Hello! Long time no see! 
I have a Surface Pro 3 running Windows 8.1 running both 64 bit and 32 bit programs (old Photoshop mostly, which I do need). My Epson XP-520 PSC has started having problems that look like software issues ( no 'preview' window, inability to change sizes, and cropping images), so I finally uninstalled it completely last night. I plan to reinstall, but before that I did some checking of my system and HijackThis showed a whole bunch of 'missing file' and a whole bunch of other crap that did not look at all familiar, plus when I rebooted the Google Chrome 'use me please!!' popup showed itself. I do have Chrome on my machine as a backup in case of Firefox trouble, but rarely use it. Ran Spybot S&D; and got a few things but they're 'fixed', and Avast didn't report any problems when it scanned yesterday other than its usual 'some files could not be scanned' (I have a BitLocked external drive that normally causes that alert). So I'm at the limit of what I can do without help. Help? 
Here are the logs asked for. Let me know if you also want the HijackThis one, or other things. These were run without the mentioned BitLocked drive unlocked, and without the PSC installed.
aswMBR:
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2016-12-28 12:13:03
—————————–
12:13:03.682 OS Version: Windows x64 6.2.9200
12:13:03.682 Number of processors: 4 586 0x4501
12:13:03.682 ComputerName: VYTWO UserName: Zhora
12:13:03.869 Initialize success
12:13:08.886 VM: initialized successfully
12:13:08.886 VM: Intel CPU supported virtualized
12:13:28.953 VM: supported disk I/O storport.sys
12:13:37.341 AVAST engine defs: 16122800
12:14:33.926 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000034
12:14:33.942 Disk 0 Vendor: HFS064G3AMNB-2200A 10108L00 Size: 61057MB BusType: 11
12:14:38.960 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000004b
12:14:38.960 Disk 1 Vendor: Generic- 1.00 Size: 61057MB BusType: 1
12:14:38.975 VM: Disk 0 MBR read successfully
12:14:38.975 Disk 0 MBR scan
12:14:38.991 Disk 0 unknown MBR code
12:14:38.991 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
12:14:39.007 Disk 0 scanning C:\windows\system32\drivers
12:14:39.007 Service scanning
12:14:46.891 Modules scanning
12:14:46.907 Disk 0 trace - called modules:
12:14:46.922 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll storahci.sys
12:14:46.922 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe000f328f060]
12:14:46.938 3 CLASSPNP.SYS[fffff800f8202170] -> nt!IofCallDriver -> [0xffffe000f27ed9a0]
12:14:46.938 5 ACPI.sys[fffff800f7c03c21] -> nt!IofCallDriver -> [0xffffe000f27e6a60]
12:14:46.954 7 ACPI.sys[fffff800f7c03c21] -> nt!IofCallDriver -> \Device\00000034[0xffffe000f27e6060]
12:14:47.063 AVAST engine scan C:\windows
12:14:47.063 AVAST engine scan C:\windows\system32
12:14:47.079 AVAST engine scan C:\windows\system32\drivers
12:14:47.079 AVAST engine scan C:\Users\Christine
12:14:47.079 AVAST engine scan C:\ProgramData
12:14:47.094 Scan finished successfully
12:15:28.617 Disk 0 MBR has been saved successfully to "C:\Users\Christine\Desktop\MBR.dat"
12:15:28.617 The log file has been saved successfully to "C:\Users\Christine\Desktop\aswMBR.txt"
FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
Ran by [removed] (administrator) on VYTWO (28-12-2016 12:19:35)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 8.1 Pro (Update) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Program Files (x86)\Western Digital\WD Print Share\WDPrintShare.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\FileManager\PhotosApp.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-12-06] (Apple Inc.)
HKLM-x32\…\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\…\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\…\Run: [WD UDS Control Center] => C:\Program Files (x86)\Western Digital\WD Print Share\WDPrintShare.exe [19840512 2012-03-16] ()
HKLM-x32\…\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5234072 2012-02-27] (Western Digital Technologies, Inc.)
