Here are the contents of Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Stephanie (2016-03-27 22:14:56)
Running from C:\Users\Stephanie\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-06-29 10:20:09)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1324636216-2063783601-3451603301-500 - Administrator - Disabled)
Guest (S-1-5-21-1324636216-2063783601-3451603301-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-1324636216-2063783601-3451603301-1003 - Limited - Enabled)
Stephanie (S-1-5-21-1324636216-2063783601-3451603301-1001 - Administrator - Enabled) => C:\Users\Stephanie
UpdatusUser (S-1-5-21-1324636216-2063783601-3451603301-1000 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Norton Internet Security (Disabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Internet Security (Disabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
A360 Desktop (HKLM\...\{B209E611-5511-4AD6-B4B3-9D36F93DBCD4}) (Version: 6.0.3.1100 - Autodesk)
ACA & MEP 2016 Object Enabler (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (Version: 20.1.49.0 - Autodesk) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.3 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Adobe Illustrator CS5 (HKLM-x32\...\{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe InDesign CS5 (HKLM-x32\...\{F9766AC1-1461-1033-B862-DF8FE1C033BE}) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.15) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.15 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.2.152 - Adobe Systems, Inc.)
Adobe® Photoshop® Album Starter Edition 3.0 (HKLM-x32\...\{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}) (Version: 3.00.000 - Adobe Systems, Inc.)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.0.3 - IObit)
Akamai NetSession Interface (HKU\S-1-5-21-1324636216-2063783601-3451603301-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Allegorithmic MaPZone2.Free (HKLM-x32\...\MaPZone2.Free) (Version: - )
AMR to MP3 Converter 1.4 (HKLM-x32\...\{C615B4A6-DDE8-4325-BCF8-E53E913D95E9}_is1) (Version: -
www.amrtomp3converter.com)
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ArchiCAD 15 R1 AUS (HKLM\...\001FFF2FFF15FF00FF2701F01F02F000-R1) (Version: 15.0 - Graphisoft)
ArchiCAD 17 AUS (HKLM\...\001FFF2FFF17FF00FF2701F01F02F000-R1) (Version: 17.0 - GRAPHISOFT)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden
AutoCAD 2016 - English (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (Version: 20.1.107.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - English (Version: 20.1.49.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.15 - Autodesk)
Autodesk App Manager 2016 (HKLM-x32\...\{4ECF9E00-2978-46AF-BD80-455EFEAB7A93}) (Version: 2.0.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2016 - English (HKLM\...\AutoCAD 2016 - English) (Version: 20.1.49.0 - Autodesk)
Autodesk AutoCAD 2016 SP 1 (HKLM\...\AutoCAD 2016 SP1) (Version: 20.1.107.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.4 (HKLM-x32\...\{4E20873D-BC20-495C-AFD9-B18877B7F9BB}) (Version: 1.2.4.0 - Autodesk)
Autodesk Backburner 2012.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2012.0.0 - Autodesk, Inc.)
Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit (HKLM\...\{4BEE127E-95C4-434D-ABAC-65155192BB24}) (Version: 4.35.1742 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk DirectConnect 2012 64-bit (HKLM\...\Autodesk DirectConnect 2012 64-bit) (Version: 6.0.443.0 - Autodesk)
Autodesk DirectConnect 2012 64-bit (Version: 6.0.443.0 - Autodesk) Hidden
Autodesk Download Manager (HKLM-x32\...\{CCA78313-443C-4674-81B8-88919D137258}) (Version: 2.0.2.0 - Autodesk, Inc.)
Autodesk Featured Apps 2016 (HKLM-x32\...\{D42F37CD-9AF9-4435-A474-B387C5BB6B47}) (Version: 2.0.0 - Autodesk)
Autodesk MatchMover 2012 64-bit (HKLM\...\{4529F749-C362-4119-AFA0-0A3F1CA924AB}) (Version: 14.00.0000 - Autodesk)
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.15 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.15 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2013 (HKLM-x32\...\{27C6C0A2-2EC9-4FEA-BE2B-659EAAC2C68C}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2013 (HKLM-x32\...\{58760EEC-8B6A-43F4-81AA-696E381DFADD}) (Version: 3.0.13 - Autodesk)
Autodesk Maya 2012 64-bit (HKLM\...\Autodesk Maya 2012 64-bit) (Version: 14.0.0.0 - Autodesk)
Autodesk Maya 2012 64-bit (Version: 14.0.0.0 - Autodesk) Hidden
Autodesk ReCap 2016 (HKLM\...\Autodesk ReCap 2016) (Version: 1.5.0.33 - Autodesk)
Autodesk ReCap 2016 (Version: 1.5.0.33 - Autodesk) Hidden
Autodesk Revit 2013 (HKLM\...\Autodesk Revit 2013) (Version: 12.02.21203 - Autodesk)
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blender (HKLM\...\Blender) (Version: 2.65a-release - Blender Foundation)
Blio (HKLM-x32\...\{74A8E1BE-D438-4C35-ABFF-3A1EAF17526E}) (Version: 2.2.8530 - K-NFB Reading Technology, Inc.)
BOCNET Security Applet 2.1 (HKLM\...\BOCNET Security Applet_is1) (Version: - Bank of China, Inc.)
BOCNET USBKey Management Suit (HKLM-x32\...\{007C14F9-7457-4b67-9220-5CC24C7A47CC}) (Version: 1.0.0 - Beijing WatchData System Co., Ltd.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: - Broadcom Corporation)
Broadcom Bluetooth Software (HKLM\...\{6E7F4CA3-B2DE-413C-A7A1-43AA5BE19EA1}) (Version: 6.5.0.3300 - Broadcom Corporation)
Bryce 7.1 (HKLM-x32\...\Bryce 7.1 7.1.0.109) (Version: 7.1.0.109 - DAZ 3D)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk)
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.2.4725 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DaVinci Resolve (HKLM\...\{2E7A93F9-2275-4EA1-A03F-4EB7EB573E7D}) (Version: 12.3.1001 - Blackmagic Design)
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
doPDF 7.1 printer (HKLM\...\doPDF 7 printer_is1) (Version: - Softland)
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{768A6276-5822-489C-8A2B-67190F745655}) (Version: 4.1.2 - Hewlett-Packard)
EUPlayer (HKLM-x32\...\{F803C296-3136-4E1B-815B-4651F81CDA4F}) (Version: 1.3.0 - EUPlayer)
Evernote v. 4.5.2 (HKLM-x32\...\{8CE152BA-1D16-11E1-867D-984BE15F174E}) (Version: 4.5.2.5904 - Evernote Corp.)
