Threat has been detected

system · 2015-06-22T20:20:39.000Z

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-22 21:02 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\sru
2015-06-22 21:01 - 2014-11-19 21:05 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Skype
2015-06-22 20:58 - 2014-11-18 21:29 - 00000000 ____D C:\Users\Andy\AppData\Local\Pokki
2015-06-22 20:43 - 2014-11-18 21:52 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-22 20:43 - 2013-12-13 22:39 - 01507618 _____ C:\windows\WindowsUpdate.log
2015-06-22 20:16 - 2015-05-05 21:01 - 00004956 _____ C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ANDYB-Andy AndyB
2015-06-22 20:16 - 2014-11-28 00:55 - 00000000 __SHD C:\Users\Andy\AppData\Local\EmieBrowserModeList
2015-06-22 20:16 - 2014-11-25 19:50 - 00000000 __SHD C:\Users\Andy\AppData\Local\EmieUserList
2015-06-22 20:16 - 2014-11-25 19:50 - 00000000 __SHD C:\Users\Andy\AppData\Local\EmieSiteList
2015-06-22 19:07 - 2014-11-18 21:39 - 00003910 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{F86E7D95-7EBA-4E82-8488-02425C2010A8}
2015-06-22 19:01 - 2014-11-19 21:11 - 00000000 ___RD C:\Users\Andy\Dropbox
2015-06-22 19:01 - 2014-11-19 21:07 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Dropbox
2015-06-22 19:00 - 2014-11-18 23:03 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-22 18:59 - 2014-11-24 22:02 - 00000526 ____H C:\windows\Tasks\SoftwareProvider-S-394265216.job
2015-06-22 18:59 - 2014-11-22 23:12 - 00000000 __RDO C:\Users\Andy\OneDrive
2015-06-22 18:58 - 2013-08-22 15:46 - 00042777 _____ C:\windows\setupact.log
2015-06-22 18:58 - 2013-08-22 15:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-21 23:41 - 2013-12-13 23:16 - 00027136 _____ C:\windows\system32\VfService.trf
2015-06-21 22:36 - 2014-11-18 21:37 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3031754157-338325955-3198346124-1002
2015-06-21 22:24 - 2013-10-07 19:23 - 00082576 _____ C:\windows\PFRO.log
2015-06-21 19:26 - 2013-10-07 19:27 - 00865408 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-21 19:20 - 2013-08-22 14:25 - 00262144 ___SH C:\windows\system32\config\BBI
2015-06-20 18:33 - 2013-08-22 16:36 - 00000000 ____D C:\windows\AppReadiness
2015-06-20 17:30 - 2015-01-10 22:26 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-20 17:30 - 2015-01-10 22:25 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-20 17:29 - 2014-11-25 19:52 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-06-20 17:29 - 2014-11-25 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-06-20 17:29 - 2014-11-25 19:52 - 00000000 ____D C:\Program Files\WinRAR
2015-06-19 23:08 - 2013-08-22 16:36 - 00000000 ____D C:\windows\rescache
2015-06-19 19:24 - 2015-03-07 18:07 - 00000000 ____D C:\ProgramData{51ed5111-b074-b87d-51ed-d5111b074446}
2015-06-18 19:53 - 2014-11-19 00:56 - 00000000 ____D C:\ProgramData\Skype
2015-06-16 19:56 - 2014-11-20 22:19 - 00000000 ____D C:\windows\system32\MRT
2015-06-16 19:46 - 2014-11-20 22:19 - 140135120 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-06-16 00:12 - 2014-11-18 23:05 - 00000000 ____D C:\Users\Andy\AppData\Roaming\BitComet
2015-06-11 00:34 - 2014-12-13 20:46 - 00000000 ____D C:\windows\system32\appraiser
2015-06-11 00:34 - 2014-11-28 00:33 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-11 00:34 - 2013-08-22 16:36 - 00000000 ___RD C:\windows\ToastData
2015-06-10 20:11 - 2013-08-22 16:20 - 00000000 ____D C:\windows\CbsTemp
2015-06-10 19:15 - 2013-08-22 15:44 - 00492000 _____ C:\windows\system32\FNTCACHE.DAT
2015-06-09 23:59 - 2013-08-22 16:36 - 00000000 ____D C:\windows\PolicyDefinitions
2015-06-08 20:41 - 2013-08-22 16:36 - 00000000 ____D C:\windows\Speech
2015-06-08 19:47 - 2014-11-18 21:52 - 00001125 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-08 19:47 - 2014-11-18 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-08 19:47 - 2014-11-18 21:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-05 19:20 - 2014-11-24 22:01 - 00000000 ____D C:\ProgramData\18041650861050864990
2015-06-03 17:18 - 2014-11-28 00:36 - 00792568 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-06-03 17:18 - 2014-11-28 00:36 - 00178168 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-01 19:16 - 2014-11-18 21:33 - 00002283 _____ C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-05-31 22:43 - 2014-11-18 21:42 - 00000000 ____D C:\Users\Andy\AppData\Local\CrashDumps
2015-05-23 12:15 - 2015-05-21 20:47 - 00027579 _____ C:\Users\Andy\Documents\Eurovision Spreadsheet.xlsx
2015-05-23 11:29 - 2014-11-19 00:56 - 00000000 ___RD C:\Program Files (x86)\Skype

