Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Vista won't load now, normal or safe mode...


  • This topic is locked This topic is locked
11 replies to this topic

#1 Richard14

Richard14

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 13 July 2014 - 04:46 PM

I've had help here before with some virus removal, but I'm not sure if this is a virus or not.  Windows vista now boots to a black screen.  I tried system repair and got a Blue screen:

 

A problem has been detected and windows has been shut down to prevent damage

to your computer.

 

PROCESS1_INITIALIZATION_FAILED

 

If this is the first time you've seen this stop error screen, 

restart your computer... etc

 

Technical information:

*** STOP: 0x0000006B (0xC0000102, 0XC00000002, 0X00000000, 0X00000000)

 

 

I tried to restart in Safe Mode, but it stops on

 

Loaded: \windows\system32\drivers\crcdisk.sys

 

and won't go any further...

 

Thanks for any help

 

-Richard

 



BC AdBot (Login to Remove)

 


m

#2 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 13 July 2014 - 05:21 PM

UPDATE:  After it was stuck on 

Loaded: \windows\system32\drivers\crcdisk.sys

 

It went to a blank screen again...  then about 5+ minutes later I hear the starup tone and it's on my log in screen.

 

I was able to get in and run MSSE, JRT, And AdwCleaner.  All came back clean.

 

I was also able to reboot and while it seemed to take longer than usual for the login screen to come on, it did show up and I was able to sign on..

 

I tried to run chkdsk, it said it scheduled it, so I did a reboot.  It just did the blank screen for a while, then I heard the startup tone but the screen stayed black.  Nothing happened for a while, so I held the power button for a power-off then rebooted.  It started normally, I guess, but maybe some analysis is still needed....

 

Thanks.

 

Also, I just noticed that all of my system restore points from before July 11th (Windows Update) are gone. 


Edited by Richard14, 13 July 2014 - 05:47 PM.


#3 nasdaq

nasdaq

  • Malware Response Team
  • 38,246 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:30 PM

Posted 18 July 2014 - 08:53 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

--RogueKiller--
  • Download & SAVE to your Desktop For 32bit system or For 64bit system
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • The log should be found in RKreport[1].txt on your Desktop
  • Exit/Close RogueKiller+
=======

Download the correct version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
===

Wait for further instructions.

#4 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 18 July 2014 - 03:18 PM

PC has been running fine.  Just concerned about the missing Restore points.  The last time I got help here I remember deleting many junction points from MSSE.  Seems like rouguekiller found some remnants of that.

 

RogueKiller V9.2.3.0 [Jul 11 2014] by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : http://forum.adlice.com

Website : http://www.adlice.com/softwares/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version

Started in : Normal mode

User : Richard [Admin rights]

Mode : Remove -- Date : 07/18/2014  12:53:57

 

¤¤¤ Bad processes : 0 ¤¤¤

 

¤¤¤ Registry Entries : 7 ¤¤¤

[Shell.HJ] HKEY_LOCAL_MACHINE\RK_Software_ON_D_F2A5\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : cmd.exe /k start cmd.exe  -> REPLACED (explorer.exe)

[PUM.Policies] HKEY_USERS\S-1-5-21-137111657-3113389662-2625091050-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0  -> NOT SELECTED

[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-137111657-3113389662-2625091050-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NOT SELECTED

[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_D_F2A5\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> NOT SELECTED

[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_D_F2A5\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NOT SELECTED

[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> NOT SELECTED

[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NOT SELECTED

 

¤¤¤ Scheduled tasks : 0 ¤¤¤

 

¤¤¤ Files : 1 ¤¤¤

[ZeroAccess][Junction] en-US -- C:\Program Files\Windows Defender\en-US [JUNCTION@ a000000c] >> \systemroot\system32\config -> Junction DELETED

 

¤¤¤ HOSTS File : 0 [Too big!] ¤¤¤

 

¤¤¤ Antirootkit : 0 (Driver: LOADED) ¤¤¤

 

¤¤¤ Web browsers : 0 ¤¤¤

 

¤¤¤ MBR Check : ¤¤¤

+++++ PhysicalDrive0: ST3320620AS +++++

--- User ---

[MBR] b0de3516f76f101edbe164dfbf67305f

[BSP] cb96dfa00f188250b5f4e01fecd4dba3 : HP MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 47 MB

1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 98304 | Size: 15360 MB

2 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 31555584 | Size: 289836 MB

User = LL1 ... OK

User = LL2 ... OK

 

+++++ PhysicalDrive1: WDC WD1001FALS-41K1B0 +++++

--- User ---

[MBR] 919f40fd708a26e839fcbc3f42fb5500

[BSP] 3f9ceb034a51aa40c20a0e7c201541ea : HP MBR Code

Partition table:

0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 953867 MB

User = LL1 ... OK

User = LL2 ... OK

 

 

============================================

RKreport_SCN_07182014_125258.log

 

 

 

 

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-07-2014 01

Ran by Richard (administrator) on MAIN-PC on 18-07-2014 12:56:40

Running from C:\Users\Richard\Desktop

Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English (United States)

Internet Explorer Version 9

Boot Mode: Normal

 

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\BubbleUPnP Server\BubbleUPnPServer.exe

(SEIKO EPSON CORPORATION) C:\Program Files\epson\EpsonCustomerParticipation\EPCP.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(SigmaTel, Inc.) C:\Windows\System32\stacsv.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(BillP Studios) C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Dropbox, Inc.) C:\Users\Richard\AppData\Roaming\Dropbox\bin\Dropbox.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

 

 

==================== Registry (Whitelisted) ==================

 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)

HKLM\...\Run: [WinPatrol] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe [323976 2010-05-31] (BillP Studios)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [951576 2014-03-11] (Microsoft Corporation)

HKLM\...\Run: [Nvtmru] => "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: G - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {1c57f213-c21a-11e2-8367-001d0931b4e7} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {76be9d88-b5f7-11e3-9a93-001d0931b4e7} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {b23f346c-a3b7-11e3-a70b-001d0931b4e7} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {b2e4ce85-c19a-11e2-8982-001d0931b4e7} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {b817744b-e2f0-11e3-91f2-806e6f6e6963} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...\MountPoints2: {c2c27d28-b369-11e2-b1bf-001d0931b4e7} - G:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...409d6c4515e9\InprocServer32: [Default-shell32]  <==== ATTENTION!

Startup: C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Richard\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

 

==================== Internet (Whitelisted) ====================

 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.woot.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.yahoo.com/

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()

BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)

BHO: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()

DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab

DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {BEA7310D-06C4-4339-A784-DC3804819809} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab

DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://3dlifeplayer.dl.3dvia.com/player/install/3DVIA_player_installer.exe

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

 

FireFox:

========

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)

FF Plugin: @nosltd.com/getPlus+®,version=1.6.2.91 - C:\Program Files\NOS\bin\np_gp.dll No File

FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin: @soe.sony.com/installer,version=1.0.3 - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkfjadjghjpjodfhffafagnkbgbpiphf\1.0.3.152_0\npsoe.dll No File

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @unity3d.com/UnityPlayer - C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @virtools.com/3DviaPlayer - C:\Program Files\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)

FF Plugin: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Richard\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Richard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-02]

 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1080410

CHR Extension: (Angry Birds) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-02-22]

CHR Extension: (Google Docs) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-18]

CHR Extension: (Google Drive) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]

CHR Extension: (WOT) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-02-22]

CHR Extension: (YouTube) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-18]

CHR Extension: (Google Cast) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-02-22]

CHR Extension: (Google Search) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-18]

CHR Extension: (Google Wallet) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]

CHR Extension: (Gmail) - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-18]

CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Richard\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-19]

 

========================== Services (Whitelisted) =================

 

S3 AllShare; C:\Program Files\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe [6638080 2010-07-16] () [File not signed]

R2 BubbleUPnP Server; C:\Program Files\BubbleUPnP Server\BubbleUPnPServer.exe [196608 2011-11-16] () [File not signed]

R2 EpsonCustomerParticipation; C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe [521600 2011-06-09] (SEIKO EPSON CORPORATION)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [File not signed]

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [File not signed]

R2 STacSV; C:\Windows\system32\STacSV.exe [94208 2007-09-12] (SigmaTel, Inc.)

S3 stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [69632 2007-07-11] (MicroVision Development, Inc.) [File not signed]

S2 SwOffScheduler; C:\Program Files\Airytec\Switch Off\swoff.exe [135680 2014-02-12] (Airytec) [File not signed]

S2 SwOffWeb; C:\Program Files\Airytec\Switch Off\swoff.exe [135680 2014-02-12] (Airytec) [File not signed]

S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

 

==================== Drivers (Whitelisted) ====================

 

S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV32.sys [105984 2009-10-27] (QUALCOMM Incorporated)

R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [40720 2009-06-17] (Logitech, Inc.)

R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10384 2009-06-17] (Logitech, Inc.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation)

R1 MpKsl6c82b54f; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE598414-A3BE-4590-9792-654B6A673964}\MpKsl6c82b54f.sys [39464 2014-07-18] (Microsoft Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.)

R3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2007-09-12] (SigmaTel, Inc.)

S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [521216 2008-01-18] (Microsoft Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]

S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

 

==================== One Month Created Files and Folders ========

 

2014-07-18 12:56 - 2014-07-18 12:57 - 00017646 _____ () C:\Users\Richard\Desktop\FRST.txt

2014-07-18 12:56 - 2014-07-18 12:56 - 00000000 ____D () C:\FRST

2014-07-18 12:55 - 2014-07-18 12:55 - 00002917 _____ () C:\Users\Richard\Desktop\RK.txt

2014-07-18 12:44 - 2014-07-18 12:44 - 00029160 _____ () C:\Windows\system32\Drivers\TrueSight.sys

2014-07-18 12:44 - 2014-07-18 12:44 - 00000000 ____D () C:\ProgramData\RogueKiller

2014-07-18 12:41 - 2014-07-18 12:41 - 01077248 _____ (Farbar) C:\Users\Richard\Desktop\FRST.exe

2014-07-18 12:40 - 2014-07-18 12:40 - 04770904 _____ () C:\Users\Richard\Desktop\RogueKiller.exe

2014-07-16 20:03 - 2014-07-16 20:03 - 00321439 _____ () C:\Users\Richard\Downloads\scnzb_efnet_518551_Star_Trek_TNG_S06E07_720p_BluRay_x264_GECKOS.nzb

2014-07-13 17:24 - 2014-07-13 17:24 - 00000324 _____ () C:\Windows\PFRO.log

2014-07-13 17:21 - 2014-07-13 17:21 - 00000000 ____D () C:\ProgramData\Emsisoft

2014-07-13 15:47 - 2014-07-13 17:24 - 00000000 ____D () C:\Program Files\Emsisoft Anti-Malware

2014-07-09 14:47 - 2014-06-06 17:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 14:47 - 2014-06-06 01:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 14:47 - 2014-05-29 23:53 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 14:46 - 2014-06-06 17:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 14:46 - 2014-06-06 16:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 14:46 - 2014-06-06 16:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-09 14:46 - 2014-06-06 16:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 14:46 - 2014-06-06 16:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-09 14:46 - 2014-06-06 16:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 14:46 - 2014-06-06 16:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-07-09 14:46 - 2014-06-06 15:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-09 14:46 - 2014-06-06 15:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-09 14:46 - 2014-06-06 15:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-07-09 14:46 - 2014-06-06 15:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-09 14:46 - 2014-06-06 15:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 14:46 - 2014-06-06 15:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 14:46 - 2014-06-06 15:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 14:46 - 2014-06-06 15:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-07-09 14:46 - 2014-06-06 15:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 14:46 - 2014-06-06 15:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 14:46 - 2014-06-06 15:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-07-09 14:46 - 2014-06-06 15:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-09 14:46 - 2014-06-06 15:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-07-09 14:46 - 2014-06-06 15:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-06-30 11:04 - 2014-07-02 19:36 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Spore

2014-06-30 11:04 - 2014-06-30 11:05 - 00000000 ____D () C:\Users\Richard\Documents\My Spore Creations

2014-06-30 11:03 - 2014-06-30 11:04 - 00026651 _____ () C:\Windows\DirectX.log

2014-06-30 08:56 - 2014-06-30 08:56 - 00000215 _____ () C:\Users\Richard\Desktop\Spore.url

2014-06-25 18:01 - 2014-06-25 18:02 - 12619893 _____ () C:\Users\Richard\Downloads\PayDay The Minecraft Heist Adventure Map 1.01.zip

2014-06-23 14:35 - 2014-06-23 14:35 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\ttales

2014-06-22 14:36 - 2014-06-22 14:36 - 08700480 _____ () C:\Users\Richard\Downloads\195874_FULL_a_b_teevee_EFNet_Star_Trek_TNG_S06E02_720p_BluRay_x264_GECKOS.nzb