HKLM-x32\…\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-02] (Adobe Systems Incorporated)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\Run: [Spybot-S&D; Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Mystify.scr [133632 2014-10-28] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => No File
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-29] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2015-02-02]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{F154B9C9-445D-4F68-B7F5-49E2D13B6D8A}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
SearchScopes: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
SearchScopes: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
FireFox:
========
FF ProfilePath: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380 [2016-12-28]
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380 -> Startpage (SSL)
FF Homepage: Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380 -> hxxp://forecast.weather.gov/MapClick.php?CityName=Bellingham&state;=WA&site;=SEW&textField1;=48.7597&textField2;=-122.487&e;=0#.Vfzn9ZetwqM
FF Extension: (YouTube Video and Audio Downloader) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\[removed] [2016-12-05]
FF Extension: (Privacy Badger) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\[removed] [2016-12-16]
FF Extension: (uBlock Origin) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\[removed] [2016-12-19]
FF Extension: (ColorfulTabs) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2016-12-22]
FF Extension: (NoScript) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-11-29]
FF Extension: (FireFTP) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2016-06-22]
FF Extension: (Download YouTube Videos as MP4) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-09-03]
FF Extension: (Theme Font & Size Changer) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2016-12-21]
FF SearchPlugin: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\pnoorcdr.default-1442637247380\searchplugins\startpage-ssl.xml [2015-09-18]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-29]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-16] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-16] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-02] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-02] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default [2016-12-28]
CHR Extension: (Google Slides) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-29]
CHR Extension: (Google Docs) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-29]
CHR Extension: (Google Drive) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-23]
CHR Extension: (YouTube) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-23]
CHR Extension: (Google Search) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-23]
CHR Extension: (Avast Online Security) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\daanglpcpkjjlkhcbladppjphglbigam [2016-08-22]
CHR Extension: (No Name) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-26]
CHR Extension: (Google Sheets) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-29]
CHR Extension: (Google Docs Offline) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-22]
CHR Extension: (Avast Online Security) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-08-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-22]
CHR Extension: (Gmail) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26]
CHR HKLM-x32\…\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
Addition:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-12-2016
Ran by [removed] (28-12-2016 12:20:16)
Running from C:\Users\[removed]\Desktop
Windows 8.1 Pro (Update) (X64) (2015-01-16 01:32:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4076533348-1329319317-2442182388-500 - Administrator - Disabled)
Guest (S-1-5-21-4076533348-1329319317-2442182388-501 - Limited - Disabled)
Moonscream (S-1-5-21-4076533348-1329319317-2442182388-1004 - Limited - Enabled)
Zhora (S-1-5-21-4076533348-1329319317-2442182388-1001 - Administrator - Enabled) => C:\Users\Christine
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Spybot - Search and Destroy (Enabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 15.14 (x64 edition) (HKLM\…\{23170F69-40C1-2702-1514-000001000000}) (Version: 15.14.00.0 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Photoshop 7.0.1 (HKLM-x32\…\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AIM for Windows (HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\AIM) (Version: - AOL Inc.)
Amazon Kindle (HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Send to Kindle (HKLM-x32\…\SendToKindle) (Version: 1.1.0.243 - Amazon)
Apple Application Support (32-bit) (HKLM-x32\…\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\…\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\…\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\…\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Audacity 2.0.3 (HKLM-x32\…\Audacity_is1) (Version: 2.0.3 - Audacity Team)
AudibleManager (HKLM-x32\…\AudibleManager) (Version: 3801776.1637756.4759644.48 - Audible, Inc.)
Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 12.3.2280 - AVAST Software)
Bonjour (HKLM\…\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\…\CCleaner) (Version: 5.25 - Piriform)
ComicRack v0.9.176 (HKLM\…\ComicRack) (Version: v0.9.176 - cYo Soft)
Compatibility Pack for the 2007 Office system (HKLM-x32\…\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink Media Suite 10 (HKLM-x32\…\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\…\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
iCloud (HKLM\…\{4BB313CE-D3D1-424C-8823-15CF85B00B05}) (Version: 6.1.0.30 - Apple Inc.)
iTunes (HKLM\…\{81C96689-EA5B-4B7D-A04F-16326EC51BC2}) (Version: 12.5.4.42 - Apple Inc.)
Jarte (HKLM-x32\…\Jarte_is1) (Version: 5.4 - Carolina Road Software L.L.C.)
LG ODD Auto Firmware Update (HKLM-x32\…\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Microsoft Office Converter Pack (HKLM-x32\…\{6EECB283-E65F-40EF-86D3-D51BF02A8D43}) (Version: 11.0.0.0 - Microsoft Corporation - Office Resource Kit Group)
Microsoft Office Word Viewer 2003 (HKLM-x32\…\{90850409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\…\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\…\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 50.1.0 (x86 en-US)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 45.5.1 (x86 en-US) (HKLM-x32\…\Mozilla Thunderbird 45.5.1 (x86 en-US)) (Version: 45.5.1 - Mozilla)
My Net View (HKLM-x32\…\{FCD12FCE-AAFA-450C-9AF0-290D6DE60B9A}) (Version: 1.0.1.6 - Western Digital)
N-trig Wintab x64 (HKLM-x32\…\{044886EF-A04E-4C84-AAAE-257815D510C5}) (Version: 1.0.17 - N-trig)
Skype™ 7.30 (HKLM-x32\…\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\…\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
VLC media player (HKLM\…\VLC media player) (Version: 2.2.4 - VideoLAN)
WD Print Share (HKLM-x32\…\{7790101E-94CC-47B0-B715-4955B75C7A30}) (Version: 2.22 - WD Corporation)
WD Quick View (HKLM-x32\…\{BC682D66-153E-44E2-BEF5-9E0DC3D652DB}) (Version: 1.6.0.13 - Western Digital)
zMUD 7.21.0.0 (HKLM-x32\…\zMUD) (Version: 7.21.0.0 - Zugg Software)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1E1C7106-271A-459F-B744-9AA17B977123} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18] (Google Inc.)
