bit) (HKLM-x32\...\{E5347310-C82F-4833-AA36-8D11E5A8A86A}) (Version: 6.6 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D745E014-74DD-43A3-98DF-E7D38164B681}) (Version: 6.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brave (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\BraveSoftware Brave-Browser) (Version: 94.1.30.87 - Brave Software Inc)
Dropbox (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\Dropbox) (Version: 132.4.3800 - Dropbox, Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.1.37576 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.71 - Google LLC)
Herramientas de corrección de Microsoft Office 2016: español (HKLM-x32\...\{90160000-001F-0C0A-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
HP Audio Switch (HKLM-x32\...\{BC852AA8-58F6-4F07-ACB1-7377E52CA4F3}) (Version: 1.0.150.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.9.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{cdb5f70f-5107-4613-bf69-15de903b5b5d}) (Version: 5.5.22560 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{3FC961DB-BD36-4D8D-B276-0C456A2BB638}) (Version: 1.4.0.441 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{F213102E-FD30-4E22-AF73-4C682D65FFEE}) (Version: 1.4.441.0 - HP Inc.)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version: - )
HP Support Assistant (HKLM-x32\...\{4AAC4B07-77EF-4BCF-88DC-D24E4DE683E8}) (Version: 8.8.34.31 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{63F82052-C045-4F97-A3CA-C41D2CCA1FFA}) (Version: 12.18.34.21 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{4B0A7A8A-ECE5-4639-9A0D-C535F354313D}) (Version: 1.4.26 - HP Inc.)
IBM SPSS Statistics 26 (HKLM\...\{1AC22BAE-DC13-4991-9910-AE3743A4592D}) (Version: 26.0.0.0 - IBM Corp)
iCloud (HKLM\...\{82FCC407-A0E5-4B80-9241-5ABA78B61090}) (Version: 7.6.0.15 - Apple Inc.)
Intel(R) Chipset Device Software (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10608.329 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4642 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1094 - Intel Corporation)
iTunes (HKLM\...\{1D7D1271-5258-4F5A-B8C1-7176BF398782}) (Version: 12.7.3.46 - Apple Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\OneDriveSetup.exe) (Version: 21.180.0905.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)
Opera Stable 79.0.4143.72 (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\Opera 79.0.4143.72) (Version: 79.0.4143.72 - Opera Software)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM-x32\...\{90160000-001F-040C-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 2021.1.0.17805 - Medixant)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.79 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.21.811.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.104 - REALTEK Semiconductor Corp.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{0BAA0A93-3AD3-4B19-9105-4C8C3FA92A83}) (Version: 2.67.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{76A22428-2400-4521-96AF-7AC4A6174CA5}) (Version: 1.25.0.0 - Microsoft Corporation) Hidden
Visual Song Book (C:\Program Files (x86)\Visual Song Book\) (HKLM-x32\...\ST6UNST #2) (Version: - )
Visual Song Book (HKLM-x32\...\ST6UNST #1) (Version: - )
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )
Zoom (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\ZoomUMX) (Version: 5.7.1 (543) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2811.0_x64__343d40qqvtj1t [2018-07-13] (Amazon.com)
Booking.com: Big savings on hotels in 96,000 destinations worldwide -> C:\Program Files\WindowsApps\PricelinePartnerNetwork.Booking.comBigsavingsonhot_1.2.0.0_x64__mgae2k3ys4ra0 [2021-04-20] (Priceline Partner Network)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.443.0_x86__v10z8vjag6ke6 [2018-03-15] (HP Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Access 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.8.0_x86__8wekyb3d8bbwe [2018-08-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Excel 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Outlook 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft PowerPoint 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Publisher 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Studios) [MS Ad]
Microsoft Word 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.93.478.0_x64__mcm4njqhnhss8 [2019-08-01] (Netflix, Inc.)