2014-06-20 21:46 - 2014-06-20 21:46 - 00000907 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Airytec Switch Off.lnk

2014-06-20 21:46 - 2014-06-20 21:46 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Airytec

2014-06-20 21:46 - 2014-06-20 21:46 - 00000000 ____D () C:\Program Files\Airytec

2014-06-20 13:09 - 2014-06-20 13:09 - 00209920 _____ () C:\Users\Richard\Downloads\swoff342.exe

2014-06-18 19:15 - 2014-06-18 19:15 - 00052164 _____ () C:\Users\Richard\Downloads\196510_FULL_a_b_teevee_EFNet_Fargo_S01E10_HDTV_x264_LOL_fargo_110_hdtv_lol.nzb

 

==================== One Month Modified Files and Folders =======

 

2014-07-18 12:57 - 2014-07-18 12:56 - 00017646 _____ () C:\Users\Richard\Desktop\FRST.txt

2014-07-18 12:56 - 2014-07-18 12:56 - 00000000 ____D () C:\FRST

2014-07-18 12:55 - 2014-07-18 12:55 - 00002917 _____ () C:\Users\Richard\Desktop\RK.txt

2014-07-18 12:44 - 2014-07-18 12:44 - 00029160 _____ () C:\Windows\system32\Drivers\TrueSight.sys

2014-07-18 12:44 - 2014-07-18 12:44 - 00000000 ____D () C:\ProgramData\RogueKiller

2014-07-18 12:43 - 2010-12-21 21:42 - 00000000 ____D () C:\Users\Public\Family Tree

2014-07-18 12:41 - 2014-07-18 12:41 - 01077248 _____ (Farbar) C:\Users\Richard\Desktop\FRST.exe

2014-07-18 12:40 - 2014-07-18 12:40 - 04770904 _____ () C:\Users\Richard\Desktop\RogueKiller.exe

2014-07-18 12:13 - 2009-12-29 18:46 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-18 11:06 - 2006-11-02 05:47 - 00003568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-18 11:06 - 2006-11-02 05:47 - 00003568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-18 11:05 - 2008-04-10 02:23 - 01954494 _____ () C:\Windows\WindowsUpdate.log

2014-07-18 07:12 - 2014-04-05 09:45 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\DropboxMaster

2014-07-18 07:12 - 2012-07-18 13:38 - 00000000 ___RD () C:\Users\Richard\Dropbox

2014-07-18 07:12 - 2012-07-18 13:35 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Dropbox

2014-07-18 07:11 - 2009-12-29 18:46 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-18 07:07 - 2014-06-17 18:51 - 00000000 ____D () C:\Program Files\BubbleUPnP Server

2014-07-18 07:07 - 2006-11-02 06:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-17 23:52 - 2006-11-02 06:01 - 00032572 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-17 23:23 - 2010-03-14 15:35 - 10135255 _____ () C:\Windows\system32\http_ss.log

2014-07-17 21:21 - 2014-06-17 19:56 - 00000074 _____ () C:\Windows\system32\log.log

2014-07-17 15:13 - 2011-04-13 18:52 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\.minecraft

2014-07-17 12:59 - 2010-05-14 22:00 - 00000000 ____D () C:\ProgramData\StaxRip

2014-07-17 12:43 - 2009-01-25 22:22 - 00000000 ____D () C:\ProgramData\DVD Shrink

2014-07-16 21:22 - 2012-07-12 20:27 - 00000000 ____D () C:\Program Files\Steam

2014-07-16 20:03 - 2014-07-16 20:03 - 00321439 _____ () C:\Users\Richard\Downloads\scnzb_efnet_518551_Star_Trek_TNG_S06E07_720p_BluRay_x264_GECKOS.nzb

2014-07-16 00:15 - 2009-01-24 15:40 - 00000000 ____D () C:\Users\Richard\Desktop\XNEWS

2014-07-15 18:21 - 2014-02-18 16:05 - 00000000 ____D () C:\Users\Richard\Downloads\math

2014-07-14 13:13 - 2012-07-12 20:27 - 00000000 ____D () C:\Program Files\Common Files\Steam

2014-07-13 17:24 - 2014-07-13 17:24 - 00000324 _____ () C:\Windows\PFRO.log

2014-07-13 17:24 - 2014-07-13 15:47 - 00000000 ____D () C:\Program Files\Emsisoft Anti-Malware

2014-07-13 17:21 - 2014-07-13 17:21 - 00000000 ____D () C:\ProgramData\Emsisoft

2014-07-13 15:09 - 2014-06-12 21:33 - 00000000 ____D () C:\AdwCleaner

2014-07-13 10:50 - 2014-04-05 10:31 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\vlc

2014-07-13 07:50 - 2013-05-19 15:41 - 00000000 ___RD () C:\Users\Richard\Google Drive

2014-07-12 16:48 - 2009-01-14 17:46 - 00069120 _____ () C:\Users\Richard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-07-12 14:44 - 2006-11-02 03:33 - 00772866 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 13:09 - 2006-11-02 05:47 - 00326504 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 13:00 - 2006-11-02 05:37 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 12:52 - 2013-08-14 22:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-11 12:49 - 2006-11-02 03:24 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-07-07 19:14 - 2013-05-19 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2014-07-06 21:05 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Richard\Desktop\Wedding

2014-07-02 19:36 - 2014-06-30 11:04 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Spore

2014-06-30 11:05 - 2014-06-30 11:04 - 00000000 ____D () C:\Users\Richard\Documents\My Spore Creations

2014-06-30 11:04 - 2014-06-30 11:03 - 00026651 _____ () C:\Windows\DirectX.log

2014-06-30 08:56 - 2014-06-30 08:56 - 00000215 _____ () C:\Users\Richard\Desktop\Spore.url

2014-06-29 21:06 - 2009-01-14 17:37 - 00000000 ____D () C:\Users\Richard

2014-06-25 18:02 - 2014-06-25 18:01 - 12619893 _____ () C:\Users\Richard\Downloads\PayDay The Minecraft Heist Adventure Map 1.01.zip

2014-06-23 14:35 - 2014-06-23 14:35 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\ttales

2014-06-22 19:50 - 2009-01-24 20:15 - 00000000 ____D () C:\Users\Richard\AppData\Local\QuickPar

2014-06-22 15:28 - 2009-01-14 21:14 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Media Player Classic

2014-06-22 14:36 - 2014-06-22 14:36 - 08700480 _____ () C:\Users\Richard\Downloads\195874_FULL_a_b_teevee_EFNet_Star_Trek_TNG_S06E02_720p_BluRay_x264_GECKOS.nzb

2014-06-20 21:46 - 2014-06-20 21:46 - 00000907 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Airytec Switch Off.lnk

2014-06-20 21:46 - 2014-06-20 21:46 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Airytec

2014-06-20 21:46 - 2014-06-20 21:46 - 00000000 ____D () C:\Program Files\Airytec

2014-06-20 13:09 - 2014-06-20 13:09 - 00209920 _____ () C:\Users\Richard\Downloads\swoff342.exe

2014-06-19 20:34 - 2014-06-11 17:46 - 00000000 ____D () C:\Users\Richard\Desktop\Grandma Bernal

2014-06-18 19:15 - 2014-06-18 19:15 - 00052164 _____ () C:\Users\Richard\Downloads\196510_FULL_a_b_teevee_EFNet_Fargo_S01E10_HDTV_x264_LOL_fargo_110_hdtv_lol.nzb

 

Some content of TEMP:

====================

C:\Users\Richard\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpygl7kb.dll

 

 

==================== Bamital & volsnap Check =================

 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

==================== End Of Log ============================



#5 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 18 July 2014 - 03:19 PM

Will only let me attatch files of 8.75 K ??

 

So here is the addition.txt

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:15-07-2014 01

Ran by Richard at 2014-07-18 12:57:52

Running from C:\Users\Richard\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

 

==================== Installed Programs ======================

 

2+2 v.2.1a (HKLM\...\2+2 v.2.1a) (Version:  - )

32 Bit HP CIO Components Installer (Version: 2.1.5 - Hewlett-Packard) Hidden

3DVIA player 5.0 (HKLM\...\{4E868D3D-6EEB-4273-926C-2287236B5B79}) (Version: 5.0.0.15 - 3DVIA)

4 Elements (HKLM\...\4 Elements_is1) (Version:  - )

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe AIR (Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden

Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )

Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)

Airytec Switch Off (HKLM\...\Airytec Switch Off) (Version: 3.4.2 - Airytec)

Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)

Amazon MP3 Uploader (HKLM\...\com.amazon.music.uploader) (Version: 1.0.7 - Amazon Services LLC)

Amazon MP3 Uploader (Version: 1.0.7 - Amazon Services LLC) Hidden

Apple Software Update (HKLM\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)

Atari800Win PLus 4.0 (HKLM\...\Atari800Win PLus) (Version: 4.0 - Marcin Lewandowski)

Audacity 2.0.5 (HKLM\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )

AVStoDVD 2.7.2 (HKLM\...\AVStoDVD) (Version: 2.7.2 - MrC)

Blackthorne (HKLM\...\{C563EEF9-17FF-4563-8B78-82AF0C4577CE}) (Version: 1.0.0 - Blizzard Entertainment)

Blue's 123 Time Activities (HKLM\...\Blue's 123 Time Activities) (Version:  - )

Bonjour (HKLM\...\{76BC2442-0002-47FA-9617-43BAD82BEF4C}) (Version: 2.0.0.34 - Apple Inc.)

Broken Age (HKLM\...\Steam App 232790) (Version:  - Double Fine Productions)

BubbleUPnP Server (HKLM\...\BubbleUPnP Server) (Version:  - )

Buildalot (HKLM\...\Buildalot_is1) (Version:  - )

Canon RAW Codec (HKLM\...\Canon RAW Codec) (Version: 1.7.0.56 - Canon Inc.)

Cargo! - The quest for gravity (HKLM\...\Steam App 41740) (Version:  - Ice-pick Lodge)

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

CDDRV_Installer (Version: 4.60 - Logitech) Hidden

Combined Community Codec Pack 2011-07-30 (HKLM\...\Combined Community Codec Pack_is1) (Version: 2011.07.30.0 - CCCP Project)

Coupon Printer for Windows (HKLM\...\Coupon Printer for Windows5.0.0.0) (Version: 5.0.0.0 - Coupons.com Incorporated)

Create and Print Plugin 4.0.8045 (HKLM\...\{4C8228F6-56B7-4E4D-968A-4BFC8A9B4655}) (Version: 4.0.8045 - AG Interactive)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

DarkLoader 4.3 (HKLM\...\DarkLoader_is1) (Version: 4.3 - WhoopDeDo.org)

Delicious Emilys Taste of Fame (HKLM\...\Delicious Emilys Taste of Fame_is1) (Version:  - )

Deponia Demo (HKLM\...\Steam App 217830) (Version:  - Daedalic Entertainment)

DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.90 - DivX, LLC)

Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)

Dust: An Elysian Tail (HKLM\...\Steam App 236090) (Version:  - Humble Hearts LLC)

DVD Shrink 3.2 (HKLM\...\DVD Shrink_is1) (Version:  - DVD Shrink)

DVDFab 8.0.8.5 (19/03/2011) (HKLM\...\DVDFab 8_is1) (Version:  - Fengtao Software Inc.)

eac3to µGUI version 0.7.2 (HKLM\...\{C21B8D64-350C-4FCA-899F-9FBEA69A92D1}_is1) (Version: 0.7.2 - )

Epson Connect (HKLM\...\{64BA551C-9AF6-495C-93F3-D1270E0045FC}) (Version:  - )

Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.0.2 - SEIKO EPSON CORPORATION)

Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)

Epson Download Navigator (HKLM\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.20.00 - SEIKO EPSON CORPORATION)

Epson PC-FAX Driver (HKLM\...\EPSON PC-FAX Driver 2) (Version:  - )

EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EPSON WorkForce 645 Series Printer Uninstall (HKLM\...\EPSON WorkForce 645 Series) (Version:  - SEIKO EPSON Corporation)

EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)

erLT (Version: 1.20.0137 - Logitech, Inc.) Hidden

ERUNT 1.1j (HKLM\...\ERUNT_is1) (Version:  - Lars Hederer)

ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )

Family Tree Maker 2014 (HKLM\...\Family Tree Maker 2014) (Version: 22.0.207 - Ancestry.com, Inc.)