Express Zip File Compression (HKLM-x32\...\ExpressZip) (Version: 2.40 - NCH Software)
Extended Asian Language font pack for Adobe Reader XI (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-A00000000049}) (Version: 11.0.09 - Adobe Systems Incorporated)
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden
FARO LS 1.1.408.2 (HKLM-x32\...\{91221AAC-F2A0-4028-8016-C7DAF63CB6CC}) (Version: 4.8.2.25521 - FARO Scanner Production)
FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production)
FARO LS 4.8.2.25521 (HKLM-x32\...\FARO LS_is1) (Version: - FARO Technologies)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden
Freemake Video Downloader (HKLM-x32\...\Freemake Video Downloader_is1) (Version: 3.8.0 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hoyle Card Games (x32 Version: 2.2.0.95 - WildTangent) Hidden
HP 3D DriveGuard (HKLM\...\{54CE68A8-4F2D-4328-B1F7-D6C720405F7F}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{B65FCAA5-F3A6-4B3F-ABEE-CBC2B085796B}) (Version: 4.1.25.1 - Hewlett-Packard Company)
HP CoolSense (HKLM-x32\...\{11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F}) (Version: 2.10.51 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{3F122044-172F-4DC6-96CA-0DD4300E9CD9}) (Version: 1.2.0.0 - Hewlett-Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent)
HP Launch Box (HKLM\...\{5A847522-375C-4D05-BD3D-88C450CC047F}) (Version: 1.1.5 - Hewlett-Packard Company)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5520 series Basic Device Software (HKLM\...\{68C0736C-3E47-43A6-B14D-236BEF198A5F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5520 series Help (HKLM-x32\...\{7137E26A-10F7-4B1C-9980-0893579E92DA}) (Version: 27.0.0 - Hewlett Packard)
HP Photosmart 5520 series Product Improvement Study (HKLM\...\{DCC176F0-3CE3-4DA9-8FF9-3809C1B48C47}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP Security Assistant (HKLM\...\{ED6CD3AC-616B-4B20-BCF3-6E637B92A5AD}) (Version: 3.0.4 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15109.3899 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company)
HP SimplePass (HKLM-x32\...\{34C821CA-6B55-44A0-8A9B-2EF471D6019E}) (Version: 6.0.100.272 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{1DFA0C99-6E2E-46F4-B242-51C7CF41DDE5}) (Version: 4.5.12.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.0.199 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.1.5.24 - IObit)
ISO Opener (HKLM-x32\...\{CE235F00-F8CD-41AF-83D5-236D90E33BFB}_is1) (Version: -
www.isoopener.com)
IsoBuster 2.8 (HKLM-x32\...\IsoBuster_is1) (Version: 2.8 - Smart Projects)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
IZArc 4.1.6 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.6 - Ivan Zahariev)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
JJVOD (HKLM-x32\...\JJVOD) (Version: 2.7.2.8 - (C)jjvod.com Inc.All Rights Reserved.)
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Letters from Nowhere 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Luxor HD (x32 Version: 2.2.0.98 - WildTangent) Hidden
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mathematica Extras 9.0 (4092550) (HKLM\...\A-WIN-Extras 9.0.1 4092550_is1) (Version: 9.0.1 - Wolfram Research, Inc.)
MATLAB R2014b (HKLM\...\Matlab R2014b) (Version: 8.4 - The MathWorks, Inc.)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.1.1000 - Maxthon International Limited)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.292.3 - McAfee, Inc.)
MFC RunTime files (x32 Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MySQL Connector C 6.0.2 (HKLM\...\{5B6A2A7C-658E-4661-A254-3C36F5B63943}) (Version: 6.0.2 - Sun Microsystems)
MySQL Connector C++ 1.1.0 (HKLM\...\{3C481CDB-34E8-4CEF-B487-4C9C60530CFC}) (Version: 1.1.0 - Oracle and/or its affiliates)
MySQL Connector J (HKLM-x32\...\{0505C47B-6CBC-4DF5-9628-769566240F88}) (Version: 5.1.20.0 - Oracle Corporation)
MySQL Connector Net 6.5.4 (HKLM-x32\...\{92E19B5A-1985-49BF-9022-9CF4AD652C72}) (Version: 6.5.4 - Oracle)
MySQL Connector/ODBC 5.1 (HKLM\...\{BB2211D1-A5B5-4AEF-B0E6-DD7874ABF8EE}) (Version: 5.1.11 - Oracle Corporation)
MySQL Documents 5.5 (HKLM-x32\...\{802B73CE-447F-4353-93C0-7756B932706B}) (Version: 5.5.29 - Oracle Corporation)
MySQL Examples and Samples 5.5 (HKLM-x32\...\{45EF496C-9E09-4796-8E9B-BCEB968C5CB8}) (Version: 5.5.29 - Oracle Corporation)
MySQL For Excel 1.1.0 (HKLM-x32\...\{38404B7E-FF50-4525-8EA0-E1187E4171E4}) (Version: 1.1.0 - Oracle)
MySQL Installer (HKLM-x32\...\{236FF571-7197-40E9-921D-D5FDC752C697}) (Version: 1.1.5.0 - Oracle Corporation)
MySQL Notifier 1.0.3 (HKLM-x32\...\{5681C7AB-E29D-4EE9-B0F0-809A28ECECFC}) (Version: 1.0.3 - Oracle)
MySQL Server 5.5 (HKLM\...\{6150345A-1382-4713-B38B-482388DC7E7B}) (Version: 5.5.29 - Oracle Corporation)
MySQL Workbench 5.2 CE (HKLM-x32\...\{23C3EF87-AD08-4F76-982D-1AE137485F08}) (Version: 5.2.44 - Oracle Corporation)
Nielsen (HKLM-x32\...\NetSight) (Version: - )
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Nokia Connectivity Cable Driver (HKLM-x32\...\{0FF1922C-B6C4-40BB-AF30-BEF75A482444}) (Version: 6.82.4.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\{1B58C9D2-1925-413F-B29A-C4E7596C43F5}) (Version: 6.82.20.2 - Nokia)
Nokia Phone Browser 64-bit (Version: 6.82.20.2 - Nokia) Hidden
Norton Internet Security (HKLM-x32\...\NIS) (Version: 22.6.0.142 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team)
NVIDIA Graphics Driver 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit (HKLM\...\{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}) (Version: 2.60.0216.1828 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
OpenTok Plugin (HKLM-x32\...\{E0F8E5CB-985A-4645-A856-E8F5609559E6}) (Version: 0.4.0.11 - TokBox)
PC Connectivity Solution (HKLM-x32\...\{D8E4A66D-DB68-481F-ABA8-AC622566D4CB}) (Version: 6.43.8.0 - Nokia)
PC Connectivity Solution 64-bit components (Version: 6.43.8.0 - Nokia) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFTK Builder 3.5.3 (HKLM-x32\...\PDFTK Builder_is1) (Version: - )
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.98 - WildTangent) Hidden
QQ International (HKLM-x32\...\{3CA54984-A14B-42FE-9FF1-7EA90151D725}) (Version: 1.91.1369.0 - Tencent Technology(Shenzhen) Company Limited)
QQ游戏 (HKLM-x32\...\QQ游戏) (Version: 3.10.2.1 - 腾讯公司)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
REALTEK DTV USB DEVICE (HKLM-x32\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.29005 - Realtek Semiconductor Corp.)
