Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-07-2015 Ran by 8066_000 at 2015-07-06 20:46:59 Running from C:\Users\8066_000\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= 8066_000 (S-1-5-21-742588249-578463927-4040186165-1001 - Administrator - Enabled) => C:\Users\8066_000 Administrator (S-1-5-21-742588249-578463927-4040186165-500 - Administrator - Disabled) Gość (S-1-5-21-742588249-578463927-4040186165-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-742588249-578463927-4040186165-1003 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.160 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform) Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.36 - Creative Technology Limited) Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited) Creative Console Launcher (HKLM-x32\...\Console Launcher) (Version: 2.61 - Creative Technology Limited) Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited) Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - Creative Technology Limited) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0407 - Disc Soft Ltd) Dell System Detect (HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\73f463568823ebbe) (Version: 6.1.0.3 - Dell) Delta Force 2 (HKLM-x32\...\Delta Force 2) (Version: - ) Dropbox (HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\Dropbox) (Version: 3.6.7 - Dropbox, Inc.) Evernote v. 5.8.5 (HKLM-x32\...\{5EDC25EC-D966-11E4-9E5C-00163E98E7D6}) (Version: 5.8.5.7193 - Evernote Corp.) Far Cry (Patch 1.4) (x32 Version: 1.00.0000 - Ubisoft) Hidden Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.1.5.425 - Foxit Software Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) Google Drive (HKLM-x32\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.) Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games) Host OpenAL (HKLM-x32\...\Host OpenAL) (Version: 2.02 - Creative Technology Limited) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6289.0 - IDT) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Malwarebytes Anti-Malware wersja 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Need for Speed Most Wanted (black edition) (HKLM-x32\...\Need for Speed Most Wanted (black edition)) (Version: 1.3 - Electronic Arts) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team) Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) Postal 2 Complete (HKLM-x32\...\Postal 2 Complete_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.) Spotify (HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\Spotify) (Version: 1.0.8.59.gee82e7e6 - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.0.1 - Synaptics Incorporated) The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Volume Panel (HKLM-x32\...\Creative Volume Panel) (Version: 2.21 - Creative Technology Limited) Windows 8 Desktop Gadgets (HKLM\...\Windows 8 Desktop Gadgets_is1) (Version: 1.3.0 - PainteR) Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation) WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-742588249-578463927-4040186165-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\8066_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) ==================== Restore Points ========================= ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0814FF4D-D090-46B4-AF2E-F968124E2658} - \Core Temp Autostart 8066_000 No Task File <==== ATTENTION Task: {4B4019DD-AF9B-4FE3-8040-E33F537B791B} - \GoogleUpdateTaskMachineCore No Task File <==== ATTENTION Task: {8482594D-2039-4EA2-9536-34C78FD567D7} - \GoogleUpdateTaskMachineUA No Task File <==== ATTENTION Task: {CD28C0F4-735C-4476-A301-2BABAEAFA3D9} - \CCleanerSkipUAC No Task File <==== ATTENTION Task: {FBD7E586-E959-4AA1-A94D-3E0959296D73} - System32\Tasks\BookKeep => c:\programdata\{58aefea8-2760-f298-58ae-efea8276faa0}\samsung_usb_driver_for_mobile_phones.exe-1435915449926.exe <==== ATTENTION Task: C:\Windows\Tasks\BookKeep.job => c:\programdata\{58aefea8-2760-f298-58ae-efea8276faa0}\samsung_usb_driver_for_mobile_phones.exe-1435915449926.exe <==== ATTENTION ==================== Loaded Modules (Whitelisted) ============== 2012-11-26 23:54 - 2012-11-26 23:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2015-04-30 14:25 - 2009-11-30 18:54 - 00089088 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL 2015-04-30 14:25 - 2009-12-08 15:52 - 00230912 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL 2015-07-04 13:31 - 2015-06-20 07:46 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll 2015-07-04 13:31 - 2015-06-20 07:46 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll 2015-07-04 13:31 - 2015-06-20 07:46 - 15003976 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\8066_000\SkyDrive:ms-properties ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\dell.com -> dell.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-742588249-578463927-4040186165-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\8066_000\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta z Przeglądarki fotografii systemu Windows.jpg DNS Servers: 207.182.150.116 - 8.8.8.8 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk" HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-742588249-578463927-4040186165-1001\...\StartupApproved\Run: => "Skype" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [{A9B4798D-450C-456C-AAA0-AC037205EC6E}] => (Allow) C:\Users\8066_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{B55DC86E-94A6-4922-9060-F72702ABB06A}] => (Allow) C:\Users\8066_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [TCP Query User{D2ED76AA-137F-4F4B-8F6A-534BF4538825}C:\users\8066_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\8066_000\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{0C5840DC-0FF9-41A9-9FEF-86C5687F3612}C:\users\8066_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\8066_000\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{11ABCC1E-B498-4DB0-9A38-B39EFB42955A}C:\users\8066_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\8066_000\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{4B22AB80-A144-43AA-9280-0F06C2630A14}C:\users\8066_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\8066_000\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{64DCE4DA-F3A3-4292-B954-54B6233B4BF9}C:\users\8066_000\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\8066_000\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{775577E9-9492-4A44-9F6F-596EA3C6AFA4}C:\users\8066_000\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\8066_000\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{A2448CC0-7BD1-41A5-AD7F-8CA8622CA252}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{66953631-2686-4891-8197-4ED8C78B5264}] => (Allow) C:\Users\8066_000\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{FEF1B24B-8D98-4720-9AD5-FFB54BA5BDE3}] => (Allow) C:\Users\8066_000\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe FirewallRules: [{5D5B86A2-F9B6-439F-8C73-7D7A96B6D43D}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{35BE38FB-DBF7-4014-A309-F9677C70BDD3}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{F32676C4-35A8-4F14-AE93-126EFA75698C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/04/2015 11:27:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: delegate_execute.exe, wersja: 43.0.2357.130, sygnatura czasowa: 0x5584c777 Nazwa modułu powodującego błąd: delegate_execute.exe, wersja: 43.0.2357.130, sygnatura czasowa: 0x5584c777 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0002aaef Identyfikator procesu powodującego błąd: 0xcc8 Godzina uruchomienia aplikacji powodującej błąd: 0xdelegate_execute.exe0 Ścieżka aplikacji powodującej błąd: delegate_execute.exe1 Ścieżka modułu powodującego błąd: delegate_execute.exe2 Identyfikator raportu: delegate_execute.exe3 Pełna nazwa pakietu powodującego błąd: delegate_execute.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: delegate_execute.exe5 System errors: ============= Error: (07/05/2015 01:23:47 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi Appinfo. Error: (07/05/2015 01:23:03 PM) (Source: DCOM) (EventID: 10010) (User: LUQ92) Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} Microsoft Office: ========================= CodeIntegrity Errors: =================================== Date: 2015-07-05 12:12:11.538 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:11.321 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:10.620 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:10.399 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:10.127 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:09.889 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:09.651 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:09.282 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:09.072 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-05 12:12:08.826 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz Percentage of memory in use: 81% Total physical RAM: 2934.68 MB Available physical RAM: 555.34 MB Total Virtual: 4958.68 MB Available Virtual: 2100.75 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:49.05 GB) (Free:17.96 GB) NTFS Drive e: () (Fixed) (Total:78.34 GB) (Free:56.82 GB) NTFS Drive f: () (Fixed) (Total:170.5 GB) (Free:111.08 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: B8C8E406) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=78.3 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=170.5 GB) - (Type=07 NTFS) ==================== End of log ============================