Family Tree Maker 2014 (Version: 22.0.207 - Ancestry.com, Inc.) Hidden

ffdshow [rev 3285] [2010-02-25] (HKLM\...\ffdshow_is1) (Version: 1.0.0.3285 - )

FLAC 1.2.1b (remove only) (HKLM\...\FLAC) (Version: 1.2.1b - Xiph.org)

FormulaCartoon (HKCU\...\Kalydo App FormulaCartoon) (Version: 0.00.01.66 - )

Foxit Reader (HKLM\...\Foxit Reader) (Version: 4.0.0.619 - Foxit Software Company)

Gardenscapes (HKLM\...\Gardenscapes_is1) (Version:  - )

Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)

Google Drive (HKLM\...\{75939021-3B68-419D-8DC1-E9823BFF9658}) (Version: 1.16.7009.9618 - Google, Inc.)

Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version:  - Google Inc.)

Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden

Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)

Governor of Poker (HKLM\...\Governor of Poker_is1) (Version:  - )

Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )

Half-Life 2 (HKLM\...\Steam App 220) (Version:  - Valve)

HashCheck Shell Extension (x86-32) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)

HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)

Hoyle Casino (HKLM\...\{3F99D180-34C3-4151-8C6C-86FC5D7BDFBD}) (Version: 1.0.0 - Encore)

ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.0.0 - LIGHTNING UK!)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )

Intel® PRO Network Connections 12.1.12.4 (HKLM\...\PROSetDX) (Version:  - Dell)

Intel® PRO Network Connections 12.1.12.4 (Version:  - Dell) Hidden

Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

Kalydo Player 4.11.01 (HKCU\...\KalydoPlayer) (Version: 4.11.01 - Eximion B.V.)

KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden

LAME v3.98.2 for Audacity (HKLM\...\LAME for Audacity_is1) (Version:  - )

LEGO MARVEL Super Heroes (HKLM\...\Steam App 249130) (Version:  - Traveller's Tales)

LEGO® Batman™ (HKLM\...\InstallShield_{398AB469-77FC-4935-820B-D419388C0A6A}) (Version: 1.00.0000 - Warner Bros. Interactive Entertainment)

LEGO® Batman™ (Version: 1.00.0000 - Warner Bros. Interactive Entertainment) Hidden

LEGO® Batman™ 2: DC Super Heroes (HKLM\...\{4E2EA555-3DAE-4BE1-96BF-6A632ACFE8DE}) (Version: 1.0.0.0 - Warner Bros. Interactive Entertainment)

LEGO® Harry Potter™: Years 1-4 (HKLM\...\{C5A8DF48-580B-44D3-B2B2-E965A9368F28}) (Version: 1.0.0.0 - WB Games)

LEGO® Indiana Jones™ (HKLM\...\InstallShield_{A14C40E7-F7E5-498D-B8BD-A3EAE942EED0}) (Version: 1.00.0000 - LucasArts)

LEGO® Indiana Jones™ (Version: 1.00.0000 - LucasArts) Hidden

LEGO® Indiana Jones™ 2 (Version: 1.00.0000 - LucasArts) Hidden

LEGO® Indiana Jones™ 2: The Adventure Continues (HKLM\...\InstallShield_{11192AA7-FBE3-4150-9667-EE7279CCC769}) (Version: 1.00.0000 - LucasArts)

LEGO® Pirates of the Caribbean The Video Game (HKLM\...\{64958DA4-79D3-43FD-AF06-720DAD044F9E}) (Version: 1.0.0.0 - Disney Interactive Studios)

LEGO® Star Wars™: The Complete Saga (HKLM\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)

LEGO® Star Wars™: The Complete Saga (Version: 1.00.0000 - LucasArts) Hidden

LEGO® The Lord of the Rings™ (HKLM\...\{C6F20FA7-342A-47A9-A3C8-EB36CABE6419}) (Version: 1.0.0.0 - Warner Bros. Interactive Entertainment)

Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)

Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)

MapleStory (HKLM\...\MapleStory) (Version:  - )

Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden

Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version:  - )

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)

Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft WSE 3.0 (HKLM\...\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}) (Version: 3.0.5305.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MKVToolNix 6.9.1 (32bit) (HKLM\...\MKVtoolnix) (Version: 6.9.1 - Moritz Bunkus)

Move Networks Media Player for Internet Explorer (HKCU\...\Move Networks Player - IE) (Version:  - )

MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCSetup (Version: 1.00.0000 - HP) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MyPublisher (HKLM\...\MyPublisher) (Version:  - MyPublisher, Inc.)

Nexon Game Manager (HKLM\...\{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}) (Version:  - )

Next Generation Visualisations (HKLM\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)

NVIDIA 3D Vision Controller Driver (Version: 275.33 - NVIDIA Corporation) Hidden

NVIDIA Control Panel 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)

NVIDIA Graphics Driver 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden

OpenOffice.org 3.0 (HKLM\...\{F44DA61E-720D-4E79-871F-F6E628B33242}) (Version: 3.0.9358 - OpenOffice.org)

Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.)

PC Wizard 2010.1.94 (HKLM\...\PC Wizard 2010_is1) (Version:  - Laurent KUTIL & Franck DELATTRE)

PhotoScape (HKLM\...\PhotoScape) (Version:  - )

Pinball FX2 (HKLM\...\Steam App 226980) (Version:  - Zen Studios)

Platformines Demo (HKLM\...\Steam App 275000) (Version:  - Magiko Gaming)

Portal 2 (HKLM\...\Steam App 620) (Version:  - Valve)

Product Documentation Launcher (HKLM\...\{89CEAE14-DD0F-448E-9554-15781EC9DB24}) (Version: 1.00.0000 - Dell Inc.)

Psychonauts (HKLM\...\Steam App 3830) (Version:  - Double Fine Productions)

Quantum Conundrum (HKLM\...\Steam App 200010) (Version:  - Airtight Games)

QuickPar 0.9 (HKLM\...\QuickPar) (Version: 0.9 - Peter B. Clements)

QuickTime (HKLM\...\{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}) (Version: 7.60.92.0 - Apple Inc.)

Rayman Legends Demo (HKLM\...\Steam App 243340) (Version:  - )

ResidualVM (HKLM\...\ResidualVM_is1) (Version:  - The ResidualVM Team)

Return to Castle Wolfenstein (HKLM\...\Return to Castle Wolfenstein) (Version: 1.41 - Activision, Inc.)

Rogue Legacy (HKLM\...\Steam App 241600) (Version:  - Cellar Door Games)

RollerCoaster Tycoon 3: Platinum! (HKLM\...\Steam App 2700) (Version:  - Frontier)

Roxio Activation Module (HKLM\...\{07159635-9DFE-4105-BFC0-2817DB540C68}) (Version: 1.0 - Roxio)

Roxio Creator Audio (HKLM\...\{83FFCFC7-88C6-41C6-8752-958A45325C82}) (Version: 3.5.0 - Roxio)

Roxio Creator BDAV Plugin (HKLM\...\{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}) (Version: 3.5.0 - Roxio)

Roxio Creator Copy (HKLM\...\{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}) (Version: 3.5.0 - Roxio)

Roxio Creator Data (HKLM\...\{0D397393-9B50-4C52-84D5-77E344289F87}) (Version: 3.5.0 - Roxio)

Roxio Creator Premier (HKLM\...\{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}) (Version: 3.5.0 - Roxio)

Roxio Creator Tools (HKLM\...\{0394CDC8-FABD-4ED8-B104-03393876DFDF}) (Version: 3.5.0 - Roxio)

Roxio EasyArchive (HKLM\...\{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}) (Version: 3.5.0 - Roxio)

Roxio Express Labeler (HKLM\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 3.2 - Roxio)

Roxio MyDVD Premier (HKLM\...\{AAC90D5F-B8B1-4A06-B888-F3A241124D0D}) (Version: 9.1.573 - Roxio)

Roxio Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 6.0.0 - Roxio)

RRDtool (HKLM\...\{63A5F548-B114-4413-BD9E-5EAF35F90779}) (Version: 1.4.5.0 - Tobias Oetiker)

Sam and Max - The Devil's Playhouse - The Penal Zone (HKLM\...\The Penal Zone) (Version: 1.0.0.20 - Telltale Games)

Samantha Swift and the Mystery from Atlantis (HKLM\...\Samantha Swift and the Mystery from Atlantis_is1) (Version:  - )

SAMSUNG PC Share Manager (HKLM\...\InstallShield_{2A2E822B-3B0E-46C1-9E3B-ACD7D1E95139}) (Version: 4.0 - SAMSUNG)

SAMSUNG PC Share Manager (Version: 4.0 - SAMSUNG) Hidden

Scholastic's I SPY Junior Puppet Playhouse (HKLM\...\Scholastic's I SPY Junior Puppet Playhouse) (Version:  - )

ScummVM 1.1.1 (HKLM\...\ScummVM_is1) (Version:  - )

Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden

SimCity 4 Deluxe (HKLM\...\Steam App 24780) (Version:  - EA - Maxis)

SketchUp DWG Importer (Version: 1.0.0.0 - Google, Inc.) Hidden

Sonic CinePlayer Decoder Pack (HKLM\...\{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}) (Version: 4.2.0 - Sonic Solutions)

Spore (HKLM\...\Steam App 17390) (Version:  - Maxis™)

Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

stunnel (HKLM\...\stunnel) (Version:  - )

Subtitle Edit 3.2.8 (HKLM\...\SubtitleEdit_is1) (Version: 3.2.8.1220 - Nikse)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Sword of the Stars: The Pit (HKLM\...\Steam App 233700) (Version:  - Kerberos Productions)

System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version:  - )

Tales of Monkey Island - Rise of the Pirate God (HKLM\...\Rise of the Pirate God) (Version: 1.0.0.19 - Telltale Games)

Tales of Monkey Island - The Trial and Execution of Guybrush Threepwood (HKLM\...\The Trial and Execution of Guybrush Threepwood) (Version: 1.0.0.19 - Telltale Games)

Tales of Monkey Island Chapter 1 (HKLM\...\Tales of Monkey Island Chapter 1_is1) (Version:  - )

Tales of Monkey Island Chapter 2 (HKLM\...\Tales of Monkey Island Chapter 2_is1) (Version:  - )

Tasty Planet (HKLM\...\Tasty Planet_is1) (Version:  - )

Teslagrad Demo (HKLM\...\Steam App 254560) (Version:  - Rain Games)

The Great Sea Battle The Game of Battleship (HKLM\...\{F039A627-2D6C-469C-89C1-AF07CBD17FF2}) (Version: 1.0 - Trio Studio)

The LEGO® Movie - Videogame (HKLM\...\Steam App 267530) (Version:  - TT Fusion)

The Simpsons Hit & Run™ (HKLM\...\{F79AAB3A-B8B4-4AC7-94AB-1C4C076C6A89}) (Version: 1.00.000 - )

The Stanley Parable (HKLM\...\Steam App 221910) (Version:  - Galactic Cafe)

The Treasures Of Montezuma (HKLM\...\The Treasures Of Montezuma_is1) (Version:  - )

The Treasures of Montezuma 2 1.00 (HKLM\...\The Treasures of Montezuma 2 1.00) (Version:  - )

Thief 2 (HKLM\...\Thief2DeinstallKey) (Version:  - )

Thief Gold (HKLM\...\ThiefGoldDeinstallKey) (Version:  - )

Time Riddles The Mansion 1.00 (HKLM\...\Time Riddles The Mansion 1.00) (Version:  - )

Tiny and Big: Grandpa's Leftovers (HKLM\...\Steam App 205910) (Version:  - Black Pants Game Studio)

TreeSize Free V2.7 (HKLM\...\TreeSize Free_is1) (Version: 2.7 - JAM Software)

Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)

Unity Web Player (HKLM\...\UnityWebPlayer) (Version: 2.1.0f5_16147 - Unity Technologies ApS)

Universe Sandbox (HKLM\...\Steam App 72200) (Version:  - Giant Army)

Unreal Editor (HKLM\...\ST5UNST #1) (Version:  - )

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)

Uplay (HKLM\...\Uplay) (Version: 3.0 - Ubisoft)

User's Guides (HKLM\...\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}) (Version:  - )

UV Realtime (HKLM\...\{5A4B3F22-A5DF-43D7-89A7-6121F5431F32}) (Version: 1.9.1 - Dan Wilson)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

Veronica Rivers Order of Conspiracy (HKLM\...\Veronica Rivers Order of Conspiracy_is1) (Version:  - )

Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)

Vitrum Demo (HKLM\...\Steam App 294350) (Version:  - 9heads Game Studios)

VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

VP3 Codec for Video for Windows (HKLM\...\VP3 Codec for Video for Windows) (Version:  - )

WildTangent Games (HKLM\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.66 - WildTangent)

Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)

Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden

Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Sync (HKLM\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)

Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version:  - )

Windows Media Encoder 9 Series (Version: 9.00.3374 - Microsoft Corporation) Hidden

WinPatrol (HKLM\...\WinPatrol) (Version: 18.1.2010.0 - BillP Studios)

WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )

Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

 

==================== Restore Points  =========================

 