==================== Files in the root of some directories =======

2015-06-05 19:20 - 2015-06-22 19:59 - 0000024 _____ () C:\Users\Andy\AppData\Roaming\appdataFr25.bin
2015-03-18 22:37 - 2015-05-12 19:53 - 0000020 _____ () C:\Users\Andy\AppData\Roaming\appdataFr3.bin
2014-11-18 23:57 - 2014-11-18 23:57 - 1249792 _____ (http://www.ruby-lang.org/) C:\Users\Andy\AppData\Roaming\msvcr90-ruby191.dll
2015-05-12 20:19 - 2015-05-12 20:19 - 0000000 _____ () C:\Users\Andy\AppData\Local\Temp.dat
2013-12-13 22:48 - 2013-12-13 22:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:

C:\Users\Andy\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgu9czm.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-06-19 21:58

==================== End of log ============================

system · 2015-06-22T20:22:34.000Z

Additional scan result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
Ran by Andy at 2015-06-22 21:15:52
Running from C:\Users\Andy\Downloads
Boot Mode: Normal

==================== Accounts: =============================

Administrator (S-1-5-21-3031754157-338325955-3198346124-500 - Administrator - Disabled)
Andy (S-1-5-21-3031754157-338325955-3198346124-1002 - Administrator - Enabled) => C:\Users\Andy
Guest (S-1-5-21-3031754157-338325955-3198346124-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-3031754157-338325955-3198346124-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with “hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Reader XI (11.0.11) (HKLM-x32.…{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
ALPS Touch Pad Driver (HKLM.…{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.1611.210 - Alps Electric)
Apple Application Support (32-bit) (HKLM-x32.…{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM.…{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM.…{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32.…{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32.…\Avast) (Version: 10.2.2218 - AVAST Software)
BitComet 1.37 64-bit (HKLM-x32.…\BitComet_x64) (Version: 1.37 - CometNetwork)
Bonjour (HKLM.…{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink PhotoDirector 3 (HKLM-x32.…\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32.…\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)
CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) Hidden
Dolby Digital Plus Home Theater (HKLM.…{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-3031754157-338325955-3198346124-1002.…\Dropbox) (Version: 3.6.7 - Dropbox, Inc.)
Energy Manager (HKLM-x32.…\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.31 - Lenovo)
Energy Manager (x32 Version: 1.0.0.31 - Lenovo) Hidden
Football Manager 2015 (HKLM-x32.…\Steam App 295270) (Version: - Sports Interactive)
Google Chrome (HKLM-x32.…\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Host App Service (HKU\S-1-5-21-3031754157-338325955-3198346124-1002.…\Pokki) (Version: 0.269.7.660 - Pokki)
Intel(R) Management Engine Components (HKLM-x32.…{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32.…{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4156 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM.…{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32.…{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
iTunes (HKLM.…{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 31 (HKLM-x32.…{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32.…{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Lenovo App Shop (HKLM-x32.…\Lenovo App Shop 45246) (Version: 3.10.0.45246.24 - Lenovo)
Lenovo EasyCamera (HKLM-x32.…{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10240 - Realtek Semiconductor Corp.)
Lenovo OneKey Recovery (HKLM-x32.…\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.2105 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32.…\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.5630.52 - CyberLink Corp.) Hidden
Lenovo VeriFace (HKLM.…\Lenovo VeriFace) (Version: 5.0.13.5261 - Lenovo)
LG PC Suite (HKLM-x32.…\LG PC Suite) (Version: 5.3.24.20150327 - LG Electronics)
LG United Mobile Drivers (HKLM-x32.…{2D5218EB-6992-46E3-8ECE-76C79AB955CE}) (Version: 3.13.2.0 - LG Electronics)
Logitech SetPoint 6.65 (HKLM.…\sp6) (Version: 6.65.62 - Logitech)
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32.…\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft Office 365 ProPlus - en-us (HKLM.…\O365ProPlusRetail - en-us) (Version: 15.0.4719.1002 - Microsoft Corporation)
Microsoft Silverlight (HKLM.…{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32.…{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32.…{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM.…{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM.…{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32.…{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32.…{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32.…{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM.…{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32.…{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM.…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA GeForce Experience 1.6 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6 - NVIDIA Corporation)
NVIDIA Graphics Driver 327.62 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4719.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4719.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4719.1002 - Microsoft Corporation) Hidden
Onekey Theater (HKLM-x32.…{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.2 - Lenovo)
Power2Go (HKLM-x32.…{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.10525 - CyberLink Corp.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM.…{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32.…{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32.…{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32.…{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.18.621.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32.…{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32.…{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32.…{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SopCast 3.5.0 (HKLM-x32.…\SopCast) (Version: 3.5.0 - www.sopcast.com)
Spotify (HKU\S-1-5-21-3031754157-338325955-3198346124-1002.…\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB)
Start Menu (HKU\S-1-5-21-3031754157-338325955-3198346124-1002.…\Pokki_Start_Menu) (Version: 0.269.7.660 - Pokki)
Steam (HKLM-x32.…\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamTorrent 1.0 (HKLM-x32.…\StreamTorrent 1.0) (Version: - )
UserGuide (HKLM-x32.…\InstallShield{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
UserGuide (x32 Version: 1.0.0.15 - Lenovo) Hidden
Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM.…\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM.…\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
WinRAR 5.21 (64-bit) (HKLM.…\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

system · 2015-06-22T20:23:32.000Z

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 → C:\windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 → C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 → C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3031754157-338325955-3198346124-1002_Classes\CLSID{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