RecordPad Sound Recorder (HKLM-x32\...\Recordpad) (Version: 5.35 - NCH Software)
Revit 2013 (Version: 12.02.21203 - Autodesk) Hidden
Revit 2013 Language Pack - English (Version: 12.02.21203 - Autodesk) Hidden
Rhinoceros 4.0 (HKLM-x32\...\{5C2CBFFD-FC3B-4AA9-993B-CE2B8DA25B87}) (Version: 4.0.20118 - McNeel & Associates)
RollerCoaster Tycoon 3: Platinum (x32 Version: 2.2.0.98 - WildTangent) Hidden
Screen Capturer (HKLM-x32\...\Screen Capturer) (Version: 1.0.4.42 - ScreenCapturer.com)
SecEditCtl.BOC (only remove) (HKLM-x32\...\SecEditCtl.BOC01000009) (Version: - CFCA)
SketchUp 2015 (HKLM\...\{350488A4-1540-4103-8F01-B27503891EB0}) (Version: 15.3.331 - Trimble Navigation Limited)
SketchUp Import 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.16 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.16.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
The Treasures of Mystery Island: The Ghost Ship (x32 Version: 2.2.0.98 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Unins.exe (HKU\.DEFAULT\...\{D1F4EC5F-0BAF-4E10-B5E5-E4304A06418A}) (Version: 1.0 - Unins.exe)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Validity WBF DDK (HKLM\...\{DA83578A-7DB2-4CF6-9453-CF24C7917AB8}) (Version: 4.3.301.0 - Validity Sensors, Inc.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.89 - NCH Software)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 6.33 - NCH Software)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wolfram CDF Player (M-WIN-D 9.0.1 4092685) (HKLM-x32\...\M-WIN-D 9.0.1 4092685_is1) (Version: 9.0.1 - Wolfram Research, Inc.)
XAMPP 1.8.1 (HKLM-x32\...\xampp) (Version: - )
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{083C82AE-568E-45dd-A92C-01422CA45760}\InprocServer32 -> C:\Program Files\Autodesk\Revit 2013\Program\APIContext.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Stephanie\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2016\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Stephanie\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02599AA2-B253-4ADF-B9C8-A1EB2F0EB401} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {02C56421-9DEC-4214-AC1B-01E290C6F7DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {06FB5EFA-2D18-434C-AF26-1C80E2B62A5C} - System32\Tasks\{9CF0AC89-3D96-4B06-8479-5EB4FF5FD788} => pcalua.exe -a "G:\Steph\HP Laptop\Softwares installed in Laptop\SoundScape_Install\setup.exe" -d "G:\Steph\HP Laptop\Softwares installed in Laptop\SoundScape_Install"
Task: {114CC68B-A929-45E0-8335-281C3E438715} - System32\Tasks\Cuhausu => C:\PROGRA~1\SASWIO~1\Synebu.bat
Task: {12BBB0AB-20D9-402F-8CB5-85DC375E7C43} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-11-29] (CyberLink)
Task: {156034F5-57B6-4FFB-B402-422E4AA9153A} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon3\Bin\mxup.exe [2015-05-08] (Maxthon International ltd.)
Task: {1EA5CBD7-B2A8-4622-95BC-9421FF53155D} - System32\Tasks\MATLAB R2014b Startup Accelerator => C:\Program Files\MATLAB\R2014b\bin\win64\MATLABStartupAccelerator.exe [2014-07-26] ()
Task: {24400DEB-AE46-42FD-B6CB-E151331D6507} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {384C2457-BA0E-4D82-8A8D-5825B681E744} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {4BB7BAA4-F62C-42D5-A354-4B0AF02AE2A5} - System32\Tasks\{CBFDA1AC-E0C0-45B4-973B-A0707DE1A36B} => pcalua.exe -a C:\Users\Stephanie\AppData\Local\TNT2\2.0.0.1702\TNT2User.exe -c /UNINSTALL PARTNER=10815
Task: {5365F38A-6547-4159-8FC5-240E42EB605F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {57B5C27C-6EB3-4F24-9494-3DEED4EB339A} - System32\Tasks\Leader Technologies\PowerRegister\Seagate Product Registration (Stephanie) => C:\Users\Stephanie\AppData\Roaming\Leadertech\PowerRegister\Seagate Product Registration.exe [2009-01-16] (Leader Technologies/Seagate)
Task: {5A59732F-8EED-42FD-BAC8-B74453722B6A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {6264770E-288A-4666-9B5D-B2AFB398FAA9} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-02-26] (Symantec Corporation)
Task: {66159278-01A1-409A-B598-9667D1CF0BB6} - System32\Tasks\{FB9F60C4-5E2A-4038-A8E6-5E8128E5ADA7} => pcalua.exe -a "c:\program files\cjtech\cwmaster\uninstall.exe"
Task: {67107A35-250C-4CB0-914A-416C76D4928B} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\WSCStub.exe [2016-02-26] (Symantec Corporation)
Task: {6E5A796D-0DF8-4BD5-BDCF-3C56C9B68528} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe [2016-02-11] (Symantec Corporation)
Task: {764EC9D0-9D62-44B4-A7DB-9042D224CBA3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-25] (Adobe Systems Incorporated)
Task: {7EB5FD64-3875-4CEA-A736-BCB6B1EA51B4} - System32\Tasks\{00EA454B-4D5C-4A2D-A498-CE2634B7156C} => pcalua.exe -a "C:\Users\Stephanie\Software\Matlab r2014b\bin\win64\vc90\vcredist_x64.exe" -d "C:\Users\Stephanie\Software\Matlab r2014b\bin\win64\vc90"
Task: {84CD43CA-D735-4E9D-8FF5-AD8D0F92365D} - System32\Tasks\HPCeeScheduleForStephanie => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {9E1EAE8D-B527-44EC-9199-4B98D23E8F4E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {B4C72FA7-9459-4E52-9A9F-AA8CB9DBB245} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe [2016-02-11] (Symantec Corporation)
Task: {BDEC4851-A9B6-445F-B0D1-762DD8767AB2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1324636216-2063783601-3451603301-1001Core => C:\Users\Stephanie\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {BF924732-E9CB-4521-831E-11486C2510CD} - System32\Tasks\{693F0F59-A3C5-45B7-B48A-208ACB04924E} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {C506E1FA-26DB-415C-9860-DA4F8966FD2B} - System32\Tasks\{F39ACC32-4696-4AF2-A579-2490369367E6} => pcalua.exe -a C:\Users\STEPHA~1\AppData\Local\Temp\{6ACD83AF-7F57-41AD-AEEC-B5E2DF900AEC}\setup.exe -d "C:\Program Files (x86)\Maxthon3\Bin"
Task: {CBFF454B-6A24-45A3-892D-443ECD28D7DD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1324636216-2063783601-3451603301-1001UA => C:\Users\Stephanie\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {CCA0DEAD-4ADC-4598-BB5A-3FBA47275986} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {D38FEABB-A9B8-4D16-980C-31C96DBC5143} - System32\Tasks\{8CAEBBC0-C0B9-484E-8D5A-15F34BCF6BCE} => pcalua.exe -a C:\Users\STEPHA~1\AppData\Local\Temp\{D84FADBD-D819-4374-A722-8A2209282BAD}\setup.exe -d "C:\Program Files (x86)\Maxthon3\Bin"