Power Media Player 14 for HP Consumer PCs with DVD -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.PowerMediaPlayer14forHPConsumerPC_14.2.8929.0_x86__06qsbagp91rvg [2018-08-05] (CYBERLINKCOM CORP)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_6.11.32.0_x64__kx24dqmazqk8j [2018-07-13] (Random Salad Games LLC) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2021-01-18] (Skype)
Synaptics TouchPad -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 [2021-02-11] (Synaptics Incorporated)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe () [File not signed]
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{06B74C04-E813-4DD4-A972-172836EFA8D6}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Update\1.3.101.0\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\localserver32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Brave-Browser\Application\94.1.30.87\notification_helper.exe (Brave Software, Inc. -> Brave Software, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{B44D78A8-8697-4893-BBB5-9F27AC670BA6}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Update\1.3.101.0\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Patrick Anelia\Dropbox [2018-07-13 00:26]
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B} -> [dropbox-NamespaceExtensionRole.Business] =>
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-06-26] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2019-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers1_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2021-10-10 00:09 - 2021-10-10 00:09 - 000160768 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\47dd482baab12dc07e34857f12533e97\BRIDGECommon.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000125440 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\e612546bdebb6b2e5d5e511e3c3c29b5\BridgeExtension.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000395264 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\c8fc7bfce790d1ec253c8b4d86d5d1ba\CleanStartController.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000138240 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\7c6cb2f28873358e87b2a36d331fe377\Interop.IWshRuntimeLibrary.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000145920 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Registratio4eabc192#\104d229b06c27b3cc4d085a413c162d9\RegistrationUtilities.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000134656 _____ (hardcodet.net) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\468f0620197b04fb8cf89469b802b6f2\Hardcodet.Wpf.TaskbarNotification.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000136192 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\8209b879afce6614e9129aa77843934a\CommonPortable.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 001585664 _____ (Mark Heath) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\3e19245119ca892d5b8908ab7c6aaf28\NAudio.ni.dll
2021-10-10 00:10 - 2021-10-10 00:10 - 002306560 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\6315237efcbff0bc3974b0bb2ba7b1a1\Newtonsoft.Json.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000792064 _____ (The Apache Software Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\fe4810ec05fe22b25ebec49b4d9a45ef\log4net.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ask.com?o=10148&l=dis&tb=VDJ
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4103905783-786974986-1128566019-1001 -> {140101E4-658E-4E3E-A41B-00CF6D97CA26} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=VDJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=972CE5DF-F69F-4FB8-86C6-9B4EC9072C1E&apn_sauid=CFEC5448-8775-4B9C-91D3-825B56A1DF49&
SearchScopes: HKU\S-1-5-21-4103905783-786974986-1128566019-1001 -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-09-29 14:46 - 2018-09-08 16:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrick Anelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "RealTimes.lnk"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "RealDownloader"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "Dropbox Update"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "BraveSoftware Update"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_E3F8CD75B0EF9971DFFC639E63CDAB0A"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "YouTubeToMP3"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{A0AFC818-28F1-4C4F-B9D9-9B5CF682306C}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{07190EAC-1F89-4529-BE46-58506B966A07}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [TCP Query User{FD9260AC-826C-43FE-BAEA-91A3FD8EBD4A}C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe] => (Block) C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{901AFC8B-0DD1-4541-9656-391B1C30DCD2}C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe] => (Block) C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B6188FD-9F28-4C40-ACEB-F759A4486B35}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{58BCBFB1-7D44-4BF5-8FC8-0FBFCB2FD6C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{39BA7424-B62D-459A-A55B-3224F26692F7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BC46322A-C522-4098-A9D3-33522FBAEE1A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{021AD0DF-9C66-4E99-B61D-EE222C481B81}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{80289CD2-34A9-49B6-9300-7330B2F35F3F}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8105604E-6384-46E0-9285-B194EA67C474}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A1AD0315-6286-4274-86DB-BFF79FDDEF96}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2D25CA8B-39F3-439F-965A-DE0E319B34D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6C7E1C1D-171E-4A32-8252-BD329E0D5362}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D4071DE6-1899-4B05-94D0-29F52CC87A4F}] => (Allow) C:\Program Files\AVG\Antivirus\AvEmUpdate.exe => No File
FirewallRules: [{F5E80B87-D9E1-4D2F-B861-37E83B2F7070}] => (Allow) C:\Program Files\AVG\Antivirus\AvEmUpdate.exe => No File
FirewallRules: [{65EC659B-697F-44D0-9353-DAD5743BFD4F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\76.0.4017.107\opera.exe => No File
FirewallRules: [{FADACF10-98C8-44D1-9117-154E03313E59}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{32CED761-842B-49CA-860D-552823AF84C7}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{E7A05963-04C1-40A6-B3A1-0A598C48D5CA}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{EFD30FAA-59E7-4F43-A814-23AB3652618F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\78.0.4093.147\opera.exe => No File
FirewallRules: [{17896FDA-56C4-4FD2-9597-136F5C13433F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\79.0.4143.50\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{B22806DC-8922-4C58-8EDB-7F43A8374556}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\79.0.4143.72\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{36E850FF-E84D-4DD1-97D4-866CDB22FB12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D4652219-2F76-4B30-93F0-393B54044AFD}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{6213A2A3-7BCE-4BEB-ACA1-C9A4D62C3470}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{A321E059-1D3F-43B1-AE06-9B78F6AF2A7D}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{8EF789C5-98B4-495F-8A79-A709EE20D146}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{650F018D-E29B-41B1-87BB-E6CDFC04272C}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{734C8FA8-E316-4E4B-9FB7-1F40C9A9A2EC}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.exe (International Business Machines Corporation -> IBM Corp.)
