Hi
Our PC and laptop are freezing or working very slowly. No obvious virus.
Any suggestions?
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2016-03-15 23:51:50
—————————–
23:51:50.518 OS Version: Windows x64 6.1.7601 Service Pack 1
23:51:50.518 Number of processors: 2 586 0x170A
23:51:50.518 ComputerName: LUIB-PC UserName: Mike
23:51:54.073 Initialze error C000010E - driver not loaded
23:53:37.314 AVAST engine defs: 16031501
23:56:05.987 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt"
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by [removed] (2016-03-16 00:14:37)
Running from C:\Users\[removed]\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-04-11 15:27:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3826667438-2126650645-2211976255-500 - Administrator - Disabled)
Ben (S-1-5-21-3826667438-2126650645-2211976255-1005 - Limited - Enabled) => C:\Users\Ben
Cat (S-1-5-21-3826667438-2126650645-2211976255-1001 - Administrator - Enabled) => C:\Users\Cat
Guest (S-1-5-21-3826667438-2126650645-2211976255-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3826667438-2126650645-2211976255-1007 - Limited - Enabled)
Innes (S-1-5-21-3826667438-2126650645-2211976255-1004 - Limited - Enabled) => C:\Users\Innes
luib (S-1-5-21-3826667438-2126650645-2211976255-1000 - Administrator - Enabled) => C:\Users\luib
Mike (S-1-5-21-3826667438-2126650645-2211976255-1002 - Administrator - Enabled) => C:\Users\Mike
Ruari (S-1-5-21-3826667438-2126650645-2211976255-1003 - Limited - Enabled) => C:\Users\Ruari
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM-x32\…\Adobe AIR) (Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14) (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Apple Application Support (32-bit) (HKLM-x32\…\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\…\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Software Update (HKLM-x32\…\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
AVG (HKLM\…\AvgZen) (Version: 1.41.1.56922 - AVG Technologies)
AVG 2012 (Version: 12.0.2193 - AVG Technologies) Hidden
AVG 2015 (HKLM\…\AVG) (Version: 2015.0.6189 - AVG Technologies)
AVG 2015 (Version: 15.0.4542 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.6189 - AVG Technologies) Hidden
AVG Security Toolbar (HKLM-x32\…\AVG Secure Search) (Version: 19.3.0.491 - AVG Technologies)
AVG Zen (Version: 1.41.29 - AVG Technologies) Hidden
Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Edoc Viewer (HKLM\…\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Diagnostic Utility (HKLM-x32\…\{7236672F-6430-439E-9B27-27EDEAF1D676}) (Version: 1.00.0000 - Realtek)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
FMW 1 (Version: 1.62.2 - AVG Technologies) Hidden
Google Drive (HKLM-x32\…\{895D0391-459F-4D45-B8DD-13F0DE70C66E}) (Version: 1.28.1549.1322 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
iCloud (HKLM\…\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\…\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\…\HDMI) (Version: - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\…\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Java 7 Update 51 (64-bit) (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 67 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
McAfee Security Scan Plus (HKLM\…\McAfee Security Scan) (Version: 3.11.292.3 - McAfee, Inc.)
Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 Business - en-us (HKLM\…\O365BusinessRetail - en-us) (Version: 15.0.4805.1003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\…\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3826667438-2126650645-2211976255-1002\…\OneDriveSetup.exe) (Version: 17.3.6301.0127 - Microsoft Corporation)
Microsoft Online Services Sign-in Assistant (HKLM\…\{46E637E2-AC34-4B45-B5DF-D20903A3DB61}) (Version: 7.250.4303.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 en-GB) (HKLM-x32\…\Mozilla Firefox 44.0.2 (x86 en-GB)) (Version: 44.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Rapport (x32 Version: 3.5.1507.93 - Trusteer) Hidden
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5963 - Realtek Semiconductor Corp.)