Task: {D460EF01-2D1D-4E83-B414-167334AD532E} - System32\Tasks\{6AEE57A8-EE5F-4AD2-B1DF-9C29B8495348} => pcalua.exe -a C:\Users\Stephanie\Desktop\Photoshop_Plugins_x64_8.55.0109.1800.exe -d C:\Users\Stephanie\Desktop
Task: {DFC0F985-AF65-4350-84EC-EEE3734E54A4} - System32\Tasks\AdobeAAMUpdater-1.0-Stephanie-HP-Stephanie => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {E1381B33-1AF3-4E03-820F-3BB05EDB77B1} - System32\Tasks\video calendar Trigger Task => C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\videocalendar\1.0.0.504\videocalendar.exe
Task: {E6D7FC17-FC3B-44D1-8AE9-6DC0E451157C} - System32\Tasks\{573E3688-9834-412A-87C0-FBCD2EE43073} => c:\program files (x86)\maxthon cloud browser\bin\maxthon.exe
Task: {EF0D0833-BAE7-4A52-914E-392B2B51E549} - System32\Tasks\HPCustParticipation HP Photosmart 5520 series => C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1324636216-2063783601-3451603301-1001Core.job => C:\Users\Stephanie\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1324636216-2063783601-3451603301-1001UA.job => C:\Users\Stephanie\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForStephanie.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\MATLAB R2014b Startup Accelerator.job => C:\Program Files\MATLAB\R2014b\bin\win64\MATLABStartupAccelerator.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2012-05-29 00:23 - 2012-10-03 06:51 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-26 19:19 - 2016-03-26 19:19 - 00670552 _____ () C:\Users\Stephanie\AppData\Roaming\Kiyvcip\Kaivsujnu.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-05-29 00:21 - 2012-01-19 10:48 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-11-23 18:19 - 2015-11-23 18:19 - 00738128 _____ () C:\Users\Stephanie\AppData\Roaming\SogouGameDownload\sggamedlupdate.exe
2015-01-27 21:23 - 2015-01-27 21:23 - 00232328 _____ () C:\Program Files\Autodesk\Autodesk Sync\qjson_Ad_0.dll
2015-01-27 21:23 - 2015-01-27 21:23 - 00059784 _____ () C:\Program Files\Autodesk\Autodesk Sync\qoauth_Ad_1.dll
2015-01-27 21:23 - 2015-01-27 21:23 - 00922504 _____ () C:\Program Files\Autodesk\Autodesk Sync\qca_Ad_2.dll
2015-01-27 21:23 - 2015-01-27 21:23 - 00048520 _____ () C:\Program Files\Autodesk\Autodesk Sync\QtSolutions_MFCMigrationFramework_Ad_2.dll
2012-05-29 00:21 - 2011-12-17 07:37 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2012-12-10 07:24 - 2012-12-10 07:24 - 09723392 _____ () C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe
2016-03-26 19:19 - 2016-03-26 19:19 - 00174424 _____ () C:\Users\Stephanie\AppData\Roaming\Kiyvcip\Kiyvcip.exe
2016-03-26 19:19 - 2016-03-26 19:19 - 00115544 _____ () C:\Users\Stephanie\AppData\Roaming\Kiyvcip\Tuzpoaogde.exe
2016-03-26 19:19 - 2016-03-26 19:19 - 00146264 _____ () C:\Users\Stephanie\AppData\Roaming\Kiyvcip\Kaivsujnu.exe
2013-02-07 10:19 - 2013-02-07 10:19 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
2012-10-25 19:43 - 2011-02-28 08:39 - 00211456 _____ () C:\Program Files (x86)\IZArc\IZArcCM64.dll
2016-02-19 11:00 - 2016-02-19 11:00 - 00105984 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll
2015-04-16 07:13 - 2015-04-16 07:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-03-26 19:19 - 2016-03-26 19:19 - 00261976 _____ () C:\Users\Stephanie\AppData\Roaming\Kiyvcip\Tuzpoaogde.dll
2015-12-21 15:45 - 2015-09-03 14:34 - 00568184 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\nsmmc.dll
2015-12-21 15:52 - 2015-09-03 14:32 - 00568184 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\communication.dll
2016-02-17 13:16 - 2016-02-24 15:48 - 00062024 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2016-02-17 13:16 - 2016-02-24 15:47 - 00110664 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2015-01-17 19:21 - 2015-01-17 19:21 - 00060088 _____ () C:\Program Files (x86)\JJPlayer\HDAccSetting.dll
2015-11-23 18:19 - 2015-11-23 18:19 - 00170320 _____ () C:\Users\Stephanie\AppData\Roaming\SogouGameDownload\CloudSetIcon.dll
2013-09-16 14:19 - 2011-05-30 13:58 - 00053248 _____ () C:\Windows\SysWOW64\WatchData\Watchdata BOC CSP v3.3\WDEvent.dll
2015-12-21 15:52 - 2015-09-03 14:33 - 00648056 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\npchromeinstaller.dll
2015-12-21 15:52 - 2015-09-03 14:33 - 00855928 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\npfirefoxprocessor.dll
2015-12-21 15:52 - 2015-09-03 14:33 - 00160120 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\npsp1.dll
2015-12-21 15:52 - 2015-09-03 14:33 - 00237944 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\npsurvey.dll
2015-12-21 15:52 - 2015-09-03 14:33 - 00233848 _____ () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter9\npwmi.dll
2016-03-27 21:57 - 2016-02-24 15:47 - 00110664 _____ () C:\Users\Stephanie\AppData\Local\Autodesk\.AdskAppManager\R1\qjson0.dll
2014-10-17 17:27 - 2014-10-17 17:27 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2012-05-29 00:29 - 2011-11-30 15:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-05-29 00:21 - 2011-12-17 05:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\Temp
DCCB2FA [296]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001\...\bankofchina.com -> hxxp://
www.bankofchina.com
IE trusted site: HKU\S-1-5-21-1324636216-2063783601-3451603301-1001\...\boc.cn -> hxxps://ebs.boc.cn
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-06-29 21:57 - 2016-03-26 22:12 - 00001861 ____A C:\Windows\system32\Drivers\etc\hosts
107.178.255.88
www.google-analytics.com
107.178.255.88
www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
107.178.255.88
www.google-analytics.com
107.178.255.88
www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
127.0.0.1 localhost127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1
www.adobeereg.com wwis-dubc1-vip60.adobe.com
www.wip.adobe.com www.wip1.adobe.com
127.0.0.1