==================== Restore Points =========================
14-10-2021 19:00:55 Removed Symantec Endpoint Protection.
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (10/14/2021 07:23:23 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe".Error in manifest or policy file "C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe" on line 0.
Invalid Xml syntax.
Error: (10/14/2021 07:18:24 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (10/14/2021 07:18:24 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (10/14/2021 07:17:33 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
Error: (10/14/2021 07:12:46 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
Error: (10/14/2021 06:57:06 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: LAPTOP-UN06NA71)
Description: Application or service 'RealPlayer Update Service' could not be restarted.
Error: (10/14/2021 06:54:13 PM) (Source: Symantec AntiVirus) (EventID: 73) (User: )
Description: Event-ID 73
Error: (10/14/2021 06:53:56 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
System errors:
=============
Error: (10/14/2021 07:21:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The McAPExe service failed to start due to the following error:
The system cannot find the file specified.
Error: (10/14/2021 07:18:04 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UN06NA71)
Description: The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.
Error: (10/14/2021 07:14:03 PM) (Source: Tcpip) (EventID: 4207) (User: )
Description: The IPv6 TCP/IP interface with index 23 failed to bind to its provider.
Error: (10/14/2021 07:14:03 PM) (Source: Tcpip) (EventID: 4207) (User: )
Description: The IPv4 TCP/IP interface with index 23 failed to bind to its provider.
Error: (10/14/2021 07:13:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Symantec Endpoint Protection service terminated unexpectedly. It has done this 1 time(s).
Error: (10/14/2021 06:48:35 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT AUTHORITY)
Description: Miniport Apple Mobile Device Ethernet #4, {ac3ec1e6-45c0-4d0c-920f-4e75d6f8c01d}, had event 76
Error: (10/14/2021 06:45:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The McAPExe service depends on the mfevtp service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (10/14/2021 06:45:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The mfemms service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Windows Defender:
================
Date: 2021-02-06 21:46:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
CodeIntegrity:
===============
Date: 2021-10-14 19:14:17
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.760.0000.105\Bin\WSCSAvNotifier.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2021-10-14 19:12:27
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.760.0000.105\Bin\Smc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Insyde F.34 01/25/2018
Motherboard: HP 832C
Processor: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Percentage of memory in use: 73%
Total physical RAM: 4001.58 MB
Available physical RAM: 1053.41 MB
Total Virtual: 5473.58 MB
Available Virtual: 2449.3 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:449.73 GB) (Free:98.45 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:14.79 GB) (Free:1.75 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (HiSuite) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
\\?\Volume{d384cb26-142a-473b-bf9c-fe181b610c43}\ () (Fixed) (Total:0.96 GB) (Free:0.35 GB) NTFS
\\?\Volume{a6e497fa-a711-4d86-afba-c1f02e201646}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 686676BF)
Partition: GPT.
