Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09.12.2018
Ran by Delacia (16-12-2018 15:34:49)
Running from C:\Users\Delacia\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) (2016-12-26 04:42:53)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-258222910-2402859807-2480419078-500 - Administrator - Disabled)
Delacia (S-1-5-21-258222910-2402859807-2480419078-1000 - Administrator - Enabled) => C:\Users\Delacia
Delacia_2 (S-1-5-21-258222910-2402859807-2480419078-1001 - Limited - Enabled) => C:\Users\Delacia_2
Guest (S-1-5-21-258222910-2402859807-2480419078-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveCheck component for HP Active Support Library (HKLM\...\{254C37AA-6B72-4300-84F6-98A82419187E}) (Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.45.2 - Adobe Systems Incorporated)
Adobe Reader 9.3 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM\...\{D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}) (Version: 11.5.1.601 - Adobe Systems, Inc.)
ArcSoft WebCam Companion 3 (HKLM\...\{34985F59-8F6F-46F4-9AD5-53E2714294D2}) (Version: 3.0.189 - ArcSoft)
Bejeweled 2 Deluxe (HKLM\...\WT082192) (Version: 2.2.0.82 - WildTangent) Hidden
Blasterball 3 (HKLM\...\WT082124) (Version: 2.2.0.82 - WildTangent) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.50 - Piriform)
Chuzzle Deluxe (HKLM\...\WT082200) (Version: 2.2.0.82 - WildTangent) Hidden
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2529 - CyberLink Corp.)
Dashlane (HKU\S-1-5-21-258222910-2402859807-2480419078-1000\...\Dashlane) (Version: 6.1848.0.15588 - Dashlane, Inc.)
Diner Dash 2 Restaurant Rescue (HKLM\...\WT082396) (Version: 2.2.0.82 - WildTangent) Hidden
Dream Chronicles (HKLM\...\WT083521) (Version: 2.2.0.82 - WildTangent) Hidden
ESU for Microsoft Windows 7 (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Faerie Solitaire (HKLM\...\WT082442) (Version: 2.2.0.82 - WildTangent) Hidden
FATE (HKLM\...\WT082141) (Version: 2.2.0.82 - WildTangent) Hidden
Gem Shop (HKLM\...\WT083529) (Version: 2.2.0.82 - WildTangent) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.80 - WildTangent)
HP HomeBase (HKLM\...\{4F22707C-C8E4-4BC8-881C-FAAB2EF5914B}) (Version: 3.2.2.70 - ArcSoft)
HP Quick Launch (HKLM\...\{40C915B0-F2A0-423D-BEDF-04D3CE4D4DC5}) (Version: 2.0.10 - Hewlett-Packard Company)
HP QuickSync (HKLM\...\{DB23EB2A-5137-4FA0-9A90-AAAABE4AADBA}) (Version: 5.5.609.9414 - Hewlett-Packard)
HP QuickWeb Installer (HKLM\...\{394FA67A-FF0A-4356-BB77-D85E5A300BDE}) (Version: 1.2.16.0 - DeviceVM Inc.)
HP Setup (HKLM\...\{E2831862-F131-4327-B9CC-FA30F587EB6C}) (Version: 1.2.3988.3281 - Hewlett-Packard)
HP Software Framework (HKLM\...\{DA200FDD-DE3D-4958-8465-C4FBC869544B}) (Version: 3.5.20.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM\...\{B60DCA15-56A3-4D2D-8747-22CF7D7B588B}) (Version: 4.4.6.3 - Hewlett-Packard)
HP Update (HKLM\...\{D46D081B-F60E-467E-A7C4-117B70D76731}) (Version: 5.001.000.014 - Hewlett-Packard)
HP User Guides 0214 (HKLM\...\{6590DC16-A0D3-4397-9A91-C4E8836E40A4}) (Version: 1.00.0000 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{EC720706-3F19-4B7F-BDDD-E31D9B3921D2}) (Version: 4.0.6.0 - Hewlett-Packard)
HPAsset component for HP Active Support Library (HKLM\...\{669D4A35-146B-4314-89F1-1AC3D7B88367}) (Version: 3.0.2.2 - Hewlett-Packard) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6272.0 - IDT)
Insaniquarium Deluxe (HKLM\...\WT082222) (Version: 2.2.0.82 - WildTangent) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
Java(TM) 6 Update 18 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.)
Jewel Match 2 (HKLM\...\WT083503) (Version: 2.2.0.82 - WildTangent) Hidden
Jewel Quest II (HKLM\...\WT083514) (Version: 2.2.0.82 - WildTangent) Hidden
Jewel Quest Solitaire (HKLM\...\WT083510) (Version: 2.2.0.82 - WildTangent) Hidden
JoJo's Fashion Show (HKLM\...\WT083489) (Version: 2.2.0.82 - WildTangent) Hidden
Junk Mail filter update (HKLM\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Mahjongg Artifacts (HKLM\...\WT082409) (Version: 2.2.0.82 - WildTangent) Hidden
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Penguins! (HKLM\...\WT082168) (Version: 2.2.0.82 - WildTangent) Hidden
Plants vs. Zombies (HKLM\...\WT082170) (Version: 2.2.0.82 - WildTangent) Hidden
Polar Bowler (HKLM\...\WT082172) (Version: 2.2.0.82 - WildTangent) Hidden
Power2Go (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.) Hidden
Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.)
