Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-12-2016 Ran by maja (06-12-2016 22:06:53) Running from C:\Users\maja\Desktop Windows 10 Home Version 1607 (X64) (2016-09-25 01:59:09) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3222472812-1687904707-1187091885-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3222472812-1687904707-1187091885-503 - Limited - Disabled) Guest (S-1-5-21-3222472812-1687904707-1187091885-501 - Limited - Disabled) maja (S-1-5-21-3222472812-1687904707-1187091885-1001 - Administrator - Enabled) => C:\Users\maja ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET Smart Security 7.0 (Enabled - Out of date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 7.0 (Enabled - Out of date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: Zapora osobista ESET (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Active Directory Authentication Library for SQL Server (Version: 13.0.1601.5 - Microsoft Corporation) Hidden Active Directory Authentication Library for SQL Server (x86) (x32 Version: 13.0.1601.5 - Microsoft Corporation) Hidden Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated) Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{7BCB15FE-CC5D-4C6D-B1C6-B0AF74EE09E0}) (Version: 20.6.20117.44471 - Alcor Micro Corp.) Alcor Micro USB Card Reader Driver (x32 Version: 20.6.20117.44471 - Alcor Micro Corp.) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{0E4C791E-B78E-477D-BD5A-CDD0985BA6EC}) (Version: 7.0.20622.1 - Microsoft Corporation) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.13.0004 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.6 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0040 - ASUS) Atom (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\atom) (Version: 1.12.6 - GitHub Inc.) AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.101 - ICEpower a/s) AutoCAD 2015 — Polski (Polish) (Version: 20.0.51.0 - Autodesk) Hidden AutoCAD 2015 Language Pack – Polski (Polish) (Version: 20.0.51.0 - Autodesk) Hidden Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk) Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 1.0.59.0 - Autodesk) Autodesk AutoCAD 2015 — Polski (Polish) (HKLM\...\AutoCAD 2015 — Polski (Polish)) (Version: 20.0.51.0 - Autodesk) Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk) Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{9D589081-AFC2-4932-9071-AC585AC1EA83}) (Version: 3.32.3004 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk) Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Featured Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk) Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk) Azure AD Authentication Connected Service (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden BEEP (HKLM\...\Steam App 104200) (Version: - Big Fat Alien) Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Botanicula (HKLM\...\Steam App 207690) (Version: - Amanita Design) Browser-Security (HKLM-x32\...\Browser-Security) (Version: 1.2.0.0 - Vondos Media GmbH) <==== ATTENTION DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0196 - Disc Soft Ltd) Don't Starve (HKLM\...\Steam App 219740) (Version: - Klei Entertainment) Don't Starve Together (HKLM\...\Steam App 322330) (Version: - Klei Entertainment) Dotfuscator and Analytics Community Edition 5.22.0 (x32 Version: 5.22.0.3788 - PreEmptive Solutions) Hidden Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation) ESET Smart Security (HKLM\...\{B0D9ABD0-A8FD-41CE-85A5-D5AFF3BB3990}) (Version: 7.0.302.26 - ESET, spol s r. o.) Evernote v. 6.3.3 (HKLM-x32\...\{EB571A8A-81E0-11E6-8CC1-005056950253}) (Version: 6.3.3.3502 - Evernote Corp.) f.lux (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\Flux) (Version: - ) FEZ (HKLM\...\Steam App 224760) (Version: - Polytron Corporation) Git version 2.9.2 (HKLM\...\Git_is1) (Version: 2.9.2 - The Git Development Community) Gitter (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\{03C07717-35D4-40B2-B4F2-05A0EF1B9F6F}_is1) (Version: - Troupe Technology Limited) IIS 10.0 Express (HKLM\...\{13FD7E30-D2F1-498D-ABC2-A4242DB6610E}) (Version: 10.0.1736 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Intel(R) Chipset Device Software (x32 Version: 10.1.1.11 - Intel(R) Corporation) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10603.192 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1168 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4285 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation) Intel(R) WiDi (HKLM\...\{C7CD6D54-26AF-4D93-B06F-D81ACE8624CB}) (Version: 6.0.40.0 - Intel Corporation) Intel(R) WiDi Software Asset Manager (x32 Version: 1.1.347 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{9A287643-10C5-4463-B9D1-B2404CE18CCF}) (Version: 17.1.1529.1620 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{4c8b7360-62a2-4339-b745-41323055d0bb}) (Version: 18.20.0 - Intel Corporation) iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Java SE Development Kit 8 Update 111 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation) JetBrains PyCharm Community Edition 2016.2 (HKLM-x32\...