==================== Restore Points =========================

04-06-2015 21:28:08 Scheduled Checkpoint
09-06-2015 19:17:28 Windows Update
12-06-2015 19:53:33 Windows Update
15-06-2015 20:26:20 Windows Update
19-06-2015 18:51:45 avast! antivirus system restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B589DAA-CB87-46FC-BC21-5199E69AEB6F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {0BF38806-35A5-44C3-A196-8235F24E3611} - System32\Tasks\Microsoft Office 15 Sync Maintenance for ANDYB-Andy AndyB => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-03-10] (Microsoft Corporation)
Task: {169C218E-069C-4213-B225-135C8A10940F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {340F0305-3581-44A6-B48C-B7F0FA3AED0D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {41AB895C-37DD-444A-9CBB-E31633BBF963} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {4654C63F-6408-4354-AB7C-E192D0C76203} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-14] (Microsoft Corporation)
Task: {49D9217A-97F1-4197-B2CC-C3F9A0CAE46D} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-15] (Microsoft Corporation)
Task: {5625E8C6-3375-4476-99C6-43E45419C8BF} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {5937C814-3ECF-4E8C-8344-17769BF271BB} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {667FE7B5-C816-49B8-AA7C-448E32ACE132} - System32\Tasks\SoftwareProvider-S-394265216 => c:\programdata\trusted publisher\systemupgrader\SoftwareProvider.exe <==== ATTENTION
Task: {6F15E9D6-8676-4791-9E4E-8D314ADED93D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-06-16] (Microsoft Corporation)
Task: {7222744C-4263-40EA-BDE0-FEA15082AE7D} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-09] (CyberLink Corp.)
Task: {74D2EFA9-3E02-4FF8-B5EC-1C350356D3B6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-14] (Microsoft Corporation)
Task: {86C76842-9B8C-4AF8-9729-6AE2D08C4D68} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3031754157-338325955-3198346124-1002Core => C:\Users\Andy\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A65A27DC-E5EA-41AF-9D1A-AFE0A684A545} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3031754157-338325955-3198346124-1002UA => C:\Users\Andy\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A75C81C8-5E72-4885-8DA6-CC26B0A932D7} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {B24862E1-C88E-4192-BB9C-3B65EAD43BDE} - System32\Tasks\avastBCLRestart_chrome.exe => Chrome.exe
Task: {B3EFACE7-5CB2-4DF0-A85F-7D63E478CB0D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-03-10] (Microsoft Corporation)
Task: {BA4AFC4B-1E81-4127-9626-971BB18BED6C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-05-15] (Microsoft Corporation)
Task: {BDF501A1-B674-420C-9532-8BFC283C7AAC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {BE0BF9FE-82FC-42EF-BB30-C8AEE9B319F6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {E1466A2C-6B7F-405D-B384-594F90268C47} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {E92FC764-CF9D-4BA0-83C1-220B64D688D8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {F22F64BA-B6DC-44C8-9027-FD906A727945} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {F232CB57-2E64-484C-9E84-1249FA270230} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {FFAF7D97-1E89-4272-8A72-ECC5E6A16075} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-03-10] (Microsoft Corporation)
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3031754157-338325955-3198346124-1002Core.job => C:\Users\Andy\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3031754157-338325955-3198346124-1002UA.job => C:\Users\Andy\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\SoftwareProvider-S-394265216.job => c:\programdata\trusted publisher\systemupgrader\SoftwareProvider.exeS/schedule /profile c:\programdata\trusted publisher\systemupgrader\394265216.ini <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-03-10 22:43 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-12-13 23:13 - 2012-04-24 11:43 - 00390632 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2013-12-13 23:16 - 2013-12-13 23:16 - 00068368 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