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0010 - Realtek)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30113 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.2725 - CyberLink Corp.) Hidden
Slingo Deluxe (HKLM\...\WT082427) (Version: 2.2.0.82 - WildTangent) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.27.1 - Synaptics Incorporated)
Times Reader (HKLM\...\{491ADA37-04EE-2ECE-9F86-DDC0106047AC}) (Version: 2.055 - The New York Times Company) Hidden
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Virtual Villagers - The Secret City (HKLM\...\WT082241) (Version: 2.2.0.82 - WildTangent) Hidden
Wedding Dash (HKLM\...\WT082422) (Version: 2.2.0.82 - WildTangent) Hidden
Windows 7 Upgrade Advisor (HKLM\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Zuma Deluxe (HKLM\...\WT082246) (Version: 2.2.0.82 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2010-10-25] (Intel Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {3715781E-9678-44B2-B8BA-5BEF9D1F4A3D} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {3CE27D8E-B79F-45A1-B8CE-7169FFADE6AC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-01-28] (Google Inc.)
Task: {3D8D1F75-11FB-4CE7-B263-571E5D2FC67C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-11-28] (Piriform Ltd)
Task: {4C63AF35-DCAF-4091-915D-05EECC71CCD4} - System32\Tasks\Hewlett-Packard\HP Assistant\HPSA Upgrade => C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe
Task: {4E1788AC-1804-4429-BF22-8764560B8D6A} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {536F89D6-CB83-464B-BF8C-F4BB500752F4} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {6E5C78D0-276A-45A7-B8F9-082F18D89AAE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-01-28] (Google Inc.)
Task: {70BFC301-777F-4E36-BF8C-9315083D56E3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2018-07-03] (Microsoft)
Task: {A00FF426-BAF6-4747-B688-52EC0ACF87D0} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe [2010-01-26] ()
Task: {BE9C7F82-2284-48F0-BD2E-8C1FB31F086B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2018-07-03] (Microsoft)
Task: {C1ECBC2E-71E7-4582-8958-CB9E5284A0CA} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {C44C4738-3AB0-44F0-A87B-6E30C5086A5B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-11-28] (Piriform Software Ltd)
Task: {D0E06C40-C423-49BB-97C0-D6689B032423} - System32\Tasks\RecoveryCDWin7 => C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe [2010-01-26] ()
Task: {F65743F4-AB5C-4B92-83DE-D5E128F42DCA} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Delacia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Keep - notes and lists.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
==================== Loaded Modules (Whitelisted) ==============
2010-04-09 15:43 - 2010-04-09 15:43 - 000026168 _____ () C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
2010-04-05 11:12 - 2010-04-05 11:12 - 000267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2010-04-05 11:11 - 2010-04-05 11:11 - 000030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-04-05 11:12 - 2010-04-05 11:12 - 000052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 19:04 - 2009-06-10 14:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-258222910-2402859807-2480419078-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1 - 205.171.3.25
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: HP Quick Launch => C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAAnotif => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0B675D67-9A76-4EAC-97B3-BC8816D1B8B0}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{94B5AA1C-54BC-46B6-B60F-E184C2B9DA17}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C1DE215D-37B3-4B19-9B2A-89F29BDE0C8B}] => (Allow) svchost.exe
FirewallRules: [{8CFFF0F4-4A89-41BE-BF5F-358173EAB123}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{C1452932-A375-477C-8CF4-62B897AEEEEA}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Music\HPMusic.exe
FirewallRules: [{E6DCA3AE-6028-44E7-AA1A-BF477F10E6FB}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Music\HPMusic.exe
FirewallRules: [{BE268FFA-E09D-4FF7-88C6-A257A9DC34AB}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Photo\HPPhoto.exe
FirewallRules: [{42BF87DD-F6BF-42A5-8923-AC01594C2EC3}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Photo\HPPhoto.exe
FirewallRules: [{4DA2A831-D202-4934-813D-D7A474D9BEC2}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Video\HPVideo.exe
FirewallRules: [{AD8F6E9B-2D0E-4F51-9AB1-0161172DA8E7}] => (Allow) C:\PROGRA~1\HEWLET~1\HPMEDI~1\Video\HPVideo.exe
FirewallRules: [{E85992DC-F8CF-4F84-AE4A-1BDD3FA4FF96}] => (Allow) C:\Windows\System32\javaw.exe
FirewallRules: [{82F3C9B2-89B3-4D06-9177-2D8CABCB685A}] => (Allow) C:\Windows\System32\javaw.exe
FirewallRules: [{7809BF9B-2462-4233-9FD4-B0E1515AE5E0}] => (Allow) LPort=5353
FirewallRules: [{014E1FBE-2688-4865-B11D-8846098F80A8}] => (Allow) LPort=8182
FirewallRules: [{FCD789C6-7A92-4A72-A470-A78EEE16742D}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{E78147C5-7D47-4B52-BD47-B41712A6EFF8}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{7544326B-CDA3-4561-918B-44C47BB60935}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{81C25C2B-4D68-4255-8E86-DCC2EFF204EF}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