11-07-2014 19:46:19 Windows Update

12-07-2014 19:13:45 Scheduled Checkpoint

13-07-2014 16:25:03 Scheduled Checkpoint

15-07-2014 05:49:02 Scheduled Checkpoint

15-07-2014 15:43:50 Windows Update

16-07-2014 07:00:10 Scheduled Checkpoint

17-07-2014 05:00:54 Scheduled Checkpoint

18-07-2014 04:58:27 Scheduled Checkpoint

18-07-2014 17:17:53 Scheduled Checkpoint

18-07-2014 17:57:57 Windows Update

 

==================== Hosts content: ==========================

 

2013-06-28 20:50 - 2014-05-23 11:47 - 00571911 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1  localhost

127.0.0.1  fr.a2dfp.net

127.0.0.1  m.fr.a2dfp.net

127.0.0.1  ad.a8.net

127.0.0.1  asy.a8ww.net

127.0.0.1  abcstats.com

127.0.0.1  a.abv.bg

127.0.0.1  adserver.abv.bg

127.0.0.1  adv.abv.bg

127.0.0.1  bimg.abv.bg

127.0.0.1  ca.abv.bg

127.0.0.1  www2.a-counter.kiev.ua

127.0.0.1  track.acclaimnetwork.com

127.0.0.1  accuserveadsystem.com

127.0.0.1  www.accuserveadsystem.com

127.0.0.1  achmedia.com

127.0.0.1  csh.actiondesk.com

127.0.0.1  www.activemeter.com #[Tracking.Cookie]

127.0.0.1  ads.activepower.net

127.0.0.1  stat.active24stats.nl #[Tracking.Cookie]

127.0.0.1  cms.ad2click.nl

127.0.0.1  ad2games.com

127.0.0.1  ads.ad2games.com

127.0.0.1  content.ad20.net

127.0.0.1  core.ad20.net

127.0.0.1  banner.ad.nu

127.0.0.1  cl21.v4.adaction.se

127.0.0.1  adadvisor.net

127.0.0.1  tag1.adaptiveads.com

 

There are 1000 more lines.

 

 

==================== Scheduled Tasks (whitelisted) =============

 

Task: {000A3F2F-796D-4015-AB35-DC663AFF61E3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {00B5C124-946A-4976-8349-22E9C6C7CC01} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {00F2AB66-5D16-41F0-92E9-A7C171AA65B7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {01D33C3D-210A-4B79-BB67-3E9243605023} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {02095620-29F2-4ACE-8881-F3F99F0E70CA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0218D6D3-9D8C-42CF-A9A1-9AAC550104F3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {023BBDB5-7F8E-4D89-AD40-0A162D3F2E80} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0290943D-2AC7-45D3-8AB5-A476126B2D83} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {02DBC0E3-B500-45B1-9672-1B5BE0A4A041} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {02F42CC2-C89B-4E43-915F-6930D3C4E147} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {02FDA8E1-7664-41EE-912B-E4E7FCF8B9F3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {03790D44-B4B4-4B6F-920E-E3B5A779F395} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {05F33E2B-D0CB-424C-9F75-916033354550} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-29] (Google Inc.)

Task: {06168D1A-72D0-491A-AE0A-15E7AD8D04CF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {06CCFD23-9445-47A9-8EA9-6AC60D539FAD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {071C7F46-C437-40B3-936C-4E7BCDD26BF5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {076FEC47-C349-4CA2-B832-41E2D9FC21EB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {07B434B1-BFCC-4681-BFA9-BE160C0AA27E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {07DDDC79-52F7-4840-BE0F-7CFC3D44EB6B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0874ADEE-29E5-4BB1-AC10-FD354528AF0F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {08BF66FF-4341-493A-A2E8-316034484209} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {08E80809-324B-4B53-9745-9BCDDB5CFD10} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {08FB9295-18C4-4905-B38D-9EB966608185} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0947EF2B-BF7E-4275-9699-98E089C94C3B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0A3F2C47-0DBF-4A10-9AC4-4C5A6082A413} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0A587688-5BBD-4E18-A3A9-F215219FB359} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0A9B4ED3-E9CA-4A3D-B903-F8203A4F21D3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0AA8941A-B325-403F-8F4D-2C6AC91128AB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0AFBBA6B-EA1F-4FC6-8C47-8E1449686F08} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0B9A2525-90B7-49F8-8644-1667ED601037} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0CE516AC-8D33-4359-9715-02436A77A33D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0CF3D570-EE46-412D-9454-DF84778E5A27} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0D3BDDC3-0B98-41FD-A33F-87F0A521B2E6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0D3E40CF-8878-45D9-9E83-41CD0797CDF4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0D6B0080-2D70-40E5-A10D-343EBEC514D1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0D85FA4A-C062-48BE-8F12-4DB27D53499F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0DBD89CD-6F92-49AD-8538-0772A52A0D71} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0DF2D93D-9EC8-4583-A528-BEF527012919} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0E0F5DA5-174C-4893-83EE-4F16CDE84463} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0E8F2707-AD48-4D4D-9EC6-9646A125C290} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {0F0F9861-BF6A-4F0A-B00B-BA22B19BD54E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {10443C2C-B6BD-444D-9334-8E74361DFA9D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1064C872-0470-4AE3-B720-2A52DBE9CBEE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {10876A9B-AAA4-442B-90FE-5C3AE36E0A60} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {109674DE-9756-40E3-8A09-C1A5FAAC01B9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {114086C4-8BD7-4EAD-88C4-0823A7937664} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {114586CD-ED10-4776-80F5-A0FC5286B6D4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {116B83A7-EFD1-4B25-9AF4-624D78949B2D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1277458C-C0A3-4651-AF9B-333954275BDA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {12A7E5E5-0CF2-4697-AC1C-934D2CBDE16E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {12D839DD-6D10-49B3-991B-43B23A6BF982} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {14C1DB42-A4BE-42B7-AD94-C77C1D7F7A7A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {160378B8-F9EC-4C18-ADBE-BE7DE9FD5FAD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {160F7E2B-F3FF-407B-8430-0772E32E3618} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {161216F0-8ECF-4ACE-95FC-F38AE841E8DC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {170E80C8-636F-4920-AC42-FEE5CA358546} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {173192E9-7FF0-4DDD-B515-D307CC1F3AEE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {175D115D-8C92-4F43-8301-1558766D853C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {176AF8E8-D42D-4CA4-B08A-0BA4AC071545} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1806A393-A716-4147-8916-7DF59B4CBB37} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {18559D2A-49CC-4904-A459-51F518C41B40} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {18C91F5A-6E37-47DD-86F3-BA9C6009963F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {18E6D1FA-1D2D-4D9C-ADA0-B3E6F230F358} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {192684E3-06EF-469E-A51E-DA18C56C6ED2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1A390524-E160-4E12-AC41-73B925103FD0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1A65AFA3-3B52-486A-8B9B-290DBA4EA204} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1AE2EBCF-8691-4F29-B7A2-EFD3F7BA0E7A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1B113C0C-3F17-4319-ACE0-559467AD7CBA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1B624DC2-1605-48BF-9331-CF8620DE933F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1BE20F2F-B695-4BCA-8C89-DD6A18FA3D02} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1C878658-A7AF-48C0-BAB5-AA087EEE1579} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {1C95D2C7-D7FD-4AAC-98BC-01BC6541AE21} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1C9F283D-E840-4EA9-AA4F-B8E790AFAA1F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1CC138D8-CD97-460A-965C-AC50C09AC7DB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {1CEB4D93-714C-4357-A78C-016384931538} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1D137986-228F-4D39-BC05-F9F07EFB81EC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1DEA6650-AA12-4C41-AE65-D57518099296} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1E0197A2-7E85-4367-A8DE-BBA3D8CCC4D4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1E2AE96C-D13A-4D6A-A429-82A2D40EBE2E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1E35C980-2D3C-453D-9DE1-68F2448D7F43} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1E38A078-FCC4-4B6F-B438-E31E4F9D3D40} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1E5740E0-A3CC-4FB5-8EAF-32C873DA1233} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1F600C15-A63B-4984-ABE1-C5AF256901F8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1F9F4B36-ECAD-469B-84E0-38ABCD0DBFE0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {1FA753B0-4BE0-4479-8C08-CB8F7102675C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2078ECC8-F8D6-4745-A307-131A700E7B97} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {20C13712-D62D-46EC-88D9-628F92A2DE0C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2130760D-D591-44D3-A56A-7C84CB1F5BD2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2198D5C8-D874-4186-807D-71172D417E6D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {219EAC23-A67A-4F28-9343-D9CBBCB153BC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {21B56689-D105-41CB-B7C5-0A7A4A595384} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {21CB68D7-8C45-47FA-929B-A6DC2D075D73} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {21FAB3CC-938E-4CB7-B6E2-178074A77F13} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {223B9606-EDA6-43D3-AC65-5E66B7D33C75} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {22B3CF45-8DDF-47DA-9E56-D8DA7F38A245} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {22B6E6AB-E658-408A-9610-F88CF6D3F955} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {22CAEACA-FD91-44C6-9BA5-F7E4729EE1B5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {23638168-776E-443A-814C-6C62603B3F2F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {23AB728A-67B2-46B6-85A4-724662237AA7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2491E185-2B3D-4706-B2C6-B2359D69C625} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2525EC38-9C4C-41F9-9CD2-33160D16BA2B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {257D0B87-48F6-41B6-B2F1-C68A459D3798} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2582F244-9021-4EE5-8049-9B067660EF80} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {27440E4F-0D0E-4312-8AF2-ECDEC2F669B2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2751AAF9-EC91-467C-8014-72F23571D501} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {279DDFC0-EF68-4E00-8401-63148DA00BD1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {27DE988B-B39B-4352-97C9-30C181C70C76} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {27E43A82-DD20-4CFA-8FC8-6E4B64ACB36F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {28759091-7FC0-4DDD-8F5E-49F96D1D4788} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {296C7364-98D3-433F-8FFB-490AF2F3F522} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2A10D3D2-8F2F-492D-8CEE-FD4A6B77B1B2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2ACB0544-59DC-4301-9E9A-22B8642A0FAD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2B16FEE8-D4FE-482B-9502-3F986E0D71C4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2B5A9B41-881A-4061-B93E-96DF204B0614} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2BCC704A-59AB-41B6-A3B7-E2BAD35C7004} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2BF6132D-8EDB-40DB-96F2-E2D623F2D5C5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2C02E42B-5358-463A-816A-41E5EE75EDBC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2C33E5AC-76D4-48F9-9D35-DAEFE9FF540E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2C455D45-52F5-4A8B-A265-AFB5603C2B57} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2C47C9FC-041B-40DD-A1FB-DE6E12416D9A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2CFD911B-95E4-4F8E-9938-E283AF9A3C92} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2D2E7CE4-B3D5-4CC3-8C55-D4E5F5B3C1D6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2D58D3B4-C939-444D-B831-B75A333B4E16} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2D76F414-8546-44A0-AC7C-4F006EC58235} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2DA0787C-1DF8-4A12-A9E0-5356C82C3432} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2DB69E23-FD2E-4D3D-BD86-421509A2F640} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2DD94ADE-E7FF-4774-BB61-00D09B7DD89E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2E83BF97-4AAE-4025-A5BB-5C8E2FB3E6EA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2EB11E7B-84BA-4A4D-AD92-63FEA8FA2736} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2F7B6DBA-2055-479C-8580-4C47F85F1199} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {2FD3BB69-1290-49C0-98AE-AC83D64B19BC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {30322DBE-9FCB-4AC7-98B3-11DC64C0A516} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {304CC1CC-065C-49A9-BFD7-7BF7DA3C1AA6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {30A66E4E-9514-409F-85AA-F81A78F7A8F7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3157CEEE-2209-48A8-92B7-9044834C0619} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3284B5FC-0AA3-40A1-8CAF-BB53A52EFAB8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {32CFC461-84A5-4356-B3CF-4BF47EA5D3BA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {343F7EC8-6FAF-40FE-B3B6-5C4388871268} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3457FD22-44DD-4B6B-9D7E-D327ECA50F43} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {35A4B3D0-CA1E-43C7-B410-B8C73C03A1D0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {35D9E368-2E35-44E9-8199-98E419633070} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {35EC90D7-7389-4CB3-8B0E-4160B53EA2C4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3623B4B4-6371-4B20-85C1-B665A49E185A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {36407A7C-DF5B-4CF0-B17A-CF9A737A76A6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {365DA3F3-C564-4531-A93B-4A64742F1B62} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {36ECAAA0-A44A-4B66-8F80-CA98FF94E890} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {374D6AA7-DB9A-4D05-8B3C-46FADD3AAD14} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {37A9C651-7C89-423D-8D7C-0CF9410DD8F4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3824906A-193C-465F-8390-8E18D537701C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {383BB963-B6FB-4447-AEB5-FD2BD7700371} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {38FF7C02-7DBB-48C4-B07B-3F34A510169B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {393F3709-FA0C-413A-B3F3-8F1AF01A4E4D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {399C23DA-2C82-4517-917F-33D8BE17B10C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {39CEC6EB-DF8A-4CEF-A815-2B6A8187220D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3A4717A9-5525-4A54-BE09-AD15C2F5FEFC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3A7ABEBA-C15B-45DB-B8CB-BC5355C01C41} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3AD05404-8983-425E-8FB1-893E5DDFA588} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3AFFDBB2-BE03-4412-83C3-52B0FD200D20} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3B7BC4DB-B7DB-4CC0-BD82-698636B9EF95} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {3BD4C738-2CEB-4BBF-9A6B-0B641342E55D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3C715A7E-BC80-4BBA-BC5E-6BD36082E15F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3CC21584-4159-4E56-B5E8-B43C4055120D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3CE98252-EC89-4B6E-973C-4A1F52392E42} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3D4DD95C-22E6-45EB-924E-59FD480D76C2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3D51A337-F7B8-4C01-BD24-7B7566AC5852} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3D5C6CC3-5D54-44AE-8481-3D871ADEADF2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3DAA5632-F9B5-4309-99AF-DAD1BEF43134} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3E1EC17E-B695-4178-BB33-7F836920A907} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3F20B48F-A385-428B-BD57-8DD6F63A0675} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {3F9F34AC-DB19-4F5A-9F06-EB762131507C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {400CE5CD-C343-4587-8FE4-0DF4D2A4F4BB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {410B7119-82C0-4375-9988-31E7B9C9FAC6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {41892067-2E0E-41D4-9E84-7897CE3D5F9D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {41B6E262-3B55-49B6-99F2-851219191BCA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4240F8D6-3CA2-45C7-82EC-D10B42DB8C7D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4262F964-8077-4504-A1C9-F96281C1FBC5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {429D13AF-8BB0-4816-9BE5-AB649C18C10D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {434AFF67-2BE3-4283-B63D-26D23D476C3A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {43A46D7C-0EB3-49BE-ACDA-1B29D5A0D771} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {43F51900-4E09-46A5-9ABF-4BC998513E42} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {43FB12FB-AE9C-427B-B590-D52643241B51} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4493BBE1-85A6-432A-97EE-AD3B9EE0AE5C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)