Roxio Creator Starter (HKLM-x32\…\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\…\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Trusteer Endpoint Protection (HKLM-x32\…\Rapport_msi) (Version: 3.5.1507.93 - Trusteer)
Visual Studio 2010 x64 Redistributables (HKLM\…\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\…\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3826667438-2126650645-2211976255-1002_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Mike\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-3826667438-2126650645-2211976255-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Mike\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B79F1C8-C1A5-4A74-8B15-76544FEFC7E0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {2B3A997E-8800-4431-A815-7A40D0B7D5D0} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {2E831392-9E2F-491F-AE73-3FB49C962849} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe
Task: {5BB5DDA6-7F75-4FF1-B48B-C7A8E3B75DED} - System32\Tasks\IHUninstallTrackingTASK => /C DEL C:\Windows\TEMP\IHU9F4A.tmp.exe
Task: {5ED6A087-D2A8-42A1-8933-90B3313448FF} - System32\Tasks\{31AB8E67-004D-410D-BCC8-B0F799074E05} => C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE [2016-02-10] (Microsoft Corporation)
Task: {6D492A9B-FCA4-473D-B9A0-B11D942AA8EE} - System32\Tasks\{5239319D-906B-48C1-8F77-3F234C648662} => C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE [2016-02-10] (Microsoft Corporation)
Task: {72643E96-7623-4450-BDFA-6512E791A1F9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {76695A8D-E301-41F5-8D9D-DA3207925178} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3826667438-2126650645-2211976255-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {76792768-FBCA-4480-9829-44B2F7363B22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {88CCA729-83B4-4EF5-A909-A29C8BB2C936} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {8BDD2580-EF1F-4D6B-AAC2-D276C7EE75A7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-17] (Adobe Systems Incorporated)
Task: {905A272E-8D00-41EB-A121-E015D84C3DF3} - System32\Tasks\{436A0763-C8E9-415A-9004-DF51F50229D1} => C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE [2016-02-10] (Microsoft Corporation)
Task: {9690DF11-71A7-450E-AAD3-A5A1BE4064D9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {96FCA268-9605-4149-9BD7-B2DAF69C2877} - System32\Tasks\{56E51ED8-B27F-4C90-9401-DDBBD5017451} => C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE [2016-02-10] (Microsoft Corporation)
Task: {A57D1C93-AB01-43EF-8234-DCCA2B875104} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-10] (Adobe Systems Incorporated)
Task: {B13A7DA1-6018-4A99-84C5-C35426C58244} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe
Task: {CB51F062-B561-4F79-A81E-CDE7AAE985F7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3826667438-2126650645-2211976255-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {CF0194F0-C9F2-4586-942D-BDEE40BFD5E4} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-03-13] (Microsoft Corporation)
Task: {D7628132-9B1C-45B1-880B-8BC45997233C} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-17] (Adobe Systems Incorporated)
Task: {E1BDF01A-B9D1-4B8B-9A2B-FCDD75D52933} - System32\Tasks\4571 => Wscript.exe C:\Users\Mike\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {E606B380-36C3-4DE0-A979-9AE349D4D405} - System32\Tasks\{8564C726-E2C4-4F10-A138-2901540828CD} => C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE [2016-02-10] (Microsoft Corporation)
Task: {FC9F512E-DF01-46C0-A090-4A684BF6F3D5} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2010-11-17 09:35 - 2010-11-17 09:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
2010-11-17 09:35 - 2010-11-17 09:35 - 01440240 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\Roxio Burn.exe
2015-10-30 06:53 - 2015-09-01 16:04 - 08901184 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-11-13 12:55 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-04-04 11:50 - 2016-03-13 12:18 - 02662472 _____ () C:\Program Files (x86)\AVG Secure Search\vprot.exe
2016-02-11 04:36 - 2016-02-11 04:36 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\7dca33cfefb99e28847d01e4665f2214\IsdiInterop.ni.dll
2011-03-08 18:39 - 2010-03-03 19:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-07-21 16:02 - 2015-07-21 16:02 - 00557056 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll
2010-11-24 21:44 - 2010-11-24 21:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2015-08-24 08:36 - 2015-08-24 08:36 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll
2010-11-17 09:35 - 2010-11-17 09:35 - 00657904 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\BBEngineAS.dll
2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2015-10-30 06:53 - 2015-09-01 12:25 - 08901184 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll
2014-11-13 12:55 - 2016-02-23 04:13 - 00325824 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2016-03-13 12:19 - 2016-03-13 12:18 - 00527944 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.3.0\log4cplusU.dll
2016-01-22 05:55 - 2016-02-23 04:14 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll
2015-10-30 06:53 - 2015-09-01 12:25 - 08901184 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\1033\GrooveIntlResource.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3826667438-2126650645-2211976255-1002\…\sharepoint.com -> hxxps://skyeguides.sharepoint.com
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 02:34 - 2016-02-21 22:28 - 00000862 ____A C:\Windows\system32\Drivers\etc\hosts
0.0.0.1 mssplus.mcafee.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3826667438-2126650645-2211976255-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\luib\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3826667438-2126650645-2211976255-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Cat\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3826667438-2126650645-2211976255-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3826667438-2126650645-2211976255-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Ruari\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
HKU\S-1-5-21-3826667438-2126650645-2211976255-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Innes\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3826667438-2126650645-2211976255-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\Services: wscsvc => 2
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F924879F-F030-41BE-848D-75C10CC055D5}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{F9AEC2A8-EED8-4DA4-8CC7-A061EFFF1253}] => (Allow) LPort=2869