\PyCharm Community Edition 2016.2) (Version: 162.1237.1 - JetBrains s.r.o.) KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.1.5 - PandoraTV) LEGO MINDSTORMS NXT x64 Driver (HKLM\...\{A0831C28-A6FA-49A3-86AE-B5AE3C9EE19C}) (Version: 1.20.115.0 - LEGO) LEGO MINDSTORMS NXT x64 Driver Support (x32 Version: 1.20.7.0 - LEGO) Hidden leJOS NXJ 0.9.1beta-3 (HKLM-x32\...\{253252E2-EFAE-4AA8-96B6-0828619E536C}_is1) (Version: 0.9.1beta-3 - The leJOS Team) Mathcad 15 F000 (HKLM-x32\...\{DC8F6C78-7231-44A2-B66E-6C4FCB3A3364}) (Version: 15.0.0.0 - PTC) Mathcad PDSi viewable support (HKLM-x32\...\Mathcad PDSi viewable support) (Version: 9.0.0 - Adobe Systems) Mathcad PDSi viewable support (x32 Version: 9.0.0 - Adobe Systems) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25420 - Microsoft Corporation) Microsoft Office 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.7466.2038 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\OneDriveSetup.exe) (Version: 17.3.6705.1122 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50709.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2016 LocalDB (HKLM\...\{E359515A-92E6-4FA3-A2C9-E1BA02D8DE6E}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft SQL Server 2016 Management Objects (HKLM-x32\...\{0F1C8E2F-199A-4946-B3BF-0906DACFD032}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft SQL Server 2016 Management Objects (x64) (HKLM\...\{20EA85AA-2A1D-4F11-B09F-4BA2BF3C8989}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL Language Service (HKLM-x32\...\{8BFDE775-C5B8-46DB-84EF-43FFC8A2E8AD}) (Version: 13.0.14500.10 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL ScriptDom (HKLM\...\{D091DE8C-EA0F-49AF-8DE3-BD6C79737C6E}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (14.0.60519.0) (HKLM-x32\...\{4E27B0EF-7BAB-432A-AF3D-3FC8F3F7353F}) (Version: 14.0.60519.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2016 (HKLM-x32\...\{84C23ECA-FE4D-494F-9247-3EBAD57E7F0C}) (Version: 13.0.1601.5 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio Community 2015 (HKLM-x32\...\{4f075c79-8ee3-4c85-9408-828736d1f7f3}) (Version: 14.0.23107.178 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation) MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) Mozilla Firefox 50.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 en-US)) (Version: 50.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla) MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Multimedia Logic 1.6.1 (HKLM-x32\...\Multimedia Logic) (Version: 1.6.1 - ) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7426.1015 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.2.1.38915 - Electronic Arts, Inc.) Out There Somewhere (HKLM\...\Steam App 263980) (Version: - MiniBoss) Polarity (HKLM\...\Steam App 315430) (Version: - Bluebutton Games) PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\...\{B7E94916-7AE6-4F7F-A377-7A410A42BA19}) (Version: 13.0.1601.5 - Microsoft Corporation) Python 3.5.2 (32-bit) (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation) Python 3.5.2 Add to Path (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation) Python Tools 2.2.5 for Visual Studio 2015 (HKLM-x32\...\{615045D1-CEF9-482C-AD74-6432A0ACE9E5}) (Version: 2.2.40825.00 - Microsoft Corporation) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7599 - Realtek Semiconductor Corp.) Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.2.616.2015 - Realtek) ROBOTC for MINDSTORMS (HKLM-x32\...\{A3439243-E1E5-4EF3-BEC0-7EBD6FE0F656}) (Version: 3.65.6885 - Robomatter Inc.) Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Roslyn Language Services - x86 (x32 Version: 14.0.25431 - Microsoft Corporation) Hidden ShareMouse v3.0.56 (HKLM-x32\...\ShareMouse_is1) (Version: 3.0.56 - Bartels Media GmbH) SHU (HKLM-x32\...\{DF11DD92-DBB8-4F3F-9564-A8BBDBE986F5}_is1) (Version: 1.0 - ScreenShu Software) SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.96.5684 - Electronic Arts) SketchUp Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk) Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Super Meat Boy (HKLM\...\Steam App 40800) (Version: - Team Meat) Team Explorer for Microsoft Visual Studio 2015 Update 3.1 (x32 Version: 14.102.25619 - Microsoft) Hidden Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Texmaker (HKLM-x32\...\Texmaker) (Version: - ) TypeScript Power Tool (x32 Version: 1.8.34.