Task: {3FA8F0B2-0D57-4F73-B7E7-0142B1FCC140} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {409A3EB1-31FB-4D6C-B2EF-835A1635FFA8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2016-12-15] (Microsoft Corporation)
Task: {47DA447F-D4CC-485F-B1B3-0BADFB9F5215} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {5C816350-1887-4441-85B9-09F40E561750} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-29] (AVAST Software)
Task: {7060F528-49C6-4FE1-8A1C-D071897AF922} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18] (Google Inc.)
Task: {7508EA27-6B6A-4EE6-9D43-4EBBEB294026} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {AE1DB3A6-0602-4F00-A511-189AC67784E9} - System32\Tasks\{0AF40163-D0E9-4575-B5B7-6456B3D8CEAB} => Firefox.exe hxxp://ui.skype.com/ui/0/7.13.0.101/en/abandoninstall?page=tsMain
Task: {C077AB48-9CA8-4349-9D25-4FE9BF19BC0D} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-02] (AVAST Software)
Task: {C5B45104-8538-4181-813C-8A2D4CF98DE2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {CED8B126-0481-455A-8766-7BEE2D1C2D41} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-03-16 17:55 - 2012-03-16 17:55 - 19840512 _____ () C:\Program Files (x86)\Western Digital\WD Print Share\WDPrintShare.exe
2016-08-29 20:15 - 2016-08-29 20:15 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-08-29 20:15 - 2016-08-29 20:15 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-12-28 08:27 - 2016-12-28 08:27 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16122800\algo.dll
2015-01-15 18:55 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-01-15 18:55 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-01-15 18:55 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-01-15 18:55 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-01-15 18:55 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2016-06-26 18:46 - 2016-06-26 18:46 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-03-09 14:21 - 2011-03-09 14:21 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2011-03-09 14:21 - 2011-03-09 14:21 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:359B3BDA [360]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\…\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\…\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\…\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\…\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\…\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\…\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\…\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\…\123simsen.com -> www.123simsen.com
There are 7922 more sites.
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\123simsen.com -> www.123simsen.com
There are 7922 more sites.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 05:25 - 2016-12-28 00:37 - 00453798 ____R C:\windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15569 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\Control Panel\Desktop\\Wallpaper -> C:\Creative\Others Work\chris1.tif
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\…\StartupApproved\StartupFolder: => "Microsoft Office.lnk"
HKLM\…\StartupApproved\Run: => "iTunesHelper"
HKLM\…\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-4076533348-1329319317-2442182388-1001\…\StartupApproved\Run: => "iCloudServices"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{7A972945-FE4C-4419-A3CC-8261273791E1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8F0DF31B-A64D-40DE-8017-FE8A5B04D501}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BC1E7BC8-6571-4DC3-810C-7C3BCE45AAB4}C:\program files (x86)\western digital\wd print share\wdprintshare.exe] => C:\program files (x86)\western digital\wd print share\wdprintshare.exe
FirewallRules: [UDP Query User{B977EEDE-E086-4910-ADA5-A6D424291335}C:\program files (x86)\western digital\wd print share\wdprintshare.exe] => C:\program files (x86)\western digital\wd print share\wdprintshare.exe
FirewallRules: [TCP Query User{13AD8E24-0E69-49F5-9CDA-2573D8B748A5}C:\program files (x86)\western digital\wd print share\wdprintshare.exe] => C:\program files (x86)\western digital\wd print share\wdprintshare.exe
FirewallRules: [UDP Query User{69061637-46C7-4C77-83F6-6B9C59A66D39}C:\program files (x86)\western digital\wd print share\wdprintshare.exe] => C:\program files (x86)\western digital\wd print share\wdprintshare.exe
FirewallRules: [TCP Query User{3B7AA273-24A4-4A7B-8C94-F2A93C444C86}C:\program files\comicrack\comicrack.exe] => C:\program files\comicrack\comicrack.exe
FirewallRules: [UDP Query User{6C6A55F5-D876-4980-B38D-6B9F942EA989}C:\program files\comicrack\comicrack.exe] => C:\program files\comicrack\comicrack.exe
FirewallRules: [TCP Query User{7A4AF99C-3E8F-412C-81DA-B5238CDBFAD6}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{16F1D234-40A3-4417-B27F-DE816431D577}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{B6E25DB1-9B59-4DFE-9FCF-E79ADDB1DEA0}C:\program files\comicrack\comicrack.exe] => C:\program files\comicrack\comicrack.exe