22-06-2018 17:27:42 Windows Update
23-06-2018 14:39:01 Windows Update
07-07-2018 09:26:55 Windows Update
05-08-2018 09:58:25 Windows Update
24-11-2018 16:34:45 Installed Windows 7 Upgrade Advisor
09-12-2018 09:06:00 Windows Update
09-12-2018 10:58:20 Windows Update
09-12-2018 12:42:11 Windows Update
15-12-2018 08:35:46 Windows Update
16-12-2018 10:06:26 Windows Update
16-12-2018 10:41:17 Windows Update
16-12-2018 13:49:40 Windows Update
16-12-2018 15:01:18 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/05/2018 10:47:50 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "G:\iTunes64Setup.exe".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (06/22/2018 04:51:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Detect_RecoveryDiscReminder_V2.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at Detect_RecoveryDiscReminder_V2.Program.Main(System.String[])
Error: (06/17/2018 03:45:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program HPSF.exe version 4.4.6.3 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 3a4
Start Time: 01d4068c754cc7cd
Termination Time: 183
Application Path: C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe
Report Id: 1eff7e56-7280-11e8-8d7c-fa4fb34334ca
Error: (01/26/2018 04:54:07 PM) (Source: Microsoft Security Client Setup) (EventID: 100) (User: NT AUTHORITY)
Description: HRESULT:0x8004FF80
Description:Cannot complete the Security Essentials Upgrade. An error has prevented the Security Essentials Upgrade Wizard from continuing. The previous version of Security Essentials was restored. Error code:0x8004FF80.
Error: (01/26/2018 04:52:16 PM) (Source: MsiInstaller) (EventID: 11921) (User: NT AUTHORITY)
Description: Product: Microsoft Security Client -- Error 1921. Service 'Microsoft Antimalware Service' (MsMpSvc) could not be stopped. Verify that you have sufficient privileges to stop system services.
Error: (01/25/2018 07:22:47 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (01/25/2018 06:58:59 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Delacia-PC)
Description: Application or service 'MSN® Toolbar' could not be shut down.
Error: (01/25/2018 06:43:38 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Activation context generation failed for "c:\program files\common files\adobe air\versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\program files\common files\adobe air\versions\1.0\Adobe AIR.dll" on line 3.
The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
System errors:
=============
Error: (12/16/2018 03:08:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (12/16/2018 03:07:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: 2018-12 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4471318).
Error: (12/16/2018 01:53:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (12/16/2018 01:51:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070002: 2018-12 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4471318).
Error: (12/16/2018 01:34:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (12/16/2018 11:22:38 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.283.671.0
Update Source: Microsoft Malware Protection Center
Update Stage: Install
Source Path:
http://go.microsoft.com/fwlink/?Lin...1.0&prod=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094
Signature Type: AntiSpyware
Update Type: Full
User: NT AUTHORITY\NETWORK SERVICE
Current Engine Version:
Previous Engine Version: 1.1.15500.2
Error code: 0x80070652
Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
Error: (12/16/2018 11:22:38 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.283.671.0
Update Source: Microsoft Malware Protection Center
Update Stage: Install
Source Path:
http://go.microsoft.com/fwlink/?Lin...1.0&prod=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094
Signature Type: AntiVirus
Update Type: Full
User: NT AUTHORITY\NETWORK SERVICE
Current Engine Version:
Previous Engine Version: 1.1.15500.2
Error code: 0x80070652
Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
Error: (12/16/2018 11:22:35 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version:
Update Source: User
Update Stage: Install
Source Path:
Signature Type:
Update Type:
User: NT AUTHORITY\NETWORK SERVICE
Current Engine Version:
Previous Engine Version:
Error code: 0x80070652
Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
==================== Memory info ===========================
Processor: Intel(R) Atom(TM) CPU N455 @ 1.66GHz
Percentage of memory in use: 67%
Total physical RAM: 1012.2 MB
Available physical RAM: 330.07 MB
Total Virtual: 2036.2 MB
Available Virtual: 1083.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:218.15 GB) (Free:179.41 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.44 GB) (Free:2.07 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
\\?\Volume{b8495e74-cb24-11e6-bf8a-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 3F2EB0A1)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=218.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