www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net0.0.0.1 mssplus.mcafee.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1324636216-2063783601-3451603301-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Stephanie\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{5FDD7A80-6AF5-420B-9EF7-39679D03D794}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D696ED8C-78ED-4402-8687-8F5F439983E3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [funshiontcp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshion.exe
FirewallRules: [funshionudp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshion.exe
FirewallRules: [funshionservicetcp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshionservice.exe
FirewallRules: [funshionupgradetcp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshionupgrade.exe
FirewallRules: [{742F40AF-6A11-4278-9771-DBAA00769758}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionService.exe
FirewallRules: [{202523CD-BB51-45BD-9CE5-1435D5D433D6}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionService.exe
FirewallRules: [{9FF63BF4-28A1-43E9-A38B-A177DF281955}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionUpgrade.exe
FirewallRules: [{EB21D4CB-4AB0-4BEC-A124-558815781FB5}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionUpgrade.exe
FirewallRules: [TCP Query User{09F6BA51-1340-4B4A-A373-7A0089097D16}C:\program files (x86)\funshion online\funshion\funshionservice.exe] => (Allow) C:\program files (x86)\funshion online\funshion\funshionservice.exe
FirewallRules: [UDP Query User{5011E71D-2B64-4D33-A16A-44C4604F34FD}C:\program files (x86)\funshion online\funshion\funshionservice.exe] => (Allow) C:\program files (x86)\funshion online\funshion\funshionservice.exe
FirewallRules: [{F8E4FE79-FAB1-46E1-885E-6624CFFAD3B0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{222B4DDE-C17A-48E3-8F39-DFF72DA7A23C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D2906482-FEB0-4282-871D-CD7516E65592}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{7247E96E-A62F-448C-BECA-B3C71DBCE9CA}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{EBA82F7D-3D13-4AAE-8D29-8C744D82E691}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{E834C680-FF1D-465B-BD7B-1D73AB98181A}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{AF870645-9921-4D2D-9A30-4EAF871397AB}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{64175E78-FD1D-4D65-A972-B89634034CE3}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [TCP Query User{A8D51515-4E62-4D89-A640-03C550F78D20}C:\users\stephanie\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\stephanie\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{67BF0239-0BAF-499E-A662-F9299C5A5FEC}C:\users\stephanie\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\stephanie\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{09FD3D9E-0B19-4DBA-9286-39F1E2170AC4}C:\users\stephanie\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\stephanie\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{56626CD7-8665-470F-8D99-0D1209E9C16C}C:\users\stephanie\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\stephanie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A60F26BF-323D-4F1E-BB89-F1E5A2209890}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 15\ArchiCAD.exe
FirewallRules: [{3F20A2F2-CF24-411F-90E1-F76F2B8093C3}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 15\ArchiCAD.exe
FirewallRules: [{F8075FD6-30BB-4C37-A150-68B8A6EAA7FA}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 15\GSQuickTimeServer\GSQTServer.exe
FirewallRules: [{DDFBACE8-AB65-405B-A2BA-32492625F9AA}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 15\GSQuickTimeServer\GSQTServer.exe
FirewallRules: [TCP Query User{84D99001-C488-4B8F-8999-677B9EECB6C7}C:\program files\graphisoft\archicad 15\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 15\archicad.exe
FirewallRules: [UDP Query User{F2224D68-3165-4D76-B18B-D22B37936569}C:\program files\graphisoft\archicad 15\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 15\archicad.exe
FirewallRules: [TCP Query User{5D36F10F-4602-42FF-B5C4-2831A0153860}C:\program files\graphisoft\archicad 15\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 15\gsquicktimeserver\gsqtserver.exe
FirewallRules: [UDP Query User{6F447A14-1C12-474E-9B64-70F560EAE836}C:\program files\graphisoft\archicad 15\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 15\gsquicktimeserver\gsqtserver.exe
FirewallRules: [TCP Query User{723E44DD-2B24-4E8F-9546-088A2924630D}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{AD1FECA9-31A6-4506-BBFE-2B8D5DF55D7E}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [{3286AA76-7DCE-4FFE-836A-A1FEF7F20255}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{215C4C1F-70F9-4905-9E00-88E205E3FEF7}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [funshionserviceudp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshionservice.exe
FirewallRules: [funshionupgradeudp] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\funshionupgrade.exe
FirewallRules: [{949346A4-2F8C-41A2-B3C7-0A72DA62A28A}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionUpgrade.exe
FirewallRules: [{BFCCECF4-6304-4802-ADD5-A235BD0B54C2}] => (Allow) C:\Program Files (x86)\Funshion Online\Funshion\FunshionUpgrade.exe
FirewallRules: [{D229C99C-F481-4E7C-A2E4-94FA3419955C}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 17\ArchiCAD.exe
FirewallRules: [{EFEB1358-0B1B-4351-B242-DC1A12C3EF93}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 17\ArchiCAD.exe
FirewallRules: [{24406169-4EFD-4727-8892-66623F9CFA74}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 17\GSQuickTimeServer\GSQTServer.exe
FirewallRules: [{127DC075-9990-4369-9FF1-CAAC87F0EE3A}] => (Allow) C:\Program Files\Graphisoft\ArchiCAD 17\GSQuickTimeServer\GSQTServer.exe
FirewallRules: [TCP Query User{3FBC7BA1-02FE-4ED5-9723-B2AD27007DDA}C:\program files\graphisoft\archicad 17\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 17\archicad.exe