2013-12-13 23:16 - 2013-12-13 23:16 - 00669288 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfDataStorageInterface.dll
2015-03-10 22:49 - 2015-03-10 22:49 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-09-07 10:48 - 2013-09-07 10:48 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 10:45 - 2013-09-07 10:45 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 10:52 - 2013-09-07 10:52 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2015-01-20 23:35 - 2015-01-20 23:35 - 00306984 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxslt.dll
2015-06-19 18:54 - 2015-06-19 18:54 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-06-19 18:54 - 2015-06-19 18:54 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-06-21 18:45 - 2015-06-21 18:45 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15062101\algo.dll
2015-06-22 20:02 - 2015-06-22 20:02 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15062203\algo.dll
2014-11-18 23:05 - 2015-04-16 18:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-21 20:32 - 2015-04-23 03:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2014-11-18 23:05 - 2015-06-04 19:56 - 02407104 _____ () C:\Program Files (x86)\Steam\video.dll
2015-01-21 20:32 - 2015-04-23 03:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-21 20:32 - 2015-04-23 03:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-11-18 23:05 - 2014-12-01 22:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-11-18 23:05 - 2014-12-01 22:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-11-18 23:05 - 2014-12-01 22:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-11-18 23:05 - 2014-12-01 22:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-11-18 23:05 - 2014-12-01 22:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-11-18 23:05 - 2015-06-04 19:56 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-06-16 20:28 - 2015-06-17 20:11 - 41287224 _____ () C:\Users\Andy\AppData\Roaming\Spotify\libcef.dll
2015-04-28 21:15 - 2015-04-28 21:15 - 00569856 _____ () C:\Users\Andy\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll
2015-04-28 21:15 - 2015-04-28 21:15 - 01400846 _____ () C:\Users\Andy\AppData\Local\Pokki\Engine\avcodec-54.dll
2015-04-28 21:15 - 2015-04-28 21:15 - 00151054 _____ () C:\Users\Andy\AppData\Local\Pokki\Engine\avutil-51.dll
2015-04-28 21:15 - 2015-04-28 21:15 - 00222734 _____ () C:\Users\Andy\AppData\Local\Pokki\Engine\avformat-54.dll
2015-06-22 19:00 - 2015-06-22 19:00 - 00043008 _____ () c:\users\andy\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgu9czm.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00750080 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00047616 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00865280 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00200704 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00010240 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00726016 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-03-04 22:45 - 2015-03-19 08:15 - 00010240 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-06-19 18:54 - 2015-06-19 18:54 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-06-16 20:28 - 2015-06-17 20:11 - 01488440 _____ () C:\Users\Andy\AppData\Roaming\Spotify\libglesv2.dll
2015-06-16 20:28 - 2015-06-17 20:11 - 00079928 _____ () C:\Users\Andy\AppData\Roaming\Spotify\libegl.dll
2014-11-18 23:05 - 2015-05-11 20:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-12-13 22:45 - 2013-08-19 19:12 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-11-18 21:41 - 2014-11-14 22:15 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\libglesv2.dll
2014-11-18 21:41 - 2014-11-14 22:15 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\libegl.dll
2014-11-18 21:41 - 2014-11-14 22:15 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\pdf.dll
2014-11-18 21:41 - 2014-11-14 22:15 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\ffmpegsumo.dll
2014-11-18 21:41 - 2014-11-14 22:15 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\PepperFlash\pepflashplayer.dll