==================== End of Addition.txt =======================
Ran by Patrick Anelia (14-10-2021 20:02:56)
Running from C:\Users\Patrick Anelia\Desktop
Microsoft Windows 10 Home Single Language Version 20H2 19042.1237 (X64) (2021-01-18 03:18:42)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4103905783-786974986-1128566019-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4103905783-786974986-1128566019-503 - Limited - Disabled)
Guest (S-1-5-21-4103905783-786974986-1128566019-501 - Limited - Disabled)
Patrick Anelia (S-1-5-21-4103905783-786974986-1128566019-1001 - Administrator - Enabled) => C:\Users\Patrick Anelia
WDAGUtilityAccount (S-1-5-21-4103905783-786974986-1128566019-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Symantec Endpoint Protection (Disabled - Up to date) {D13BD399-83A0-E2CF-BE1A-249478F15ABB}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Apple Application Support (32-bit) (HKLM-x32\...\{E5347310-C82F-4833-AA36-8D11E5A8A86A}) (Version: 6.6 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D745E014-74DD-43A3-98DF-E7D38164B681}) (Version: 6.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brave (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\BraveSoftware Brave-Browser) (Version: 94.1.30.87 - Brave Software Inc)
Dropbox (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\Dropbox) (Version: 132.4.3800 - Dropbox, Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.1.37576 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.71 - Google LLC)
Herramientas de corrección de Microsoft Office 2016: español (HKLM-x32\...\{90160000-001F-0C0A-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
HP Audio Switch (HKLM-x32\...\{BC852AA8-58F6-4F07-ACB1-7377E52CA4F3}) (Version: 1.0.150.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.9.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{cdb5f70f-5107-4613-bf69-15de903b5b5d}) (Version: 5.5.22560 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{3FC961DB-BD36-4D8D-B276-0C456A2BB638}) (Version: 1.4.0.441 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{F213102E-FD30-4E22-AF73-4C682D65FFEE}) (Version: 1.4.441.0 - HP Inc.)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version: - )
HP Support Assistant (HKLM-x32\...\{4AAC4B07-77EF-4BCF-88DC-D24E4DE683E8}) (Version: 8.8.34.31 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{63F82052-C045-4F97-A3CA-C41D2CCA1FFA}) (Version: 12.18.34.21 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{4B0A7A8A-ECE5-4639-9A0D-C535F354313D}) (Version: 1.4.26 - HP Inc.)
IBM SPSS Statistics 26 (HKLM\...\{1AC22BAE-DC13-4991-9910-AE3743A4592D}) (Version: 26.0.0.0 - IBM Corp)
iCloud (HKLM\...\{82FCC407-A0E5-4B80-9241-5ABA78B61090}) (Version: 7.6.0.15 - Apple Inc.)
Intel(R) Chipset Device Software (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10608.329 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4642 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1094 - Intel Corporation)
iTunes (HKLM\...\{1D7D1271-5258-4F5A-B8C1-7176BF398782}) (Version: 12.7.3.46 - Apple Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\OneDriveSetup.exe) (Version: 21.180.0905.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)
Opera Stable 79.0.4143.72 (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\Opera 79.0.4143.72) (Version: 79.0.4143.72 - Opera Software)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM-x32\...\{90160000-001F-040C-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 2021.1.0.17805 - Medixant)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.79 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.21.811.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.104 - REALTEK Semiconductor Corp.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{0BAA0A93-3AD3-4B19-9105-4C8C3FA92A83}) (Version: 2.67.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{76A22428-2400-4521-96AF-7AC4A6174CA5}) (Version: 1.25.0.0 - Microsoft Corporation) Hidden
Visual Song Book (C:\Program Files (x86)\Visual Song Book\) (HKLM-x32\...\ST6UNST #2) (Version: - )
Visual Song Book (HKLM-x32\...\ST6UNST #1) (Version: - )
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )
Zoom (HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\ZoomUMX) (Version: 5.7.1 (543) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2811.0_x64__343d40qqvtj1t [2018-07-13] (Amazon.com)
Booking.com: Big savings on hotels in 96,000 destinations worldwide -> C:\Program Files\WindowsApps\PricelinePartnerNetwork.Booking.comBigsavingsonhot_1.2.0.0_x64__mgae2k3ys4ra0 [2021-04-20] (Priceline Partner Network)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.443.0_x86__v10z8vjag6ke6 [2018-03-15] (HP Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Access 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.8.0_x86__8wekyb3d8bbwe [2018-08-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Excel 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Outlook 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft PowerPoint 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Publisher 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Studios) [MS Ad]
Microsoft Word 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16030.10325.20082.0_x86__8wekyb3d8bbwe [2018-08-07] (Microsoft Corporation)
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.93.478.0_x64__mcm4njqhnhss8 [2019-08-01] (Netflix, Inc.)