FirewallRules: [UDP Query User{2D382908-6A97-4015-8DD2-F725E24A98BA}C:\program files\graphisoft\archicad 17\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 17\archicad.exe
FirewallRules: [TCP Query User{335361F5-6A88-4575-869E-6F97D1345B0A}C:\program files\graphisoft\archicad 17\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 17\gsquicktimeserver\gsqtserver.exe
FirewallRules: [UDP Query User{3EE3021B-F96F-464D-92EF-571103077518}C:\program files\graphisoft\archicad 17\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 17\gsquicktimeserver\gsqtserver.exe
FirewallRules: [TCP Query User{60513F3E-15D2-4D1F-AB32-8B2D2423EAD5}C:\program files (x86)\maxthon cloud browser\bin\maxthon.exe] => (Allow) C:\program files (x86)\maxthon cloud browser\bin\maxthon.exe
FirewallRules: [UDP Query User{C194B745-8078-4E21-98A1-48E68B7308FE}C:\program files (x86)\maxthon cloud browser\bin\maxthon.exe] => (Allow) C:\program files (x86)\maxthon cloud browser\bin\maxthon.exe
FirewallRules: [{DF4E350F-CCFB-4235-A38D-1F72833386E5}] => (Allow) C:\Program Files (x86)\Wolfram Research\Wolfram CDF Player\9.0\WolframCDFPlayer.exe
FirewallRules: [{0AAB858A-EC84-4DBC-8C90-E7647123125C}] => (Allow) C:\Program Files (x86)\Wolfram Research\Wolfram CDF Player\9.0\WolframCDFPlayer.exe
FirewallRules: [{B1DED873-426E-47FF-926E-2778647BAAB5}] => (Allow) C:\Program Files (x86)\Wolfram Research\Wolfram CDF Player\9.0\math.exe
FirewallRules: [{6E3174C9-3225-4A5A-861D-E944450B05D7}] => (Allow) C:\Program Files (x86)\Wolfram Research\Wolfram CDF Player\9.0\math.exe
FirewallRules: [TCP Query User{0440FADC-041F-4959-B718-8C5A24FFD466}C:\program files (x86)\jjplayer\hdacc.exe] => (Allow) C:\program files (x86)\jjplayer\hdacc.exe
FirewallRules: [UDP Query User{695C16CE-19A4-495A-8B08-24AD21D097C5}C:\program files (x86)\jjplayer\hdacc.exe] => (Allow) C:\program files (x86)\jjplayer\hdacc.exe
FirewallRules: [TCP Query User{ADECA29D-90BD-41AC-AE75-5FD447E70238}C:\program files (x86)\jjplayer\hdacc.exe] => (Allow) C:\program files (x86)\jjplayer\hdacc.exe
FirewallRules: [UDP Query User{A1D0DFDC-B9B3-4E83-8B5E-CB52F8A8FAB8}C:\program files (x86)\jjplayer\hdacc.exe] => (Allow) C:\program files (x86)\jjplayer\hdacc.exe
FirewallRules: [{137687D5-FCF0-49E8-BC38-F7023D7E3D3B}] => (Allow) C:\Users\Stephanie\AppData\Local\Temp\PromoteInstall\3291.exe
FirewallRules: [{B345445E-DF0B-4341-8D7E-3E1B6543F318}] => (Allow) C:\Users\Stephanie\AppData\Local\Temp\PromoteInstall\3291.exe
FirewallRules: [{58A62F70-3E8B-4234-AAC1-185EC54EC66D}] => (Allow) C:\Program Files (x86)\360\360Safe\safemon\360Tray.exe
FirewallRules: [{EDFA9D95-0620-4289-B6A1-207F99984A1E}] => (Allow) C:\Program Files (x86)\360\360Safe\safemon\360Tray.exe
FirewallRules: [{BA4EA22C-CC7C-485C-A402-F6911F83792B}] => (Allow) C:\Program Files (x86)\360\360Safe\LiveUpdate360.exe
FirewallRules: [{E7E2477D-8DC2-434F-BA0C-D86BA5D2C41C}] => (Allow) C:\Program Files (x86)\360\360Safe\LiveUpdate360.exe
FirewallRules: [TCP Query User{5C7EC213-3202-4669-B448-1284CFD9D881}C:\program files (x86)\360\360sd\360sdupd.exe] => (Allow) C:\program files (x86)\360\360sd\360sdupd.exe
FirewallRules: [UDP Query User{569DC323-B683-404C-84B1-45036DAEDD7F}C:\program files (x86)\360\360sd\360sdupd.exe] => (Allow) C:\program files (x86)\360\360sd\360sdupd.exe
FirewallRules: [{858C1B48-62B0-4657-A35D-27B2D0CBCE88}] => (Allow) C:\Program Files (x86)\360\360Safe\safemon\360Tray.exe
FirewallRules: [{6F3F1736-B6C6-4214-B0A3-BF5A2AC70BE7}] => (Allow) C:\Program Files (x86)\360\360Safe\safemon\360Tray.exe
FirewallRules: [{1C2125DA-A6FA-40EC-910C-8BD7F3E2217A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E614204C-62BB-4869-BD1D-943A5159D3BB}] => (Allow) C:\Program Files (x86)\360\360Safe\LiveUpdate360.exe
FirewallRules: [{1C075301-171C-4583-9A09-4E6937E55D19}] => (Allow) C:\Program Files (x86)\360\360Safe\LiveUpdate360.exe
FirewallRules: [TCP Query User{222542C7-8206-4368-AC8C-BF8084704ADC}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [UDP Query User{2D3ED6B5-0E3C-46E1-81E4-FEDA2920D211}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [{A3E63AF4-1430-4144-834E-2242ACBAA1B0}] => (Block) C:\program files\andy\andy.exe
FirewallRules: [{672F4DFC-3183-4193-A12C-A6CC4ADFF472}] => (Block) C:\program files\andy\andy.exe
FirewallRules: [TCP Query User{2878347E-E1E1-4DE6-B764-45ECC95F3715}C:\program files\andyofflineinstaller\andy\x64\andy.exe] => (Allow) C:\program files\andyofflineinstaller\andy\x64\andy.exe
FirewallRules: [UDP Query User{E2547887-1937-4510-9841-69A58A82501F}C:\program files\andyofflineinstaller\andy\x64\andy.exe] => (Allow) C:\program files\andyofflineinstaller\andy\x64\andy.exe
FirewallRules: [{AC53B765-EFA3-4FF2-894D-C22531B02608}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\DeviceSetup.exe
FirewallRules: [{829BDA88-1CA4-438B-9591-87C1335617E3}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{A6692C01-824E-4A9F-8F06-7A7971B3A0E0}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{6181F200-D90B-4DE3-AD80-13DC22D727AE}] => (Allow) C:\Users\Stephanie\Software\QvodSetup5.exe
FirewallRules: [{34EFC0C9-D9A6-4B92-B9F2-105B7F37709D}] => (Allow) C:\Users\Stephanie\Software\QvodSetup5.exe
FirewallRules: [TCP Query User{39C94589-8EEF-4387-A396-5EA8C1C7622D}C:\program files\graphisoft\archicad 17\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 17\licensefilegenerator.exe
FirewallRules: [UDP Query User{59A0A914-9A52-4081-A096-4FEF886C1C0C}C:\program files\graphisoft\archicad 17\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 17\licensefilegenerator.exe
FirewallRules: [{F15E5588-EF66-4004-9633-79C9BBA1AD70}] => (Allow) LPort=49344
FirewallRules: [{D04E1889-7E37-4034-8F44-FB5C95505FA9}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{32ADF467-B45F-4A48-BDA6-6E0EFD4A728D}C:\program files\matlab\r2014b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2014b\bin\win64\matlab.exe
FirewallRules: [UDP Query User{AC2D892D-D4DF-4FA6-910C-1FB768D9E801}C:\program files\matlab\r2014b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2014b\bin\win64\matlab.exe
FirewallRules: [{0D682CCE-8A38-4065-AE6E-68F030685467}] => (Block) %ProgramFiles%\MATLAB\R2014b\bin\matlab.exe