Task: {4551AFC7-685B-40E6-8D0B-608CFE872307} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {456B460B-EF0F-4AAC-8586-47C861102D0F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {461A20E0-F117-4408-866A-CFB920255D27} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {464CB29B-D89A-4C67-ACED-A14E2BA92F7D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {46648EC9-0A60-4273-9925-BFDC1D40835D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {475C45EF-69FE-403D-AC01-0E4FF2250E06} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {47A4B3A8-51FB-4217-8626-4089869AF621} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {485F43A8-7C9D-4A8E-BE61-5DB745E8D363} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4921950D-DA0D-4C63-B8B8-6771F7F65AF6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {493F40DB-AA3E-4D40-80BE-AD2AE5AF3E74} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {495936C1-BC6F-4055-9BB5-978548372580} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {49CF1DCD-B611-4CC8-BB37-4C358FA14360} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {49D7E754-1946-4E0E-BCE7-DA9FD95DDB7F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4A14DB7E-20E7-48B0-8C41-9E3BE4807CAA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4A1A0317-34AA-4E03-8F9C-B92CC6EB19C5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4A601989-0A31-4FEB-8304-099394D787AF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4B05C983-7B0F-4DE7-B4F1-3ACA2FF24A47} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4B1976CB-0C34-4CFF-AF63-CD0F240D73AC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4BCF59DA-7E44-4F45-9EE5-A857CB03D0E3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4BFEB6D7-B1F0-42B0-82BB-CF250C0D5225} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4C20FB1A-BF96-46C8-8FF3-B9BD728B0173} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4C2BF1B1-3175-4C35-BCA1-ADC97F57F0FD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4D1E428D-7C7B-4625-A3A9-1439C8F1E305} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4E0099EA-CB06-4520-A48E-7CDB95E62C50} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4E7556B0-52D1-4526-A645-47B5C5C7B061} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4E76EF84-38B8-4C73-A68F-BD9E851A6763} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4EE9FCAF-B70E-4325-9176-615344CD25B8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4F277891-C2DF-4C93-B11D-6A10B941A678} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4F333A63-2B04-4FC8-962C-9DF7940BBE41} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4F5D6CC0-80B9-4E21-A367-7206157C7C01} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4F7FFC91-8E87-48F4-816A-20616B51C6BC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4FAC6B03-50E7-4436-8AEF-4AD55F16F435} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4FB6BB36-8428-411F-BA5C-AE58D6822387} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4FE6DAC3-CB0F-46E0-8274-8BDED225C37B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4FE7761D-FD8D-43C6-B11B-AD08AF4CF08D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {4FEE46BD-D4B9-4C78-93D5-F525204B11AC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {50B23AC8-B889-4515-B21E-389C61995DAB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {50D8D449-4BE8-47AC-8000-4DC9D86F6D39} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {50E47943-CD03-4D25-A596-B3E2AB05E4B2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {51BB0E9E-2493-4FBA-BB7F-A0AFB90C2BD7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {51BD658D-C34D-47B1-8A25-114F4A2B5210} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5203985C-D964-448A-BA8D-015C03F67F31} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {520AA6B1-9D63-4A2F-A330-C72550D7D7CF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)

Task: {5251C404-3A3C-49EA-B4DC-91A133AB9C18} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {52789A2F-AAA3-46B8-89A0-2D390647F3A5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5316173E-5F96-4934-802B-17E5E1D56804} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {534230E4-CBEA-4827-83B2-1EDF6CF32D79} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-29] (Google Inc.)

Task: {55215C8D-EF1E-48F4-8F14-5B940279430C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {55FC459C-8816-477D-B09E-0E22E08A7315} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {573CC655-F917-4F3D-936E-F2BF22CC5A6D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {577028AD-0A56-4ECB-ABB0-D099DFC67FA2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {57812213-D118-4977-BB0E-56A5CD9EE4D5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {57873B26-EB32-4CCC-9922-9CF86B41B9B2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {57DAB2F3-1694-4D73-A6C6-F442F182F07A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {587C7E8A-65A8-4992-B16F-6924D97E9C84} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5883E7FD-2642-4595-B566-938DFA6CEF37} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {589F7785-A8B2-4218-A9AA-8EBB26FAD566} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {58DE2C7F-C385-4001-8187-E07FBFDE4B79} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {59C08DB6-CFAA-4109-8B7C-F6C9E2A44FB6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {59E9539F-DFD9-4BD5-BF00-AE01725D94B0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5AD5BF70-C7A6-4355-ADF2-D0A055CDDBD5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5ADEC218-84ED-496D-9B7D-CBB39FB5B910} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5AE2F66E-9998-48EB-819B-AC1603735902} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5B08983E-C127-4FF1-B3F1-2480D898ED95} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5B571C68-7F3A-4860-AE2F-95DDC93362F8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5B9290FD-A860-4B1F-8B2F-460C93D8EA1D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5C07CCD1-E6C9-4A7E-BCA2-84BDBEFDBC29} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5C425DFE-35D1-424A-BC55-8C05F04105E5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5C940C5C-A9F6-4A5E-AC3D-5C9B2976E4DC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5CA5C2C9-0848-4871-A001-570D502D5D30} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5CB3A44A-5160-42A2-8060-5CE5DC78B922} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5CBEE1C3-0D46-47DB-B4CA-B817179A5228} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5D321BC0-B708-4DD8-8185-18D7B96E0EA6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5D3C2D36-4B75-45C7-8E5C-35E0FD8EF9F4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5D7FCFB5-4816-49C0-ACF4-A4F1464C81D0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5D908354-C857-43AD-9337-76D296DEEE24} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5DC8E5A4-9584-4159-B813-381ADF3DDB5F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5E049C88-0395-4801-A930-D1138C7C3457} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5F1A00F9-B3ED-4449-BC47-396855F9146D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5FAA461F-5ED2-4775-B4A8-DE844F03D385} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5FE690EB-BEF4-4C6A-A0BC-86CB94CF4731} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {5FFF32E7-8A75-4996-BBF2-96DE6C145F7A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {60CD0DC9-1FF8-4444-9A00-ED2BDD623843} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {60D62143-7C10-4B8E-BBAD-A5EF22FC454E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {61267F7B-611D-41B8-9118-B47662D38880} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {617FD943-F70D-4294-B0BB-5CA1A2C21E5F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6324D7E3-76CD-4459-B121-851F716361AF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6336F05E-A0C8-4126-8DDE-D7F71BD76BA9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {633E16C5-32C0-43BB-954D-983EE924063F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {641665DD-C601-4A58-A26E-EEAB57226E5D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {644FE13B-AE8B-4DBB-A9C6-EEEDBB762944} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {64A353E2-8058-44F9-892A-6A6E2C1A5264} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {64AFF8F1-03D9-468D-8E60-4B9A5C068B4B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {64E34EA7-73D9-4546-9906-39997607B1F1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {65284F49-0028-4576-BF39-6EBD67E72B18} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {65B1A664-04D6-4026-84EF-3E460AAB4A30} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {65DB5FF2-A76C-45AC-86D0-314C72C7EAE3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6626AA61-EF23-4183-B4A2-B14B03A3DC54} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {668095AE-FA12-4D8B-93DB-388BC4C0D0CD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {66BED7EB-DAC1-4DE9-9D47-F437CA98C783} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {67639D57-8BF7-495B-BFC2-836536079D14} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {67EBDEBE-FE15-4F7F-B006-0250B4C42D97} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {68A476DC-4D4E-4F72-BBE1-795C935C131A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {68A4FE1D-25A8-45F5-B8D9-197102137C5B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {68EAD442-1D40-4FCA-8FC0-554BEDBEFA3D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {690B526F-E322-4119-B24A-DDF63C16045C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6A2950CA-7761-4753-8A21-40F6AEC8B330} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6A3C6303-F971-4D2B-9BF3-80C4B8B6AB6A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6A55B893-1AFA-4503-A70A-5FEE180EBFA1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6AB0ABE2-BBD4-4886-A777-19AA5212FE04} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6B674A27-6685-4EE7-9242-0EBAB9E41B62} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6C41D9A5-D0E4-40A8-8E69-FE515BCB6797} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6C6A50EF-68F7-4086-96B9-3C064F9DDCF9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6D6E5525-B84E-4230-B55C-1A303FD0EE56} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6D7B175C-B5C5-4D01-96C1-ACE95043100C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6D81AB4A-72A7-46C6-9564-B8743DC446AA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6DA8E864-EE64-4196-B78C-9E27A613ACCB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6DB2DF44-FC00-485E-A4A8-2FE10930D179} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6DCCCE90-D43B-4EA3-A477-1841C72E7771} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6E2F64E0-253E-4CEF-9150-E7728CF9847F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6E6966DF-8B4C-458D-9C07-BA33BACE94A2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6EAAEE15-761E-4F34-ABE8-94375CC72C07} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6F140D74-A418-4980-B64A-0EF1C0BF7FCF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6FACC022-4F8A-496B-AB34-B45CA02E1385} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {6FCE8755-CD3D-49A9-9C19-B901B7F72DDA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {701A809B-0B88-45F9-BB3D-2C72F9357BE5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7031AE55-B429-40D7-B2A7-DC943BFC6354} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {70594029-29DC-4B1E-83D9-8BB15330ED72} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {70C38D4C-7370-47A8-99A2-7AA78B328053} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {72024754-F366-4955-9147-F8B9DD05848D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {721242E1-1C21-45B2-AF87-E713F813F21F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {72254260-1AFF-436D-B5E9-681A60784945} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {743D792D-17DA-443B-93B6-A7BAAE343F6E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7493130B-4E34-46D3-9148-F5C8826356BC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {75627391-E79E-4040-8BB9-0D46A589647D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7692763B-B3AA-43AE-8B23-1F192A5CDD2F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {76DA40E3-C792-459D-92A0-74DEF8D09C6B} - System32\Tasks\thmepymo => Rundll32.exe "C:\Windows\system32\vtUmJYsr.dll",AddRefActCtx