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.8.36.0 - Microsoft Corporation) Hidden Unity Web Player (HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\UnityWebPlayer) (Version: 5.3.6f1 - Unity Technologies ApS) Universal CRT Extension SDK (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden Universal CRT Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden Universal CRT Headers Libraries and Sources (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden Universal CRT Headers Libraries and Sources (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden Universal CRT Redistributable (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden Universal CRT Tools x64 (Version: 10.0.26624 - Microsoft Corporation) Hidden Universal CRT Tools x86 (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Visual Studio 2015 Update 3 (KB3022398) (HKLM-x32\...\{7a68448b-9cf2-4049-bd73-5875f1aa7ba2}) (Version: 14.0.25420 - Microsoft Corporation) VS Update core components (x32 Version: 14.0.25431 - Microsoft Corporation) Hidden vs_update3notification (x32 Version: 14.0.25431 - Microsoft Corporation) Hidden WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden Windows Driver Package - ASUS (AsusSGDrv) Mouse (06/18/2015 8.0.0.16) (HKLM\...\545B999BD5E2E239335F95C2AF9BED5D511CEC95) (Version: 06/18/2015 8.0.0.16 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS) WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3222472812-1687904707-1187091885-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3222472812-1687904707-1187091885-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3222472812-1687904707-1187091885-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\pl-PL\acadficn.dll (Autodesk, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0FFCE7D1-0AC5-4388-B634-27BF2E63CF47} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {12B4749E-12F5-4EB8-9BB5-F97719A1D259} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {172B8734-CFEC-4DA1-8BE5-473AC2080DA1} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-06-30] (AsusTek) Task: {385C3DF6-1F55-461D-9D07-98EE47C93173} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-11-02] (Microsoft Corporation) Task: {3BE55713-8F34-4054-ACCD-195B5C9DE389} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-06-20] (Microsoft Corporation) Task: {4FBF2C0E-80AF-414F-86DE-A69989E8F1C4} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.) Task: {5D9E5082-AAF1-4DC9-853E-342B3DF25ED5} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2015-06-05] (Intel Corporation) Task: {5DADCA3C-08A3-4ED9-95F5-06FAF7820ECC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2015-05-25] (ASUSTek Computer Inc.) Task: {65A9CE63-F2C9-4B91-9F60-A3D36A7256E4} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2015-08-25] (ASUS) Task: {82E55417-B42E-4377-9697-923B7C981359} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-09-03] (Realtek Semiconductor) Task: {8B793004-D60F-406C-B206-E1CCF72CD2E3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-14] (Adobe Systems Incorporated) Task: {96CEE845-516A-4413-A0BF-17B9D54BE11F} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-17] (Intel Corporation) Task: {99761CE0-82E6-40AD-A727-90C783A4C73B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated) Task: {C58EA82B-F58A-4E3B-9162-50886BA3B5C6} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\maja\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe Task: {CA8596EF-2AC7-44E9-8136-722F07B01544} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-17] (Intel Corporation) Task: {CAB5D90C-DCF4-4FAE-84A7-4EE823D5BB5D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-09-03] (Realtek Semiconductor) Task: {CD5FD184-1D7E-4DAC-A5BD-D38DE24A7FBD} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe Task: {E3FE6BCD-E56F-4566-B489-EE5EA60EAE73} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.) Task: {F7E61492-9A69-468A-880D-1E7CBACAEFD2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-02-15 21:01 - 2016-02-15 21:01 - 00031256 _____ () C:\WINDOWS\System32\us008lm.dll 2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-09-30 08:35 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-09-30 08:35 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-07-28 00:27 - 2016-07-28 00:27 - 00402520 _____ () C:\WINDOWS\system32\igfxTray.exe 2016-09-30 08:35 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-09-25 06:06 - 2016-09-25 06:06 - 01864384 _____ () C:\Users\maja\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll 2016-09-25 12:28 - 2016-09-25 12:28 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-11-09 18:14 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-11-17 07:19 - 2016-11-17 07:19 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2016-11-17 07:19 - 2016-11-17 07:19 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-11-17 07:19 - 2016-11-17 07:19 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2016-08-02 08:05 - 2016-06-20 15:51 - 02548944 _____ () C:\Users\maja\AppData\Roaming\Browser-Security\s768.exe 2016-11-23 14:45 - 2016-11-23 14:45 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2016-11-23 14:45 - 2016-11-23 14:45 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2016-06-03 05:03 - 2016-06-03 05:03 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll 2016-11-23 14:45 - 2016-11-23 14:45 