FirewallRules: [TCP Query User{EA4D4FFF-AE56-4C14-897E-010A0AB4BA1F}C:\program files\matlab\r2014b\bin\win64\matlab.exe] => (Block) C:\program files\matlab\r2014b\bin\win64\matlab.exe
FirewallRules: [UDP Query User{AA635306-9AE5-4873-8D7D-72A4A3D218F6}C:\program files\matlab\r2014b\bin\win64\matlab.exe] => (Block) C:\program files\matlab\r2014b\bin\win64\matlab.exe
FirewallRules: [{9B099A3E-0ED1-48F2-8AC4-3DCEAD181F5A}] => (Allow) C:\Users\Stephanie\AppData\Roaming\qiqibox\QiqiBox508.exe
FirewallRules: [{495A0FD9-D67D-4CAE-A36A-39B8620A209C}] => (Allow) C:\Users\Stephanie\AppData\Roaming\qiqibox\QiqiBox508.exe
FirewallRules: [{ACE678C0-A9F5-4413-9CC0-9825DD8D61EF}] => (Allow) C:\Users\Stephanie\AppData\Roaming\videocalendar\1.0.0.434\videocalendar.exe
FirewallRules: [{2771B980-6806-4DFA-AD0F-988F9FF83AF8}] => (Allow) C:\Users\Stephanie\AppData\Roaming\videocalendar\1.0.0.434\BindTask.exe
FirewallRules: [{45F9C5F3-75F3-418E-B7AB-D592BD80F9B4}] => (Allow) C:\Users\Stephanie\AppData\Roaming\videocalendar\1.0.0.434\report.exe
FirewallRules: [{7FD2CDC2-F816-4D68-A1CE-F5774AA5D890}] => (Allow) C:\Windows\TEMP\BindTask.exe
FirewallRules: [{B6E50328-65D9-42F1-ACF7-AC319C3AE113}] => (Allow) C:\Windows\TEMP\BindTask.exe
FirewallRules: [{D21BB80F-BBC5-4180-B3B1-ECD4B13CB30E}] => (Allow) C:\Windows\system32\config\systemprofile\AppData\Roaming\videocalendar\1.0.0.498\videocalendar.exe
FirewallRules: [{B38A7B02-7AE0-4009-AF7B-A958D6686FCA}] => (Allow) C:\Windows\system32\config\systemprofile\AppData\Roaming\videocalendar\1.0.0.498\BindTask.exe
FirewallRules: [{B9079F5D-9497-497A-9DDC-7E6D87FDF272}] => (Allow) C:\Windows\TEMP\BindTask.exe
FirewallRules: [{21D83C95-DB89-4E63-8C21-840ED91E8938}] => (Allow) C:\Windows\system32\config\systemprofile\AppData\Roaming\videocalendar\1.0.0.498\report.exe
FirewallRules: [{9E95DB61-8B60-4F91-A558-8A3061831186}] => (Allow) C:\Program Files (x86)\kingsoft\shoujizhushou\kphonetray.exe
FirewallRules: [{42786260-F3EB-4BB4-9140-FB24D0E63E91}] => (Allow) C:\Program Files (x86)\kingsoft\shoujizhushou\kphonetray.exe
FirewallRules: [{4157F3F8-A9AD-450E-ADAA-F3CBFEEE67FA}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
FirewallRules: [{5A329FE1-C69A-467D-B326-7AD7E453BFAE}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\MxUp.exe
FirewallRules: [{497F74C4-6C7A-4A4D-9C94-88CA005A2C07}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
FirewallRules: [{C955028A-887C-4075-A0BF-F043AC5366C3}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\MxUp.exe
FirewallRules: [{56996580-B4E8-43D4-9E8D-76A7AF79D8DA}] => (Allow) C:\Windows\TEMP\BindTask.exe
FirewallRules: [{62053657-8F06-4CE0-B828-947CCDA664FE}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{5269CD1E-0CA7-4C2F-92DB-F8B6869B3954}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{27F4D9B9-52D6-451A-B910-D23E6DD0325A}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\MxUp.exe
FirewallRules: [{4339D275-DF45-49D5-AABF-502A886C2112}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
FirewallRules: [{E8A8C456-AE37-415A-A6BD-92593BCC4069}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\MxUp.exe
FirewallRules: [{5E55D06A-5CEB-4CEC-BF4C-204744645105}] => (Allow) C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
FirewallRules: [{BE51D9DE-195F-4F28-ADC4-8AA5520D6817}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6C256A94-10AA-45AD-8FFD-9C510429FA00}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{561061EB-5762-4764-A480-92BB0743D449}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{05820177-D45A-43D4-9434-1E3106956267}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{50270773-98E3-41F9-80A3-2CDF6C1DCA80}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{560B34AB-2607-439F-AC27-DFC56D6946B4}C:\users\stephanie\appdata\roaming\sogougamedownload\bin\download\minithunderplatform.exe] => (Allow) C:\users\stephanie\appdata\roaming\sogougamedownload\bin\download\minithunderplatform.exe
FirewallRules: [UDP Query User{0FD69B39-995B-4C4D-B329-1CBF3298F71A}C:\users\stephanie\appdata\roaming\sogougamedownload\bin\download\minithunderplatform.exe] => (Allow) C:\users\stephanie\appdata\roaming\sogougamedownload\bin\download\minithunderplatform.exe
FirewallRules: [{C3BD626B-3718-450A-8136-C6DA0DDB62FB}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{19D62474-9565-4A66-8728-312F23724CA3}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{B835B206-5BE4-4313-B051-C668E9D8C219}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{4071EC6E-8B30-4870-BE10-7C2D861A9351}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [TCP Query User{E2FC3F04-C7FC-4DDF-8A1F-B39496870498}C:\program files\graphisoft\archicad 19\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 19\licensefilegenerator.exe
FirewallRules: [UDP Query User{600E5291-DF3C-4E70-8187-972A84146B63}C:\program files\graphisoft\archicad 19\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 19\licensefilegenerator.exe
FirewallRules: [{29EFE943-171F-4EFF-9E7C-31294ADAECB7}] => (Allow) C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
FirewallRules: [{93623906-A9B4-4DAE-8FC4-23A31F9DE5EE}] => (Allow) C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
FirewallRules: [{D55658A0-3D72-4B48-A9DF-2DB2A76BCA12}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{AFA8DA26-7C0F-45ED-BFAF-66F9392074A2}] => (Allow) LPort=2869
FirewallRules: [{598C707A-0C36-4E35-9469-E09265C22ECA}] => (Allow) LPort=1900
FirewallRules: [{5BB55AFC-61D8-4C23-AA1B-C2822DBF9A68}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{690F0801-ADFF-4623-9467-124C152D5F3C}] => (Allow) LPort=50248
FirewallRules: [TCP Query User{0AFF4D23-EF43-4A9F-B7AD-061AE8646F57}C:\program files\graphisoft\archicad 19\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 19\archicad.exe
FirewallRules: [UDP Query User{97F5C613-8FE6-4637-90D3-0130FA50172D}C:\program files\graphisoft\archicad 19\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 19\archicad.exe