Power Media Player 14 for HP Consumer PCs with DVD -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.PowerMediaPlayer14forHPConsumerPC_14.2.8929.0_x86__06qsbagp91rvg [2018-08-05] (CYBERLINKCOM CORP)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_6.11.32.0_x64__kx24dqmazqk8j [2018-07-13] (Random Salad Games LLC) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2021-01-18] (Skype)
Synaptics TouchPad -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 [2021-02-11] (Synaptics Incorporated)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe () [File not signed]
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{06B74C04-E813-4DD4-A972-172836EFA8D6}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Update\1.3.101.0\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\localserver32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Brave-Browser\Application\94.1.30.87\notification_helper.exe (Brave Software, Inc. -> Brave Software, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{B44D78A8-8697-4893-BBB5-9F27AC670BA6}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Local\BraveSoftware\Update\1.3.101.0\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Patrick Anelia\Dropbox [2018-07-13 00:26]
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B} -> [dropbox-NamespaceExtensionRole.Business] =>
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4103905783-786974986-1128566019-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-06-26] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2019-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers1_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-4103905783-786974986-1128566019-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\DropboxExt64.49.0.dll [2021-09-25] (Dropbox, Inc -> Dropbox, Inc.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2021-10-10 00:09 - 2021-10-10 00:09 - 000160768 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\47dd482baab12dc07e34857f12533e97\BRIDGECommon.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000125440 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\e612546bdebb6b2e5d5e511e3c3c29b5\BridgeExtension.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000395264 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\c8fc7bfce790d1ec253c8b4d86d5d1ba\CleanStartController.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000138240 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\7c6cb2f28873358e87b2a36d331fe377\Interop.IWshRuntimeLibrary.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000145920 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Registratio4eabc192#\104d229b06c27b3cc4d085a413c162d9\RegistrationUtilities.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000134656 _____ (hardcodet.net) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\468f0620197b04fb8cf89469b802b6f2\Hardcodet.Wpf.TaskbarNotification.ni.dll
2021-10-10 00:13 - 2021-10-10 00:13 - 000136192 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\8209b879afce6614e9129aa77843934a\CommonPortable.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 001585664 _____ (Mark Heath) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\3e19245119ca892d5b8908ab7c6aaf28\NAudio.ni.dll
2021-10-10 00:10 - 2021-10-10 00:10 - 002306560 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\6315237efcbff0bc3974b0bb2ba7b1a1\Newtonsoft.Json.ni.dll
2021-10-10 00:16 - 2021-10-10 00:16 - 000792064 _____ (The Apache Software Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\fe4810ec05fe22b25ebec49b4d9a45ef\log4net.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ask.com?o=10148&l=dis&tb=VDJ
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4103905783-786974986-1128566019-1001 -> {140101E4-658E-4E3E-A41B-00CF6D97CA26} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=VDJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=972CE5DF-F69F-4FB8-86C6-9B4EC9072C1E&apn_sauid=CFEC5448-8775-4B9C-91D3-825B56A1DF49&
SearchScopes: HKU\S-1-5-21-4103905783-786974986-1128566019-1001 -> {1581BCEA-FB5E-4E8B-95E7-354A12945E04} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-09-29 14:46 - 2018-09-08 16:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrick Anelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "RealTimes.lnk"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "RealDownloader"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "Dropbox Update"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "BraveSoftware Update"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_E3F8CD75B0EF9971DFFC639E63CDAB0A"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-4103905783-786974986-1128566019-1001\...\StartupApproved\Run: => "YouTubeToMP3"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{A0AFC818-28F1-4C4F-B9D9-9B5CF682306C}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{07190EAC-1F89-4529-BE46-58506B966A07}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [TCP Query User{FD9260AC-826C-43FE-BAEA-91A3FD8EBD4A}C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe] => (Block) C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{901AFC8B-0DD1-4541-9656-391B1C30DCD2}C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe] => (Block) C:\users\patrick anelia\appdata\local\microsoft\onedrive\onedrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B6188FD-9F28-4C40-ACEB-F759A4486B35}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{58BCBFB1-7D44-4BF5-8FC8-0FBFCB2FD6C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{39BA7424-B62D-459A-A55B-3224F26692F7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BC46322A-C522-4098-A9D3-33522FBAEE1A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{021AD0DF-9C66-4E99-B61D-EE222C481B81}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{80289CD2-34A9-49B6-9300-7330B2F35F3F}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8105604E-6384-46E0-9285-B194EA67C474}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A1AD0315-6286-4274-86DB-BFF79FDDEF96}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2D25CA8B-39F3-439F-965A-DE0E319B34D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6C7E1C1D-171E-4A32-8252-BD329E0D5362}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D4071DE6-1899-4B05-94D0-29F52CC87A4F}] => (Allow) C:\Program Files\AVG\Antivirus\AvEmUpdate.exe => No File