system · 2015-06-22T20:24:11.000Z

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\Users\Andy\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Andy\SkyDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The “AlternateShell” will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => “”=“”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => “”=“”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => “”=“Driver”

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3031754157-338325955-3198346124-1002.…\sharepoint.com → hxxps://delacyacademyorg.sharepoint.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3031754157-338325955-3198346124-1002\Control Panel\Desktop\Wallpaper → C:\Users\Andy\Pictures\Pictures\Luke\September, October & November 2014\IMG_20140904_155506459.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{8D20BB07-8E45-46AA-81AB-F3679D95B389}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{4BBCCBA1-DDA1-4DE5-A5CD-A26488DDD170}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{67DEC0F1-0171-4A92-AECF-E4BE47C00D92}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{227DFBA4-84F4-4358-86ED-9C4A780CAA74}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{4A59B2AB-B711-495C-B17E-D3A506C8D251}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{2A5E12F6-26A1-4AB6-8E18-4289567BC474}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{0B32258B-C810-4139-87AA-B85BBC5747F9}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{1CC050FB-1D8C-4C73-81DA-00200E10E4B7}] => (Allow) C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe
FirewallRules: [{6777B677-4649-41B6-BBF2-F98B6FE6DB85}] => (Allow) C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismloader.exe
FirewallRules: [{FB8A5DAE-ABFD-4A20-880D-9B697812B234}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{943940EB-FC35-411E-98A5-E241FF6293BA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4C0C6D06-3212-493E-8CFA-29A7CE94CBF1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2D415595-2624-42CC-9004-DCF3DD78C449}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2368ABD4-EE31-4265-8A40-26BA4849AD6D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{655E558C-824A-4149-B57B-839E7DC7EEDD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{153362C3-A453-46EC-847C-C08A339F4F15}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B9D3D3DE-F785-49EA-924E-11F6BAE77675}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{7B0E6F77-3F0C-46DD-B4F3-3CD6BADC2C01}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{18FE7D02-1D2A-45AF-A28E-BBDFE1BB3004}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{1AE61420-73BA-4EE5-9293-1CD21A4C5FCA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D983045C-AFE8-4320-AFC9-14F793C777A8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Football Manager 2015\fm.exe
FirewallRules: [{C47CAB79-D6EF-49AA-97DE-002BE2BE060D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Football Manager 2015\fm.exe
FirewallRules: [{106572FB-7DB0-4093-BA92-AB025970E094}] => (Allow) C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E1EF6572-E5E7-409E-BC25-10F15A10A21C}] => (Allow) C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{9D8492FA-FB59-495B-B0CE-3802F1B96CBC}C:\users\andy\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\andy\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{37E1CB60-696D-4246-9161-15D391E881A6}C:\users\andy\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\andy\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{435A0FA0-9DAA-4295-9F94-CC56A7138A5A}] => (Allow) C:\Users\Andy\AppData\Local\Temp\nseAA2A.tmp\CnetInstaller-10971016.exe