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll 2016-11-23 14:45 - 2016-11-23 14:45 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll 2016-11-09 18:14 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-11-09 18:14 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-11-09 18:14 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-11-09 18:14 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-11-09 18:14 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-05-22 16:48 - 2013-12-22 07:22 - 00047496 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll 2016-05-22 16:48 - 2013-12-22 07:22 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll 2016-10-30 10:22 - 2016-10-30 10:22 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll 2015-08-25 17:40 - 2015-08-25 17:40 - 00027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2015-08-25 17:40 - 2015-08-25 17:40 - 00124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2016-09-25 06:05 - 2016-09-25 06:05 - 01383616 _____ () C:\Users\maja\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll 2016-12-06 18:52 - 2016-12-06 18:52 - 01244376 _____ () C:\Users\maja\AppData\Local\Microsoft\OneDrive\17.3.6705.1122\ClientTelemetry.dll 2016-10-09 11:40 - 2016-10-09 11:40 - 00731648 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vbeb7089b#\7a184655b23d7611593de34438f70de3\Microsoft.VisualStudio.Threading.ni.dll 2016-10-09 11:40 - 2016-10-09 11:40 - 00046080 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vd43b287e#\44fb6154e1e1d835cc782915fbc68c69\Microsoft.VisualStudio.Validation.ni.dll 2016-10-27 12:35 - 2016-10-27 12:35 - 22825144 _____ () C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.dll 2016-05-16 17:44 - 2016-05-16 17:44 - 00322232 _____ () C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\sqlite.dll 2016-10-01 00:36 - 2016-10-01 00:36 - 46476472 _____ () C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\Software\Classes\.scr: AutoCADScriptFile => ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\sharepoint.com -> hxxps://ujchmura-files.sharepoint.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2015-07-10 12:04 - 2016-05-22 12:28 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\maja\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp DNS Servers: 62.179.1.62 - 62.179.1.63 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == HKLM\...\StartupApproved\StartupFolder: => "ShareMouse.lnk" HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0" HKLM\...\StartupApproved\Run32: => "ADSKAppManager" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\StartupFolder: => "SHU.lnk" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "f.lux" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "Gitter" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-3222472812-1687904707-1187091885-1001\...\StartupApproved\Run: => "Steam" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{A8013B52-FD0F-4009-94E1-746655D98C04}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{97CACE4B-3EEF-47CE-BF45-7FB8A7A58404}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{1B115925-EF28-412A-994A-98F371F1D8B8}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{DF2E0B2C-74E0-4E94-8DCE-D45B31B90A8F}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6304E22B-816F-470F-AEDF-214B39856E2F}] => C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{0EEC9502-518B-4D43-BEF3-49CFB1C5786B}] => C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [UDP Query User{D0F2843A-5BD6-456D-96F0-54D60E66FC85}C:\program files (x86)\jetbrains\pycharm community edition 2016.2\bin\pycharm.exe] => C:\program files (x86)\jetbrains\pycharm community edition 2016.2\bin\pycharm.exe FirewallRules: [TCP Query User{F0337897-F4B7-4B32-B4A1-C650F418FCF1}C:\program files (x86)\jetbrains\pycharm community edition 2016.2\bin\pycharm.exe] => C:\program files (x86)\jetbrains\pycharm community edition 2016.2\bin\pycharm.exe FirewallRules: [{48D1256A-EEA4-4B0B-BDAE-535AA6745577}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{9718F1AF-326E-4709-A913-6E04C7CFC088}] => C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{AA2FCA84-CDEB-4B46-89ED-FEC503219FA2}] => LPort=50248 FirewallRules: [{892D6BAC-1167-4A93-B7E1-8CBF911DA9FE}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{B50EC209-80C8-4D7F-8927-D9990BC77152}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe FirewallRules: [{3C85EFC2-D0B0-4967-97E4-082DE481D6D9}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe FirewallRules: [{35506229-A2C1-40B0-8629-37ECDCE63988}] => C:\Program Files\Intel Corporation\Intel WiDi\Next\WirelessDisplay.exe FirewallRules: [{BB9A7558-052D-49DF-82B4-DB0C84A013B8}] => C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe FirewallRules: [{024DE87D-9CE9-4665-A038-7CCF8310A32E}] => C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe FirewallRules: [{0801DAEE-782B-4D5B-9488-1C6832D986C6}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{AF11C52E-472E-4C52-A757-0472106B7F64}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{DD5D0590-2AD5-4215-ADFA-877CCB79B287}] => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe FirewallRules: [{7F38A0FA-BE80-45AC-A2DC-199B814701C7}] => C:\Program Files (x86)\ShareMouse\ShareMouse.exe FirewallRules: [{C053983A-6E21-43DB-B90D-E0733D349E87}] => C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{E806B047-55B3-4A9A-BF02-AB741F25FB00}] => C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{9A673267-E6C8-4FEC-B2B1-37FC9F6FBAA1}] => C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{FB07CC46-F9A3-494E-8006-F814EE94315F}] => C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{39FF4243-9CB6-4FF6-8DEA-FFA7CE30B3ED}] => C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe FirewallRules: [{79DDB201-EC50-4B24-9326-CBF970711C00}] => C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe FirewallRules: [{CEABFD86-0A78-4BC1-AB04-78E73B9244B8}] => C:\Program Files (x86)\Steam\steamapps\common\Polarity\Polarity.exe FirewallRules: [{605C4906-501A-4B8E-92F1-204A085869A4}] => C:\Program Files (x86)\Steam\steamapps\common\Polarity\Polarity.exe FirewallRules: [{0BB7A34C-7D8D-4565-9E7B-B08CB3762D00}] => C:\Program Files (x86)\Steam\steamapps\common\outtheresomewhere\ots.exe FirewallRules: [{C3B81B0B-9FD6-4DF6-8D7E-BA1AC69B33CC}] => C:\Program Files (x86)\Steam\steamapps\common\outtheresomewhere\ots.exe FirewallRules: [{4C933E9E-31AD-48A6-93F3-5DC795C4E058}] => C:\Program Files (x86)\Steam\steamapps\common\Botanicula\Botanicula.exe FirewallRules: [{A507CADB-A85A-4BF7-8D0A-6EBC4B8EE337}] => C:\Program Files (x86)\Steam\steamapps\common\Botanicula\Botanicula.exe FirewallRules: [{2107D28A-BDD2-4E3C-AED9-F52415F943C4}] => C:\Program Files (x86)\Steam\steamapps\common\BEEP\BEEP.exe FirewallRules: [{5054F229-D5BC-4B1B-A40D-4D784FCAE6E3}] => C:\Program Files (x86)\Steam\steamapps\common\BEEP\BEEP.exe FirewallRules: [{44277DC1-4DBE-44B7-9648-A25DBA562136}] => C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe FirewallRules: [{668C4DF8-A9B1-45C9-B2CD-D97343689C64}] => C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe FirewallRules: [{C6BF07E5-014C-41E4-93C2-F8980D43560A}] => C:\Program Files (x86)\Steam\steamapps\common\FEZ\FEZ.exe FirewallRules: [{4E7F68CE-7C00-4E91-B44D-5754AAA8FC68}] => C:\Program Files (x86)\Steam\steamapps\common\FEZ\FEZ.exe FirewallRules: [{9AD860CE-F63F-47CF-B903-934A6E9B1968}] => C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{74ED13D2-A113-40C6-82EB-9A98E2D7AC2C}] => C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{6FF714B9-58AC-48B0-B949-CB82605E1CF2}] => C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{B250822C-EBEA-4CFB-9EE7-49F189F874B4}] => C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{951016BF-F4C0-4637-954C-A4B0CE59098D}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{8D964909-6C73-495E-9312-3E84F2B32C65}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{5E8E9E21-DE93-4687-93D4-11ED4016B6BF}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{5277A521-888B-42B6-8B6C-DFD8FA709706}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{57C5AA17-E2ED-4371-8A44-82D685D03D8A}] => C:\Program Files\iTunes\iTunes.exe ==================== Restore Points ========================= 20-11-2016 13:02:52 Installed DirectX 27-11-2016 14:18:04 Installed iTunes 04-12-2016 00:15:28 Zainstalowano ESET Smart Security ==================== Faulty Device Manager Devices ============= Name: Light Sensor Description: Light Sensor Class Guid: {5175d334-c371-4806-b3ba-71fd53c9258d} Manufacturer: Microsoft Service: SensorsAlsDriver Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: Microsoft Visual Studio Location Simulator Sensor Description: Microsoft Visual Studio Location Simulator Sensor Class Guid: {5175d334-c371-4806-b3ba-71fd53c9258d} Manufacturer: Microsoft Corporation Service: SensorsSimulatorDriver Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Event log errors: ========================= Application errors: ================== Error: (12/06/2016 08:46:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x58471597 Faulting module name: baca 4.exe, version: 0.0.0.0, time stamp: 0x58471597 Exception code: 0xc0000005 Fault offset: 0x00011c96 Faulting process id: 0x1624 Faulting application start time: 0x01d24ff971723d8e Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Report Id: 1830c8b5-c11a-4334-8a0c-a539402baea8 Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:46:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x58471597 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc00001a5 Fault offset: 0x0a0a0a0a Faulting process id: 0x1624 Faulting application start time: 0x01d24ff971723d8e Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: unknown Report Id: c59096a8-b9ec-4559-b078-0e51c35921e3 Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:46:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x58471597 