Task: {7717EE30-AC48-443F-AAD3-776F1DAA8268} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {77B11CDF-8EBA-4467-9AA3-82F631E8FBB7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {78DAAE85-3C79-4CEA-B674-328A3FF23000} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {78FB5A60-C414-4BB6-81AC-15D3274D603B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {79A046F8-B98F-4B73-809B-84E4C9C5964F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {79F483ED-731A-458F-B169-9863B0FFA130} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {79FB2AA3-3969-4755-BB37-62E183DBDBD8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7A4AAB0F-1C92-4D77-9B89-4F7026BD55E9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-137111657-3113389662-2625091050-1000UA => C:\Users\Richard\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {7A5BB942-A4B8-4852-8B95-1862EBDDBDE2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7A97AD6A-66D3-4BD9-A9B9-B49C1FD37138} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7AB31187-5894-4032-8F85-5F89AED5C5E0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7B6EF1E6-C367-498B-BE8B-BAEB3F5A9592} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7D64FFA6-D2A9-4F59-BF73-3211C05A5606} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7D7D377B-7DDE-43B0-ABC7-FDE611A18441} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {7F56CFB2-9BF9-4C37-99DE-7ABAD110B5F2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {80228FDC-1D39-499E-98DC-91703C4D4821} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8095DB26-9483-4B4D-8801-877DECC1384F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8099676A-6772-4ECE-A937-5452E3CC6F70} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {815310CE-CF82-4E19-8E2E-E51C55641E12} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {819AFCB3-12B3-4DCC-A4DA-8F29DF6BC131} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {81D647C7-7551-4367-A12A-2EFC4597B02A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {81D79B62-A43C-4870-BB3F-D75C520963CA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {81ECA73D-19D6-46FE-B388-01DEDE87817A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {82493778-327D-4DD0-9DA2-9E4A06D8CCC5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {826721A9-AF53-4F22-A787-ADAE8F182275} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {82D41E05-95DA-488C-81DB-EA545725E8E8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {82D681CF-18E2-4DC2-A884-6E566A934DAE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {82E40DB6-2F45-4C1A-8D65-1CD1536C75AD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8318D435-10F2-4D5D-AE32-87DF7E4C05B9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {834765D7-714A-46D5-B77C-75BD26E732C2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {836D3465-D50E-4A75-95C4-5750AEE25D26} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8388DB8C-C6C5-4D91-B9D0-E7171DD6FFD3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {83A1EB15-752D-40FA-A3FC-76F4974ED003} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {841B213F-00EB-4095-9146-376176B179C0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {843EC895-4B3D-49C2-AF46-086A7241A09A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {849F5460-F895-4070-89AC-ABFC883C866A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {84A5C5C7-15F3-4FD4-9969-75735B11D771} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {85691FE9-72B0-4D60-A65A-BB61F345EBAC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8642F7BE-771F-40FA-99D2-C5CB30634B11} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8697D7ED-9153-4CCE-82B9-328B41C19CDE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8698F6CD-A001-40E9-A8C0-F16F0084F54D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {869E28AF-4BD7-4695-BCE0-2F13EC84BE06} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {86BF7CDC-1E69-4EA4-9806-370766369701} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {86EDF5BE-17BA-4B4E-8D93-0F88339D99ED} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {87011BD6-5279-428B-99D3-1CD303121E3C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {871B158D-F110-49A6-AB2E-E9A76C308DB5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {872BE1AD-D020-4FF5-A3B7-4C357E574432} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {87312B8A-2FD6-4A28-9E5C-242C34C384B8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {876DD815-6061-48E2-80A3-226BBDCDFD85} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {87AC2113-1FC9-41DA-A210-701F6E948B02} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {87B48626-15E8-468B-9818-F78B44C657D5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {887741CB-9E78-4049-8E37-7FD05D8FAE4C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {887B5C28-7E55-4A15-A7C0-6E8106DAA09D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {88FABAF3-19E0-4036-9BCC-4CE0721F75B6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {89280BE3-2893-4D4B-A19C-E6FF5E2C1ED0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {89D0B5F4-0D34-4969-AC2B-8E4F491D9582} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {89D9A1AB-8248-49FE-B5DB-36ADA51EAE96} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {89FBC883-250C-437D-8D97-943187FA395F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8A1C7C95-6DCC-4E12-B21B-116CFF1271D3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8A2F1E74-92C3-4C3B-B249-BE4CF5E157A7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8A45480A-896B-4C70-8CE7-8759664FF39F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8A548F1E-0B43-4F5D-8009-ED83506E5088} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8AAD8C26-F8D1-4D0E-800C-D2A5C3809923} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8B94D7E8-60B8-4B28-9CAB-5230D66C19D5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8BA3F0BB-5B8E-4C13-B00D-9CC54E5F5FE0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8BC21819-CE39-46D5-8F68-7795C22F6495} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8C3DCA16-8673-4050-80CB-669428C2F898} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8CADA6FD-0E3E-431E-80B0-565F42F1FD7E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8CF56538-39BB-4683-B9D8-35C232DAC1F6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8D0E1BF4-3DD0-4E5C-BA24-B25F5328D156} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8DA45608-E96D-45F9-98C3-167EB66D1891} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8E22771C-8049-4F45-AF19-66A8C7A67D00} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8F169110-CF90-4D82-B3B1-755BE9BB6CC3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {8F95380C-41D2-4BFE-A3CA-AEA47894919B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {907536ED-06F2-4AC5-B982-A72671C226EC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {913ACCCD-B24F-4A19-B5A9-DB800422FAAC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {91F303F4-0A8D-488D-BBE0-F70F73AB0AEE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {92514888-EE0B-4094-BB87-C3B9C51CC415} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {927DA651-5C60-4E91-81A0-09C69394CE3F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {92C066D3-74A6-4034-ADC3-DD0634BFF863} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {92E5E4E7-80C2-40A9-920B-BCDC048155E9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {92EA5B2A-C47A-45BF-89FE-2E33356A5796} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {93A001FD-A2C5-4A5C-AF4D-3F9DAFC95D1A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {94844E0D-2BC5-4184-A7FC-C5B015456B34} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {94CA4C7F-D3E7-42EC-88A2-DF019397E87A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {95A4CAB3-548E-4AF2-8245-C54221FB437A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {95C93317-ED88-4889-8970-3C9C05F4AE46} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {95CC024D-B0FC-490F-B669-E8C353311BF7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {96318E35-B8D3-4C9A-9BAB-C7C8AA77EEF6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9684611A-E1FC-45A7-872A-B23D358B402B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {96A4C484-E061-40D8-A6C6-21454AD958D0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {970F2BB4-5356-4A2E-8773-7BBA3DC130C9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {97215375-8194-48BA-B681-854A2AF2AA0F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {98933625-F51B-4DA4-84DA-E30231CD8C59} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {989630C3-D8A3-435F-A8AF-E3A836A4058A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {98DE7125-5F87-4669-B97F-3B645CF44427} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {98EAD620-0D79-4313-AF2F-6D3C2B152E2E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {98EFF6FB-C7B9-4789-8E56-7925E0F55B4E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {994F1979-B6E6-4971-A5EC-27F5798A731F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {99C59981-2B1C-452A-9F60-699400F77E34} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9A037331-4D39-4FFA-8EEC-026A6B58B5D2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9A65B666-5CC7-448C-9412-FA55DB8B9150} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9AD9375C-1840-47F0-BFF0-D071D58768FD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9B940817-C837-4400-BEBE-55C085A3FC42} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9BB406B3-8BC3-4AD4-9841-45A61403543E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9BDB2A35-3D22-4C39-9CE0-F70E45DD261B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9D4146C0-3406-46BC-A30C-514F608F5B65} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9D5CA7B9-BFA0-4D79-98BD-7B92208ACD57} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9D7BCC15-E1C9-434A-A42F-CDA07A21D654} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9DC98577-5048-4467-9191-CA65E823705E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9E4D88B6-7697-4820-9730-F3437C2A1ABA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9EBE9E7D-D68A-46A3-B1AD-B9CBA8F5A4EF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9ED39B09-5D98-4F11-82A9-2E9029840BB0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9EF4B8D9-5804-4C54-9508-0AE8A863CCBC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9FC846D9-72CC-4EA7-B9FA-629CB34077D1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {9FFACADF-5CFE-40E8-B0D1-06155EE138A4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A0C3AE58-C9A8-490F-8F27-309F9DBD0507} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A10A7D00-1C01-4184-9A3E-C22F228FA2EE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A14905B2-3F4C-48BC-B842-804C9D029D07} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A2320B29-5B82-448A-90BD-BD138CAFD6DC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A2B3534E-7CAC-4E9C-9358-9C24DEB11CB9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A3053119-FE5B-4EAA-AA1C-139A5DEFF43C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A320FEFB-5D88-4C25-B6E8-97ED741347B2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A334C88B-0D0A-4B1D-BE08-CDE27A39FDBA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A3493915-9205-49E2-A465-016E0D9A8699} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A35CA591-80F4-4FB9-83D9-A0FF51CBC4FD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A35FBEFF-8743-4728-A49A-D2366677F771} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A3C86240-F2DF-478B-9E31-8D81DF84CDB9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A43CF35D-3C39-42EF-84D2-F60E2EFA0800} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A448A5EF-BF6F-4612-A078-AE14BE1AE776} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A45C69B6-45B6-47FB-AF96-7D53AEEDF41E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A46EAA12-6515-4FBC-95DC-E5960A7C66EC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A47699A4-70CC-4A36-B8B8-0B1F20CDF28B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A56043C4-4163-4C9A-BA34-DE876AFC42B6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A567D812-9FCC-43ED-BF77-57FA926DD352} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A582665F-A992-4E4E-A674-B0A2BFDA12AF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A5C88FE2-444F-4C19-A621-D1CAEAF78367} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A7694D2B-44B8-4C55-9707-A6FA80EBE1C7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A7C56083-9EE7-4C75-A447-92690082EED8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A8F6E070-D3AB-41B7-8B7C-2018DD1E7F29} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A94455DC-4368-425F-BDE8-59C983051F5E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {A9BEEF79-96F5-4519-B94E-1A8B0792ABB9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AA5D6D48-99E3-4C9D-AD42-A4B278709833} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AA62F374-D9AD-446B-A4FD-D565A2FFB8D2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AA6F361F-007F-454C-8A46-AAA085534C05} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AAB1E6CC-699A-42BD-9B90-63349FD8C73F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AAC63F41-50FC-4B8E-8D68-9B11D09DC24B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AB651205-63E7-43CB-906A-7F47EB95B709} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ABFEB5EC-1A2A-41CA-AC71-127A5367E2A8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AC10C46E-E3A1-48FD-B08A-046421D93B97} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AC65782D-B250-467D-8C32-F6703C84099F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AC8A3637-C812-4B54-A215-1C6CA7CECA60} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ACDAE054-3083-4E0E-8738-DDF95849CF21} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ACE2EB7E-D539-4937-8073-232A8188DD10} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AD3EFF97-C36B-41AA-BDB5-46EB3FD7F8FF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AD83BFC7-105D-432B-8D83-28047F6FE1F6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ADDA8DD5-1B8B-412F-900A-F4BE259E7F9A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AE944828-9C9A-478F-B9C9-BC6D95B99D92} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AE9C1DA0-864D-4FA2-90C1-87968A6AEB54} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AF1BF33E-F69E-4D4A-83AA-E65A73D8813E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AF7C4EA0-384D-4979-B19B-7D0E5978294F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AFA0EB28-865D-4FD5-8886-A16A2E42F272} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {AFE24AAF-7085-464E-97AB-96857B99C8B9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B01D0234-2AB3-400F-91EF-9B2D5910B8D7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B0F2FEF0-1AB2-42DD-A32F-8029DBB1BF29} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B0F80310-9D2C-4870-9FAC-211606DB1E13} - System32\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3} => C:\Users\Richard\AppData\Local\Temp\Ewr.exe <==== ATTENTION

Task: {B10BEB7F-22FD-4318-BF9A-9D8E00C6EF96} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B1238E4E-BFEE-4D9C-8140-0CAA1F247B07} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B1497115-4DA4-495F-B59B-DDEEAB5927A0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B1615009-D729-481D-A48F-6754733A8522} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B27ED643-892C-4E40-9C6A-572D776E897A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B3C08320-7C72-4DBB-A56D-D1C467B76D79} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B3F53D50-340E-49D7-9A06-5B26CD751166} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe

Task: {B56A11D5-4310-4172-978B-5BBD6A406823} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B66A3883-5C6D-4547-AFD7-4C790DE33CB7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B6B00A73-D367-4DAE-A807-F369D1CFD646} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B6C5C7B7-AB4F-4453-9AC4-CF4F55486F86} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B809C8F2-E626-4081-95A7-39682173187C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B98E7353-3DB8-4FCA-BDB6-234E8A00D682} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B9A52E00-7253-4209-B318-1A56C82EFA5A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {B9C32159-4B26-431F-A9AD-347BA22E59D1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BAB518F6-C5A7-4878-995A-F816F587A7E5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BABCCA78-F029-46DF-B40B-ECB5409AEF89} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BAC1441E-0EA8-4FB3-A94A-2B7830A909DE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BB7D1C94-8A4C-4B2B-B6FC-C41AE4C4F30E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BB8FA6B2-9ACB-41E2-846F-1F211DFFA34D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BBD45418-DF7D-4631-B940-E1B1735FF652} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BBE8650A-419A-4886-A684-662AE38A6C1E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BC456190-1CC1-4E19-9231-F681299E9DEE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BC780D11-CB48-4411-B270-F990F763F283} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BC8A1150-31D9-4E8E-A1B3-B62089EBE796} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BDE28D3B-AF6D-40A8-A245-56EBBDF75200} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BE12D88C-7A27-49A7-9BDD-1988FDE16A18} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BE6ACF12-BD77-47EF-B5A9-3FF1A0BFA56F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BF0BE3E3-C0B5-45D6-9636-E8E52201B1F4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {BF94D55F-2FC1-49D9-8A2E-202B307AA861} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C0ACA386-0182-4E23-8559-3FFCA187A0D6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C1ADC701-FDB2-4847-876D-2467A112A1DF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C25C8AB5-9A4B-4A43-83D3-FCDAE097384F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C264B294-DBBA-4942-BB97-7AE86EADE254} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C32018F6-9E85-42B6-AA07-AC8DF09561FC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C345C76E-735A-4586-9446-95877C6DA447} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C36F2F43-338F-45E7-972D-E87999B56FD6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C4206630-A8BD-40AA-8FCC-812398D82E3E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C43B4A40-0624-4BFC-A198-1B01D9E082C1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C52D0627-2A38-48D6-8C01-8A49D5D4A430} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C564CD2F-E180-4F9E-A094-CB82D7EC008A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C5EA2EF0-D878-4686-9F2C-2EFC20895CCF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C69817EF-50F7-4E4C-AB99-175955EE1058} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C6EB5C07-A5D4-469C-ACEC-7828B3DFFD03} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C73E12A0-5F2B-448B-8416-0CC8F638DBDA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C7DC6B10-0EA2-4A35-A9EA-71E2436CBDEE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C87A116B-2635-4309-986C-E1C39133D6AF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C95CC2D5-B1EC-418C-9193-CCCF1A6B6B24} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C9979609-45AC-40C5-B6E2-59929141FAD0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {C9C4DECE-D94E-4F33-A87D-BDBB3BAE89E9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CA310AD9-A91F-4F4B-85DB-9EC9948F1027} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CA46F69B-8827-4DE6-B2E9-55AF3E197B62} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CAA3EA13-FA64-457D-BA4E-449130645B19} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CAAF74AE-13CD-4734-A731-8F7EB4D9F28F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CC235BEF-C2E1-4695-80B4-98DB34920B79} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CC721060-63F6-4CDF-B739-B6C1D1DC0CB6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CCA756C5-34C3-46CD-81EB-C1A9A60D9E74} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CD26B805-4D7E-4CF8-B9A6-C515AB26A4D5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CD531B7F-91F8-4E97-9790-A7F5EB858E58} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CDE7AC02-1A1E-4948-989B-F54173C17C47} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {CFD6A587-FE2E-4EF4-909D-42935D989175} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D054F1CE-421A-4D2C-97FE-14A7EF23B58C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D0E12B11-420D-4E40-ADEE-4074C0EF3F08} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-137111657-3113389662-2625091050-1000Core => C:\Users\Richard\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {D107D79F-8134-49E2-8C29-42113EFFD7E1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D12CC647-6469-4E57-9624-47A21F026B84} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D13F14CD-0C95-4BF5-BE9E-8FCD9ADDFABD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D1853E07-CD87-4248-BAFB-C774EFC797BD} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D189063D-E2B2-4852-8576-450FCB749BF1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D19E4F3E-C188-4843-9A71-11F7760D99F8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D1B5581D-6E07-4737-9915-60EC8FA0F6A5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D1D55BFE-A952-4E30-A5EE-05278D351A43} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D1E03B23-B958-4931-8443-1F84B954AD77} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D2B6DCC6-EDB5-4A47-B91B-6C7DBF2FC6D3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D2D7D883-CA98-4925-BBAC-7843F564A2A4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D3538459-E81B-43AB-A123-47C23717D2C2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D38F0814-0684-4FB2-87A0-8ED8849F86E0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D46A1605-BEA2-48BA-9D02-6FC677F1F2DF} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D4758BA3-5035-4B76-A806-CE4FD31C4A21} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D4892BE6-28E3-4EFD-B4BF-7B586F03918F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D4B07A58-1CBB-4718-8DBA-2C5D3B8E9D41} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D534B8F3-03EE-4EB6-8BBB-120207ECC134} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D53C102F-6EF4-4C27-8736-3C8795356383} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D58A81F0-F775-4570-AEED-8D89297437EE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D66597F1-D02C-4AB8-8626-84742C3045F3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D734C07B-71DC-4330-B2FE-CA9ED8C6460B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D73F191B-D7A3-4ED9-A87F-CEBA03581D65} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D8A69A21-C52E-4F89-B9F2-33A04D11BCAB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {D92549E8-BA0F-458B-AA4C-164734FDA1C3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DA05C7D6-DD50-4A7E-B639-DD1AC8A27079} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DA69DA6A-8B78-4A80-BB29-A1057ECB4582} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DA772D73-3C79-4F63-8AD4-72AF5B33E27C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DAAFB3B7-7E4D-47DE-A81E-8EDFAEF007C8} - System32\Tasks\Shutdown => C:\Windows\system32\shutdown.exe [2008-01-19] (Microsoft Corporation)

Task: {DB993E5E-F594-4AF3-A5A5-1CB976F8490F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DBB9C4D7-E285-411D-AAA8-04947AE28429} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DCD7D7B4-30DF-41C3-AFE5-16F691641480} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DCEF94FE-2768-4DCD-9063-C6B0882B9E7C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DDED1187-8E9A-4C5B-BF87-47F6D051525C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DE5B55E6-57DA-46FA-AE9A-78FC136EB73E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DE5DF749-8693-4987-AF03-44587F974DB1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DE6721FE-CA74-430B-8574-1CACC9502094} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DE800392-3EEE-4335-ADA1-836DCFCEB593} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DE9483EE-DC9B-4746-A720-DE87BEC1F22E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DF4209AA-A1DE-4CB7-861E-C29BFE900B17} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {DF42C7C7-4B29-4879-A09D-3211E2E80C1A} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)

Task: {DFE9736E-2762-4CE5-83CC-ABAFBBA1CD21} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E03402F3-BD13-47F2-AC4F-43FF77C03FAA} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E10A7BBD-FC0D-4E5D-8C65-0C05D53CD0E6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E116E616-87A0-4F2D-82E8-116292B21B80} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E1BA1587-D3CA-43B5-9042-50F21AA6DC9D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E1DE65AF-91DC-4BBF-AB77-14FDC2292B00} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E2277FC3-4680-4E53-85BD-5DF4BABD5BF8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E23680A6-C651-46D1-B996-E109063539D6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E2968384-2A04-43BD-92B6-8A3AE217B984} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E2AB875E-79C5-4FD7-A2E5-79A237C1A420} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E343CF02-6620-44B0-94E6-A7D742A5C80E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E3AB8610-955A-4DBB-AB26-9C1630BDE814} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E4D3E4DF-9B6E-401B-9003-116D209EEB03} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E4FD40C4-7531-4B31-8D9A-A1659DE377E4} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()

Task: {E5B3260E-C0A7-4FB3-AE01-A3A274BABEF9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E5DA1D6B-20CD-4F6B-A4B0-A5B999769153} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E63FCD9A-FE23-4853-840E-CB5E4B469F59} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E6766203-0437-4252-9961-1189C896F4A1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E7932377-4D3E-4904-9BAA-226024281F43} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E7DF1E04-356F-4EC6-92BE-EC45B7D1D10B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E88587CF-60ED-49C6-A26D-5C02426A513B} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E8A74210-4C2A-42B3-93C7-3E9E8B1B12B8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E95C0B19-0860-4E30-BC71-4CD9105ACAFC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E96259FE-3F92-4056-A464-FFB45FD755A8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E96A7776-001B-45D8-891F-B4A459DDD8ED} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {E9BC8E78-B5BC-48C0-A16E-6C00EECB35EC} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {EB12D51D-3255-4E5C-BD5E-7B3FC39A822E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {EBA040B3-4EE4-4132-8EF7-F7A96A92BCED} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ECA68208-006F-4CE8-91DB-E545735158A6} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {ECB55E9E-92C0-4AEA-A087-AF7E19C57097} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {EE4977B2-13A1-4D79-B3CF-4F920670C13E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {EFA52673-75A6-41CE-A045-FE57CD67D301} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F05258BD-06BC-4512-8BE1-0EC4C54FD784} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F0CEF1A5-9C52-4ABC-B4BC-0B903FAC0558} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F2171C1D-519A-4B2B-9F5A-E2938FBD4957} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F240C3CC-1AFA-439F-8329-C23D5BA7EDF8} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F27A4DE7-14C3-4A64-BF40-7767FCF49667} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F28E08A2-F6DD-4F7A-87E7-27350199FEC5} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F2BFA898-5C18-48BA-925E-87AC6BF93A99} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F2E67702-23CC-45E2-A1C6-6874955603E1} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F305FEFC-F7F3-4F6B-B4C2-A9BA188706F0} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F39FF555-EEEA-46A8-94AF-3CAB326F6618} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F3CABD01-69FC-4C01-88B8-393EB49ECFE7} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F3FC9451-8089-4899-AF02-9EC07788013E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F44C4F7C-B7D2-4820-ABF1-C52BD4E71092} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F477BA4F-8E01-4357-B934-403F794D76CF} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Richard => C:\Program Files\Windows Calendar\wincal.exe [2009-04-10] (Microsoft Corporation)

Task: {F47AADF0-5C77-4161-92B3-4C1F1B5C434A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F4F04975-3FE8-475F-B065-F7D4CBEFE91A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F5CE3176-600E-49F2-B3F1-055631254EAE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F6605B2F-3903-413E-8913-7249758486A2} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F6641CFA-B991-41D9-8308-18B863B5796E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F710A216-2E18-478A-9B9C-E7C065F25A5C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F780A01B-4255-4FB7-835A-1041EAFBD95E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F7A5992D-08D1-4ACB-9EDA-4B45FD6E471E} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F8328153-FD16-431B-A41D-974A54CE0647} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F8547C8D-A63F-473A-A7D8-F41502E89A64} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F8B1B352-82A0-469B-8D53-D9D97D142F37} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F95D7A3D-34D7-4CC0-A006-9F4C4657ED35} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F98D83CE-1BD5-41EC-A213-B6736273E1FB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {F9C612B3-DBAF-48BB-A648-2A48AD4A566D} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FABB9543-C276-4DCE-A84D-05FE4481DB22} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FADF0D90-833A-486B-B4D0-A9F6B8E0A725} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FAE8CD66-7F97-4564-9DC5-3D2B0A9EFFCB} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FB02C880-8331-42BE-BFA1-C8C99A18F075} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FB3E7206-F71B-4F04-B1E1-0AF6D3C28149} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FBD94F01-7A3D-4B23-B8F8-0A88F1ED07FE} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FC6B0E15-8CFA-4CA7-BBB7-A6C8ACCC3905} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FCBB6F42-9E99-4C8F-ACA0-32A7D9270888} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FCE3193A-AF0A-4BBE-BC19-DF88322FC31A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FD417667-6D5B-41A6-B272-F101923EADA9} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FD70AD16-046F-4333-BD66-90D95FDF926F} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FDDCE045-0BDC-4807-8169-EB9854FB6A3A} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FE29B93F-F4C8-4B54-82E7-EA3FEA2B9722} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FE4895DE-1F37-4B68-B6DA-FBDD5F479E90} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FEC1B007-A9BF-434F-ABFF-59EF7D74A888} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FEE2DD5C-2158-4890-87BC-5F5EF7B59D2C} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FF889665-C142-4606-818C-E2F748BF16D3} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: {FFDB8246-4676-40DD-B8F7-7780B760CD11} - \WPD\SqmUpload_S-1-5-21-137111657-3113389662-2625091050-1000 No Task File <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (whitelisted) =============

 

2011-11-16 07:52 - 2011-11-16 07:52 - 00196608 _____ () C:\Program Files\BubbleUPnP Server\BubbleUPnPServer.exe

2009-05-19 21:27 - 2009-05-02 17:59 - 00139776 _____ () C:\Program Files\WinRAR\rarext.dll

2010-07-16 19:49 - 2010-03-29 13:02 - 00520234 ____N () C:\Program Files\BillP Studios\WinPatrol\sqlite3.dll

2014-07-18 07:12 - 2014-07-18 07:12 - 00043008 _____ () c:\users\richard\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpygl7kb.dll