FirewallRules: [{5063BA5D-9AA0-4DE5-9F47-F656B12F3085}] => (Allow) C:\Users\Andy\AppData\Local\Temp\nseAA2A.tmp\CnetInstaller-10971016.exe
FirewallRules: [TCP Query User{966D6870-9263-4C67-B14B-932524D51F2C}C:\users\andy\appdata\roaming\torrentstream\engine\tsengine.exe] => (Block) C:\users\andy\appdata\roaming\torrentstream\engine\tsengine.exe
FirewallRules: [UDP Query User{4DDC1E95-FFE3-43BC-BCFC-0330FFA21D9E}C:\users\andy\appdata\roaming\torrentstream\engine\tsengine.exe] => (Block) C:\users\andy\appdata\roaming\torrentstream\engine\tsengine.exe
FirewallRules: [TCP Query User{49940B07-D704-495A-B3B4-5BE614D7C7B5}C:\program files (x86)\streamtorrent 1.0\streamtorrent.exe] => (Allow) C:\program files (x86)\streamtorrent 1.0\streamtorrent.exe
FirewallRules: [UDP Query User{4C79E121-9F33-4D68-A836-CB7D090A9FB9}C:\program files (x86)\streamtorrent 1.0\streamtorrent.exe] => (Allow) C:\program files (x86)\streamtorrent 1.0\streamtorrent.exe
FirewallRules: [TCP Query User{EDDC5430-11C3-4404-9EC3-E9DF1C70ED50}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [UDP Query User{85F9C39A-F2FB-4FAF-BF8A-ACABF7BB4D73}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{7A97D459-58C9-4187-8C94-40B5A46B9023}C:\users\andy\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\andy\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{3451A56A-42B9-4BBA-8F11-CAF38812E5F5}C:\users\andy\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\andy\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{91FE0DBA-7763-4524-8255-999E545C5473}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{E93FE9F7-FEF2-4239-908E-0F08E79F7F46}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{10F5E71B-4234-4CB3-95EC-AB3977AF931A}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{8AB0A820-B4D3-4A6E-A26B-1DFAE4582ADB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{12F1D014-DA20-411E-8D59-CA4FD2877123}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{FF778922-1C9A-492D-A598-7BE44A105088}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{B47C930B-90E4-49C3-B3A0-065CFB527365}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{ACC56A68-7BE1-46C9-A3CC-F0CB2C1FCDA2}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{5BF33CC7-2F5D-4368-8354-C2B4555E2566}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{24CC944B-3C05-452F-B805-592A108C73FA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{71659CBB-9D54-4999-B962-E258064657DB}C:\users\andy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andy\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E5520B05-10A3-4621-B208-5367FE1C5AE5}C:\users\andy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andy\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{71AF7309-FA35-4FAE-9777-E14C0FD4C578}C:\users\andy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andy\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{8A571607-2B4F-484F-B0EE-FABAB8BC87EC}C:\users\andy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andy\appdata\roaming\spotify\spotify.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

Error: (06/22/2015 08:11:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/22/2015 07:59:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/22/2015 07:10:07 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/22/2015 07:08:20 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -2143485933