FirewallRules: [{3BD25AC3-F7B1-4FF6-9A0F-BEEBDE45D833}] => (Allow) LPort=1900
FirewallRules: [{C0AE00D1-A001-4712-9E10-6AF17695BC10}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [{8BBB35BC-DB54-4FA6-BCAB-1729E7EF177A}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [TCP Query User{19E6AE06-1363-4323-A802-AE0128392512}C:\users\mike\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mike\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{501D7AEC-B467-4FFA-B7A4-4EDBED984B38}C:\users\mike\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mike\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6992002E-C22F-4E9E-949D-4F21FC4EEA5C}C:\users\mike\appdata\roaming\allmyapps\allmyapps.exe] => (Block) C:\users\mike\appdata\roaming\allmyapps\allmyapps.exe
FirewallRules: [UDP Query User{A8CD8B8E-5471-4DC6-A036-DDD09C6A6752}C:\users\mike\appdata\roaming\allmyapps\allmyapps.exe] => (Block) C:\users\mike\appdata\roaming\allmyapps\allmyapps.exe
FirewallRules: [{C8342238-301D-48EC-8117-43F476D5ED07}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{D7C8DEE9-E754-4940-9C64-3F83F5F9366F}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{798D0A0C-5E11-4A2A-AE1C-9DC2DFDE7EDE}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
FirewallRules: [{E7476015-7372-42D0-ACDC-8551DE020328}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
FirewallRules: [{EF00A067-9408-4979-8698-2A0A8A280EA6}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{EFFB7B51-3139-45F5-A0E5-4CB988BD5633}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{09DF5CC1-9EB4-48C0-A8D2-867ED24208AB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{756B77C8-5E07-48A5-B32E-05C76B827F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3C2A5C00-AC80-43EF-AE3F-C3DDD93D2B70}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EE15E2BB-6A51-462D-A354-708A9DB4C1B2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B18BB976-17B8-469C-AD57-5B9CA19E2F04}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{D7E4395C-F3AC-440D-ACF2-0FDB2CA2E195}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{619035CC-6EAD-4FED-966B-BEE77A69D52F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{08140D72-C516-44EE-8531-4373D4632F25}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{BA68AF52-923B-42D1-B53E-DCD5D968755A}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{5DFC3B8C-74C9-494C-901D-E12FA2DE5D37}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{AB7D9D09-BAFC-46E1-B1D2-53404F421E66}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{BE73EECF-F8E1-454B-80FD-62B5F128C6B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{639DD725-CA6D-4554-A412-FDDB23F5F1BC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{553BF0D9-2838-4997-97F9-ED731A9831B1}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{D9A5BFB1-1F32-48A2-B883-AC61EAFB38B2}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{3CEB77E0-77BD-4EC0-9CE4-D94E7F1E0F15}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{7B9E1BCC-3DDB-4802-A20D-6E511677EF76}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{9BEEC019-EA9E-4169-B56A-FB8830E22925}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{BC7ADA56-3049-41DE-8C27-8DE8305838CC}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: Lexmark X422
Description: Lexmark X422
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lexmark
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/16/2016 12:07:15 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 5.3.2016.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 90c0
Start Time: 01d17f16a3bebbf9
Termination Time: 0
Application Path: C:\Users\Mike\Downloads\FRST64.exe
Report Id: f4101732-eb0a-11e5-9914-10feed07aff7
Error: (03/15/2016 03:00:29 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update; Error = 0x80070422).
Error: (03/15/2016 12:00:03 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).
Error: (03/14/2016 01:50:15 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).
Error: (03/13/2016 07:00:48 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: The backup did not complete because of an error writing to the backup location K:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).
Error: (03/13/2016 12:00:02 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).
Error: (03/12/2016 12:00:03 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).
Error: (03/11/2016 10:33:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 132101
Error: (03/11/2016 10:33:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 132101
Error: (03/11/2016 10:33:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (03/13/2016 08:43:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {3C5E2B20-B911-44E2-A2DD-9F05E7B5E775}
Error: (03/10/2016 02:50:36 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {DD000CBD-67A6-423F-9132-1A2D0F76EAD5}
Error: (03/10/2016 02:50:02 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {10465E40-E8EC-4C58-B725-594524948D5A}
Error: (03/09/2016 04:20:00 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgsvc service.
Error: (03/09/2016 04:13:22 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The Windows Modules Installer service did not shut down properly after receiving a preshutdown control.
Error: (03/09/2016 04:05:56 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The Windows Update service did not shut down properly after receiving a preshutdown control.
Error: (03/07/2016 11:43:12 PM) (Source: volsnap) (EventID: 27) (User: )
Description: The shadow copies of volume K: were aborted during detection because a critical control file could not be opened.
Error: (03/07/2016 11:43:03 PM) (Source: volsnap) (EventID: 27) (User: )
Description: The shadow copies of volume K: were aborted during detection because a critical control file could not be opened.
Error: (03/07/2016 11:43:02 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk6\DR20.
Error: (03/07/2016 11:43:02 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk6\DR20.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU E5800 @ 3.20GHz
Percentage of memory in use: 94%
Total physical RAM: 2012.98 MB
Available physical RAM: 106.51 MB
Total Virtual: 5797.7 MB
Available Virtual: 1082.16 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:451.85 GB) (Free:324.48 GB) NTFS
Drive d: (2013-04-15_1437) (CDROM) (Total:0.27 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 9E54C07E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=13.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.9 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Much apppreciated
Techno rubbish Cat