FirewallRules: [{F5E80B87-D9E1-4D2F-B861-37E83B2F7070}] => (Allow) C:\Program Files\AVG\Antivirus\AvEmUpdate.exe => No File
FirewallRules: [{65EC659B-697F-44D0-9353-DAD5743BFD4F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\76.0.4017.107\opera.exe => No File
FirewallRules: [{FADACF10-98C8-44D1-9117-154E03313E59}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{32CED761-842B-49CA-860D-552823AF84C7}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{E7A05963-04C1-40A6-B3A1-0A598C48D5CA}] => (Allow) C:\Users\Patrick Anelia\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{EFD30FAA-59E7-4F43-A814-23AB3652618F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\78.0.4093.147\opera.exe => No File
FirewallRules: [{17896FDA-56C4-4FD2-9597-136F5C13433F}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\79.0.4143.50\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{B22806DC-8922-4C58-8EDB-7F43A8374556}] => (Allow) C:\Users\Patrick Anelia\AppData\Local\Programs\Opera\79.0.4143.72\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{36E850FF-E84D-4DD1-97D4-866CDB22FB12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D4652219-2F76-4B30-93F0-393B54044AFD}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{6213A2A3-7BCE-4BEB-ACA1-C9A4D62C3470}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{A321E059-1D3F-43B1-AE06-9B78F6AF2A7D}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{8EF789C5-98B4-495F-8A79-A709EE20D146}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{650F018D-E29B-41B1-87BB-E6CDFC04272C}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{734C8FA8-E316-4E4B-9FB7-1F40C9A9A2EC}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\26\stats.exe (International Business Machines Corporation -> IBM Corp.)
==================== Restore Points =========================
14-10-2021 19:00:55 Removed Symantec Endpoint Protection.
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (10/14/2021 07:23:23 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe".Error in manifest or policy file "C:\Users\Patrick Anelia\AppData\Roaming\Dropbox\bin\Dropbox.exe" on line 0.
Invalid Xml syntax.
Error: (10/14/2021 07:18:24 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (10/14/2021 07:18:24 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (10/14/2021 07:17:33 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
Error: (10/14/2021 07:12:46 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
Error: (10/14/2021 06:57:06 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: LAPTOP-UN06NA71)
Description: Application or service 'RealPlayer Update Service' could not be restarted.
Error: (10/14/2021 06:54:13 PM) (Source: Symantec AntiVirus) (EventID: 73) (User: )
Description: Event-ID 73
Error: (10/14/2021 06:53:56 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
System errors:
=============
Error: (10/14/2021 07:21:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The McAPExe service failed to start due to the following error:
The system cannot find the file specified.
Error: (10/14/2021 07:18:04 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UN06NA71)
Description: The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.
Error: (10/14/2021 07:14:03 PM) (Source: Tcpip) (EventID: 4207) (User: )
Description: The IPv6 TCP/IP interface with index 23 failed to bind to its provider.
Error: (10/14/2021 07:14:03 PM) (Source: Tcpip) (EventID: 4207) (User: )
Description: The IPv4 TCP/IP interface with index 23 failed to bind to its provider.
Error: (10/14/2021 07:13:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Symantec Endpoint Protection service terminated unexpectedly. It has done this 1 time(s).
Error: (10/14/2021 06:48:35 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT AUTHORITY)
Description: Miniport Apple Mobile Device Ethernet #4, {ac3ec1e6-45c0-4d0c-920f-4e75d6f8c01d}, had event 76
Error: (10/14/2021 06:45:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The McAPExe service depends on the mfevtp service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (10/14/2021 06:45:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The mfemms service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Windows Defender:
================
Date: 2021-02-06 21:46:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2021-10-14 19:56:24
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.1769.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
CodeIntegrity:
===============
Date: 2021-10-14 19:14:17
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.760.0000.105\Bin\WSCSAvNotifier.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2021-10-14 19:12:27
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.760.0000.105\Bin\Smc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Insyde F.34 01/25/2018
Motherboard: HP 832C
Processor: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Percentage of memory in use: 73%
Total physical RAM: 4001.58 MB
Available physical RAM: 1053.41 MB
Total Virtual: 5473.58 MB
Available Virtual: 2449.3 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:449.73 GB) (Free:98.45 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:14.79 GB) (Free:1.75 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (HiSuite) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
\\?\Volume{d384cb26-142a-473b-bf9c-fe181b610c43}\ () (Fixed) (Total:0.96 GB) (Free:0.35 GB) NTFS
\\?\Volume{a6e497fa-a711-4d86-afba-c1f02e201646}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 686676BF)
Partition: GPT.
==================== End of Addition.txt =======================