Error: (06/22/2015 07:08:20 PM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x5; CorrelationId: {4F438DEE-6ABC-4E78-A4BB-516079219BB7}

Error: (06/22/2015 07:06:56 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/22/2015 07:01:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/21/2015 10:56:37 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/21/2015 10:28:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Error: (06/21/2015 10:27:37 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1”.Error in manifest or policy file “C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2” on line C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Component 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

system · 2015-06-22T20:24:26.000Z

System errors:

Error: (06/22/2015 07:00:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/21/2015 11:41:31 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (06/21/2015 10:26:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/21/2015 07:24:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/21/2015 07:17:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (06/21/2015 06:47:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/20/2015 10:52:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (06/20/2015 10:48:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/20/2015 05:15:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (06/20/2015 09:22:52 AM) (Source: DCOM) (EventID: 10010) (User: ANDYB)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

Microsoft Office:

Error: (06/22/2015 08:11:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/22/2015 07:59:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/22/2015 07:10:07 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/22/2015 07:08:20 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -2143485933

Error: (06/22/2015 07:08:20 PM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x5; CorrelationId: {4F438DEE-6ABC-4E78-A4BB-516079219BB7}

Error: (06/22/2015 07:06:56 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/22/2015 07:01:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/21/2015 10:56:37 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/21/2015 10:28:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (06/21/2015 10:27:37 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

CodeIntegrity Errors:

Date: 2015-06-19 18:56:56.472
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:34.058
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:29.055
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:25.020
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:23.797
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:23.245
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:22.142
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:21.733
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:21.157
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-06-19 18:56:20.543
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core™ i7-4702MQ CPU @ 2.20GHz
Percentage of memory in use: 35%
Total physical RAM: 8104.27 MB
Available physical RAM: 5230.88 MB
Total Pagefile: 9384.27 MB
Available Pagefile: 6122.53 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:891.85 GB) (Free:802.6 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 0B19A8A9)

Partition: GPT Partition Type.

==================== End of log ============================

system · 2015-06-22T20:25:04.000Z

Phew…there…think that’s it all. Any help much appreciated.

system · 2015-06-22T20:31:07.000Z

Funnily enough, the warning sound of “threat has been detected” hasn’t gone off for a while. I did clear the cookies and temp files just before starting this thread, and the warning sound did go off once on opening a new page. But there’s been nothing since then. Typical haha.

TwinHeadedEagle · 2015-06-22T20:55:15.000Z

Please Attach report, do not copy paste. Thanks

system · 2015-06-22T20:57:09.000Z

Sorry, thought I had to copy it in. Should I attach it now? I closed it down once I’d copied it, but I can scan it again.

Like I put in the post above, the warning hasn’t sounded since before the thread was started, so maybe that clearing of cookies and temp files has done something???

TwinHeadedEagle · 2015-06-22T20:58:13.000Z

Attach only FRST reports.

system · 2015-06-22T21:05:43.000Z

Have I done this correctly?

TwinHeadedEagle · 2015-06-22T21:06:14.000Z

Yeap, just attach Addition.txt and we can start.

system · 2015-06-22T21:11:36.000Z

Here’s the additions log.

TwinHeadedEagle · 2015-06-22T21:55:03.000Z

Google Chrome is altered, you need to reinstall it when we finish with disinfection.

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

system · 2015-06-22T22:26:48.000Z

Here you go.

TwinHeadedEagle · 2015-06-23T05:59:59.000Z

How is your PC behaving now?

system · 2015-06-23T18:28:36.000Z

It’s still coming up with the warnings.

system · 2015-06-23T18:45:22.000Z

I haven’t uninstalled and then reinstalled chrome or anything yet, should I do that now? Even when the warnings are still coming up now?

system · 2015-06-23T21:09:56.000Z

Update - the warnings only seemed to go off a lot when I first booted up the laptop again earlier, like I put in the post just before this. For the last couple of hours I haven’t had the warning go off once.

TwinHeadedEagle · 2015-06-24T09:07:01.000Z

You need to reinstall Chrome.

Announcements