FirewallRules: [TCP Query User{43F0BB1B-7141-4B74-8A8E-A209B87C9DD6}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Allow) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [UDP Query User{2236AC9D-8CCB-447F-9762-66E5A3D000CE}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Allow) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [{B3AF2914-C10A-4F2F-B66C-C12A8FDA6567}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9874FD47-6BBD-438C-9A3F-FB75F1DE2DED}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{07C3276D-A470-41AE-84A9-D8AC7D41AF73}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{5D4507B0-116F-4F9D-96C4-54691EC06552}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{FAC75FC1-B4C9-4017-8B26-DF209E101474}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{E482BD01-29A3-45CD-BD79-64E047B416CE}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{ECF2131E-49F5-4828-A196-BA2A85685D73}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{E4050931-5EB0-45B8-8F04-536BA2E13A08}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{67DF2944-8AE5-4350-A5A3-6444A5D01793}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [{16BD2DF2-DFC1-470F-B9E1-B435BD5F7686}] => (Allow) LPort=49259
FirewallRules: [{E6EE01A2-BC41-4A06-BAF8-A81D77EE0421}] => (Allow) LPort=5000
==================== Restore Points =========================
11-03-2016 12:55:10 Scheduled Checkpoint
18-03-2016 14:03:35 Installed DaVinci Resolve
25-03-2016 14:09:20 Scheduled Checkpoint
27-03-2016 10:40:28 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
Name: Nokia Windows Portable Device Driver
Description: Nokia Windows Portable Device Driver
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Nokia
Service: WUDFRd
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Nokia 6300
Description: Nokia 6300
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Nokia
Service: WUDFRd
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/27/2016 10:12:32 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 754
Start Time: 01d188173efaed05
Termination Time: 62
Application Path: C:\Windows\Explorer.EXE
Report Id: c80c7bad-f40c-11e5-9ec3-c01885ff51c5
Error: (03/27/2016 09:57:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/27/2016 04:13:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MxCrashReport.exe, version: 3.0.1.6, time stamp: 0x529ecba0
Faulting module name: maxzlib.dll, version: 1.2.3.6, time stamp: 0x4f7d0be5
Exception code: 0xc0000417
Fault offset: 0x00012ec8
Faulting process id: 0x1698
Faulting application start time: 0xMxCrashReport.exe0
Faulting application path: MxCrashReport.exe1
Faulting module path: MxCrashReport.exe2
Report Id: MxCrashReport.exe3
Error: (03/27/2016 03:46:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/27/2016 02:37:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/27/2016 02:08:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BDUARemovalTool.exe, version: 0.0.0.0, time stamp: 0x56cda1c2
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000002da3de0
Faulting process id: 0x1e40
Faulting application start time: 0xBDUARemovalTool.exe0
Faulting application path: BDUARemovalTool.exe1
Faulting module path: BDUARemovalTool.exe2
Report Id: BDUARemovalTool.exe3
Error: (03/27/2016 01:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/27/2016 01:07:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BDUARemovalTool.exe, version: 0.0.0.0, time stamp: 0x56cda1c2
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000034b3de0
Faulting process id: 0x23dc
Faulting application start time: 0xBDUARemovalTool.exe0
Faulting application path: BDUARemovalTool.exe1
Faulting module path: BDUARemovalTool.exe2
Report Id: BDUARemovalTool.exe3
Error: (03/27/2016 12:00:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MxCrashReport.exe, version: 3.0.1.6, time stamp: 0x529ecba0
Faulting module name: maxzlib.dll, version: 1.2.3.6, time stamp: 0x4f7d0be5
Exception code: 0xc0000417
Fault offset: 0x00012ec8
Faulting process id: 0x18c0
Faulting application start time: 0xMxCrashReport.exe0
Faulting application path: MxCrashReport.exe1
Faulting module path: MxCrashReport.exe2
Report Id: MxCrashReport.exe3
Error: (03/27/2016 11:52:21 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (03/27/2016 09:59:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069
Error: (03/27/2016 09:59:48 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330
To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
Error: (03/27/2016 09:57:27 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (03/27/2016 09:56:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The TxQBService service failed to start due to the following error:
%%2
Error: (03/27/2016 09:56:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The KyService service failed to start due to the following error:
%%2
Error: (03/27/2016 09:56:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Ijeoqmu service failed to start due to the following error:
%%2
Error: (03/27/2016 09:56:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The °Ù¶È»¥Í¨ÓηþÎñ service failed to start due to the following error:
%%2
Error: (03/27/2016 03:51:28 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Image Acquisition (WIA) service hung on starting.
Error: (03/27/2016 03:49:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069
Error: (03/27/2016 03:49:25 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330
To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Percentage of memory in use: 61%
Total physical RAM: 3991.31 MB
Available physical RAM: 1528.04 MB
Total Virtual: 7980.82 MB
Available Virtual: 5310.39 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:574.53 GB) (Free:257.78 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery) (Fixed) (Total:21.34 GB) (Free:2.22 GB) NTFS ==>[system with boot components (obtained from drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 77D9D6A3)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=574.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21.3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End of Addition.txt ============================