2013-08-23 12:01 - 2013-08-23 12:01 - 25100288 _____ () C:\Users\Richard\AppData\Roaming\Dropbox\bin\libcef.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

AlternateDataStreams: C:\Users\Richard:zylomtest

AlternateDataStreams: C:\Users\Richard:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVRG}

AlternateDataStreams: C:\Users\Richard:zylomtr{000HQ7FF-AD7A-3FG2-7CIS-27D9QT4MMVVK}

AlternateDataStreams: C:\Users\Richard:zylomtr{000HQ7FF-AD7A-3FG6-P289-26CQEH5GN000}

AlternateDataStreams: C:\ProgramData\TEMP:1A15E356

AlternateDataStreams: C:\ProgramData\TEMP:1DEE6B65

AlternateDataStreams: C:\ProgramData\TEMP:207C4C79

AlternateDataStreams: C:\ProgramData\TEMP:2E0B7D8A

AlternateDataStreams: C:\ProgramData\TEMP:38C4D9C2

AlternateDataStreams: C:\ProgramData\TEMP:40D8F125

AlternateDataStreams: C:\ProgramData\TEMP:45F3AD49

AlternateDataStreams: C:\ProgramData\TEMP:474022C7

AlternateDataStreams: C:\ProgramData\TEMP:4CD3F344

AlternateDataStreams: C:\ProgramData\TEMP:4DDE401B

AlternateDataStreams: C:\ProgramData\TEMP:65C4D44A

AlternateDataStreams: C:\ProgramData\TEMP:8AED9359

AlternateDataStreams: C:\ProgramData\TEMP:8E5EA40F

AlternateDataStreams: C:\ProgramData\TEMP:D48500F8

AlternateDataStreams: C:\Users\Family\Desktop\10-19-2013 Boo at the zoo.mp4:TOC.WMV

AlternateDataStreams: C:\Users\Family\Desktop\Despicable Me 2.mkv:TOC.WMV

AlternateDataStreams: C:\Users\Richard\Documents\tangled.dmsd:Roxio EMC Stream

AlternateDataStreams: C:\Users\Richard\Documents\Untitled1.dmsd:Roxio EMC Stream

 

==================== Safe Mode (whitelisted) ===================

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

 

==================== EXE Association (whitelisted) =============

 

 

 

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"

MSCONFIG\startupreg: EPLTarget => 

MSCONFIG\startupreg: FUFAXRCV => "C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe"

MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe"

MSCONFIG\startupreg: Kernel and Hardware Abstraction Layer => KHALMNPR.EXE

 

==================== Faulty Device Manager Devices =============

 

Name: XPS MiniView

Description: Microsoft Windows SideShow Development Hardware

Class Guid: {997b5d8d-c442-4f2e-baf3-9c8e671e9e21}

Manufacturer: Microsoft

Service: WUDFRd

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (07/18/2014 10:58:04 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/18/2014 10:18:23 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/17/2014 09:58:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/16/2014 10:01:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/16/2014 07:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 35.0.1916.153, time stamp 0x538fb354, faulting module chrome.dll, version 35.0.1916.153, time stamp 0x538fb051, exception code 0xc0000005, fault offset 0x0074dafc,

process id 0xdec, application start time 0xchrome.exe0.

 

Error: (07/16/2014 07:44:51 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 35.0.1916.153, time stamp 0x538fb354, faulting module chrome.dll, version 35.0.1916.153, time stamp 0x538fb051, exception code 0xc0000005, fault offset 0x0003270e,

process id 0xdec, application start time 0xchrome.exe0.

 

Error: (07/16/2014 00:00:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/15/2014 08:43:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/14/2014 10:49:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

 

System errors:

=============

Error: (07/18/2014 00:57:59 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

Error: (07/18/2014 00:48:55 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: 30000TrkWks

 

Error: (07/18/2014 00:48:18 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

Error: (07/18/2014 00:47:43 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: 30000TrkWks

 

Error: (07/18/2014 00:47:09 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

Error: (07/18/2014 00:46:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: 30000TrkWks

 

Error: (07/18/2014 00:46:03 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

Error: (07/18/2014 00:45:28 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: 30000TrkWks

 

Error: (07/18/2014 00:44:56 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

Error: (07/18/2014 10:17:53 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: The file system structure on the disk is corrupt and unusable.

Please run the chkdsk utility on the volume OS.

 

 

Microsoft Office Sessions:

=========================

Error: (07/18/2014 10:58:04 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/18/2014 10:18:23 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/17/2014 09:58:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/16/2014 10:01:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/16/2014 07:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe35.0.1916.153538fb354chrome.dll35.0.1916.153538fb051c00000050074dafcdec01cfa1046078f48e

 

Error: (07/16/2014 07:44:51 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe35.0.1916.153538fb354chrome.dll35.0.1916.153538fb051c00000050003270edec01cfa1046078f48e

 

Error: (07/16/2014 00:00:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/15/2014 08:43:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

Error: (07/14/2014 10:49:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service WinDefend since QueryServiceConfig API failed

 

System Error:

The resource loader failed to find MUI file.

 

 

CodeIntegrity Errors:

===================================

  Date: 2014-02-22 19:00:59.075

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 19:00:58.892

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 19:00:58.703

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 19:00:58.508

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 19:00:58.308

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 19:00:58.116

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 18:59:23.685

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 18:59:23.501

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 18:59:23.309

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2014-02-22 18:59:23.126

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

 

 

==================== Memory info =========================== 

 

Percentage of memory in use: 66%

Total physical RAM: 3069.22 MB

Available physical RAM: 1041.39 MB

Total Pagefile: 6369.44 MB

Available Pagefile: 5188.75 MB

Total Virtual: 2047.88 MB

Available Virtual: 1895.11 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:283.04 GB) (Free:92.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVERY) (Fixed) (Total:15 GB) (Free:10.96 GB) NTFS

Drive f: (Storage) (Fixed) (Total:931.51 GB) (Free:305.81 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 28000000)

Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)

Partition 2: (Not Active) - (Size=15 GB) - (Type=07 NTFS)

Partition 3: (Active) - (Size=283 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: AE79D602)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================



#6 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 18 July 2014 - 11:11 PM

UPDATE:  At a reboot, it stayed at a blank screen for a while, then chkdsk started by itself.  It found an orphaned file usbccgp.sys.  

 

Startup still was hanging, so I ran the Windows startup repair (from a CD).  It said that the system volume was corrupt and made repairs.  

 

PC is now booting up normally.

 

-Rich

 

Java also updated...  And now the only system restore point is the one created for the java update. :(

Could the startup repair have deleted the restore points??


Edited by Richard14, 18 July 2014 - 11:28 PM.


#7 nasdaq

nasdaq

  • Malware Response Team
  • 38,246 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:30 PM

Posted 19 July 2014 - 07:20 AM


Clean your Temporary files/Folders.

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program.
  • TFC will close all open programs itself in order to run.
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted, it should not take long to finish.
  • Once it's finished, click OK to reboot.
  • If it does not reboot, reboot your system manually.
===

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start
HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?
HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...409d6c4515e9\InprocServer32: [Default-shell32]  <==== ATTENTION!
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
SearchScopes: HKLM - DefaultScope value is missing.
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
FF Plugin: @nosltd.com/getPlus+®,version=1.6.2.91 - C:\Program Files\NOS\bin\np_gp.dll No File
FF Plugin: @soe.sony.com/installer,version=1.0.3 - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkfjadjghjpjodfhffafagnkbgbpiphf\1.0.3.152_0\npsoe.dll No File
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]

End
Save the files as fixlist.txt into the same folder as FRST

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Your last log reports these Restore points.

==================== Restore Points =========================

11-07-2014 19:46:19 Windows Update
12-07-2014 19:13:45 Scheduled Checkpoint
13-07-2014 16:25:03 Scheduled Checkpoint
15-07-2014 05:49:02 Scheduled Checkpoint
15-07-2014 15:43:50 Windows Update
16-07-2014 07:00:10 Scheduled Checkpoint
17-07-2014 05:00:54 Scheduled Checkpoint
18-07-2014 04:58:27 Scheduled Checkpoint
18-07-2014 17:17:53 Scheduled Checkpoint
18-07-2014 17:57:57 Windows Update


To be on the safe side you can create one after this cleanup, and all is well.
Vista and Seven - http://windows.microsoft.com/en-gb/windows7/create-a-restore-point

===

If all is well.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/

#8 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 19 July 2014 - 08:37 AM

Thanks for your help.  Here is the log:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:15-07-2014 01

Ran by Richard at 2014-07-19 06:28:46 Run:1

Running from C:\Users\Richard\Desktop

Boot Mode: Normal

 

==============================================

 

Content of fixlist:

*****************

start

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?

HKU\S-1-5-21-137111657-3113389662-2625091050-1000\...409d6c4515e9\InprocServer32: [Default-shell32]  <==== ATTENTION!

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

SearchScopes: HKLM - DefaultScope value is missing.

ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]

FF Plugin: @nosltd.com/getPlus+®,version=1.6.2.91 - C:\Program Files\NOS\bin\np_gp.dll No File

FF Plugin: @soe.sony.com/installer,version=1.0.3 - C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkfjadjghjpjodfhffafagnkbgbpiphf\1.0.3.152_0\npsoe.dll No File

S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]

S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]

 

End

 

*****************

 

'HKU\S-1-5-21-137111657-3113389662-2625091050-1000\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}' => Key deleted successfully.

'HKU\S-1-5-21-137111657-3113389662-2625091050-1000\Software\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}' => Key deleted successfully.

'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt1' => Key deleted successfully.

'HKLM\Software\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}'=> Key not found.

'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt2' => Key deleted successfully.

'HKLM\Software\Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}'=> Key not found.

'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt3' => Key deleted successfully.

'HKLM\Software\Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}'=> Key not found.

'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt4' => Key deleted successfully.

'HKLM\Software\Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}'=> Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} => value deleted successfully.

'HKCR\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}'=> Key not found.

'HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+®,version=1.6.2.91'=> Key not found.

C:\Program Files\NOS\bin\np_gp.dll not found.

'HKLM\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3' => Key deleted successfully.

C:\Users\Richard\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkfjadjghjpjodfhffafagnkbgbpiphf\1.0.3.152_0\npsoe.dll not found.

rpcapd => Service deleted successfully.

blbdrive => Service deleted successfully.

cleanhlp => Service deleted successfully.

EagleXNt => Service deleted successfully.

HTCAND32 => Service deleted successfully.

IpInIp => Service deleted successfully.

NwlnkFlt => Service deleted successfully.

NwlnkFwd => Service deleted successfully.

XDva404 => Service deleted successfully.

 

==== End of Fixlog ====



#9 nasdaq

nasdaq

  • Malware Response Team
  • 38,246 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:30 PM

Posted 19 July 2014 - 10:29 AM

One last scan.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.

If the site is busy or not available use this mirror site:
http://www.bleepingcomputer.com/download/securitycheck/
===

#10 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:30 PM

Posted 19 July 2014 - 11:56 AM

Here is the log. Not sure how Java could be out of date. There isn't anything past ver7upd65. 

 

 

 Results of screen317's Security Check version 0.99.85  

 Windows Vista Service Pack 2 x86 (UAC is enabled)  

 Internet Explorer 9  

 Internet Explorer 8  

``````````````Antivirus/Firewall Check:`````````````` 

 Windows Firewall Enabled!  

Microsoft Security Essentials   

 Antivirus up to date!  

`````````Anti-malware/Other Utilities Check:````````` 

 WinPatrol 

 MVPS Hosts File  

 Scholastic's I SPY Junior Puppet Playhouse 

 Malwarebytes Anti-Malware version 1.75.0.1300  

 CCleaner     

 JavaFX 2.1.1    

 Java 7 Update 65  

 Java version out of Date! 

 Google Chrome 35.0.1916.153  

 Google Chrome 36.0.1985.125  

````````Process Check: objlist.exe by Laurent````````  

 Microsoft Security Essentials MSMpEng.exe 

 Microsoft Security Essentials msseces.exe 

 WinPatrol winpatrol.exe 

 BillP Studios WinPatrol WinPatrol.exe  

`````````````````System Health check````````````````` 

 Total Fragmentation on Drive C: 0 % 

````````````````````End of Log`````````````````````` 



#11 nasdaq

nasdaq

  • Malware Response Team
  • 38,246 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:30 PM

Posted 19 July 2014 - 01:16 PM

Not sure how Java could be out of date. There isn't anything past ver7upd65.

You are correct. You have the latest version.
The Security Check tool must be revised. That new Java update came out just recently.

If all is well.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/

#12 nasdaq

nasdaq

  • Malware Response Team
  • 38,246 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:30 PM

Posted 25 July 2014 - 08:36 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users