Faulting module name: baca 4.exe, version: 0.0.0.0, time stamp: 0x58471597 Exception code: 0xc0000409 Fault offset: 0x00011c96 Faulting process id: 0x1624 Faulting application start time: 0x01d24ff971723d8e Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Report Id: db01d61c-20fd-4c03-885e-e4d487eacc5c Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:36:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc00001a5 Fault offset: 0x20202020 Faulting process id: 0x2b84 Faulting application start time: 0x01d24ff800dfefc3 Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: unknown Report Id: 015e5e5f-3c95-46de-a2ef-a7d4a08194f9 Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:36:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Faulting module name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Exception code: 0xc0000409 Fault offset: 0x00011c3d Faulting process id: 0x2b84 Faulting application start time: 0x01d24ff800dfefc3 Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Report Id: a844920e-9973-462b-b3d9-8d13ab8a5d19 Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:35:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc00001a5 Fault offset: 0x20202020 Faulting process id: 0x243c Faulting application start time: 0x01d24ff7dfd4f058 Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: unknown Report Id: 43e51660-2859-4e43-8f4e-28503a4d080f Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 08:35:17 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Faulting module name: baca 4.exe, version: 0.0.0.0, time stamp: 0x584712f5 Exception code: 0xc0000409 Fault offset: 0x00011c3d Faulting process id: 0x243c Faulting application start time: 0x01d24ff7dfd4f058 Faulting application path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Faulting module path: C:\Users\maja\Documents\Visual Studio 2015\Projects\baca 4\Debug\baca 4.exe Report Id: f676604c-bce9-4602-af3e-747623e8e0df Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 03:28:18 PM) (Source: Microsoft Office 16) (EventID: 2011) (User: ) Description: Office Subscription licensing exception: Error Code: 0x305; CorrelationId: {203E5B00-20BC-457B-849C-CE459278BA25} Error: (12/06/2016 12:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program mathcad.exe version 14.1.0.436 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 11ac Start Time: 01d24fb4003da091 Termination Time: 4294967295 Application Path: C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe Report Id: c78b65d0-bba8-11e6-9bf5-a0d1721c7033 Faulting package full name: Faulting package-relative application ID: Error: (12/06/2016 09:27:21 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program mathcad.exe version 14.1.0.436 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 1838 Start Time: 01d24f9a2d137bdb Termination Time: 4294967295 Application Path: C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe Report Id: ce1365e9-bb8d-11e6-9bf5-a0d1721c7033 Faulting package full name: Faulting package-relative application ID: System errors: ============= Error: (12/06/2016 05:36:05 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/06/2016 12:44:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/06/2016 09:32:28 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/06/2016 07:54:42 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 05:38:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 05:38:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 05:38:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 12:22:45 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 08:14:52 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (12/05/2016 07:30:03 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. CodeIntegrity: =================================== Date: 2016-12-03 23:03:58.973 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 23:03:58.969 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 23:03:58.964 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 20:06:20.402 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 20:06:20.400 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 20:06:20.396 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 20:06:19.407 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 20:06:19.383 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 19:44:40.117 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-12-03 19:44:40.114 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) m3-6Y30 CPU @ 0.90GHz Percentage of memory in use: 56% Total physical RAM: 8091.08 MB Available physical RAM: 3547.67 MB Total Virtual: 9371.08 MB Available Virtual: 3827.73 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:237.72 GB) (Free:122.8 GB) NTFS ==>[system with boot components (obtained from drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 238.5 GB) (Disk ID: 0C33595A) Partition: GPT. ==================== End of Addition.txt ============================