FirewallRules: [UDP Query User{15F0BE86-1E51-4F60-A8EB-0FBE68C8E07C}C:\program files\comicrack\comicrack.exe] => C:\program files\comicrack\comicrack.exe
FirewallRules: [TCP Query User{EA4BA878-EE39-4500-A36E-8BFDD10B7207}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{A7F133DC-7E57-43E0-9912-2DE7CD75378B}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8265F243-A86D-414A-899C-889E26E3E48E}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B7529342-6605-4571-A19F-6A891BEAC89D}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E0D8A111-DC1A-40A4-B70E-EAAAE8B58E6F}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0850721F-EF00-4C05-8A0B-0A2DA8213E8A}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3B1C1167-2588-4323-BB41-429813634302}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{31212083-94F0-4BD8-9327-7434B2E96DD9}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{31E6AACD-1AB0-42A2-8A9B-7F3047728ACA}] => C:\Program Files\iTunes\iTunes.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D; 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D; 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D; 2 Background update service
==================== Restore Points =========================
27-12-2016 19:07:59 Removed Epson Event Manager
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/28/2016 08:36:35 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: The volume Windows RE tools was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)
Error: (12/28/2016 12:58:21 AM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Windows Search Service failed to process the list of included and excluded locations with the error <30, 0x80040d07, "iehistory://{S-1-5-21-4076533348-1329319317-2442182388-1001}/">.
Error: (12/28/2016 12:47:38 AM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Windows Search Service failed to process the list of included and excluded locations with the error <30, 0x80040d07, "iehistory://{S-1-5-21-4076533348-1329319317-2442182388-1001}/">.
Error: (12/27/2016 11:42:00 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Windows Search Service failed to process the list of included and excluded locations with the error <30, 0x80040d07, "iehistory://{S-1-5-21-4076533348-1329319317-2442182388-1001}/">.
Error: (12/27/2016 11:08:30 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Windows Search Service failed to process the list of included and excluded locations with the error <30, 0x80040d07, "iehistory://{S-1-5-21-4076533348-1329319317-2442182388-1001}/">.
Error: (12/27/2016 08:01:20 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: VYTWO)
Description: Application or service 'EpsonCustomerParticipation' could not be restarted.
Error: (12/27/2016 07:19:18 PM) (Source: MsiInstaller) (EventID: 1013) (User: VYTWO)
Description: Product: Epson Software Updater – Newer version of this software is already installed.
Error: (12/27/2016 07:18:17 PM) (Source: MsiInstaller) (EventID: 1013) (User: VYTWO)
Description: Product: Easy Photo Scan – There is a later version of this product installed
Error: (12/27/2016 06:16:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Photoshop.exe version 7.1.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1510
Start Time: 01d260ae59ad4178
Termination Time: 4294967295
Application Path: C:\Program Files (x86)\Adobe\Photoshop 7.0\Photoshop.exe
Report Id: 9a045019-cca3-11e6-84f1-600292d3746c
Faulting package full name:
Faulting package-relative application ID:
Error: (12/27/2016 06:04:18 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: The volume Windows RE tools was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)
System errors:
=============
Error: (12/28/2016 08:39:25 AM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (12/28/2016 08:37:30 AM) (Source: DCOM) (EventID: 10010) (User: VYTWO)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
Error: (12/28/2016 08:37:00 AM) (Source: DCOM) (EventID: 10010) (User: VYTWO)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
Error: (12/28/2016 08:27:52 AM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer MYNETN600
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F154B9C9-445D-4F68-B7F5-49E2D13B6D8A}.
The master browser is stopping or an election is being forced.
Error: (12/28/2016 08:26:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BlueStacks Plus Hypervisor service failed to start due to the following error:
The system cannot find the path specified.
Error: (12/28/2016 12:48:22 AM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (12/28/2016 12:46:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BlueStacks Plus Hypervisor service failed to start due to the following error:
The system cannot find the path specified.
Error: (12/27/2016 08:06:20 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (12/27/2016 07:53:16 PM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer MYNETN600
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F154B9C9-445D-4F68-B7F5-49E2D13B6D8A}.
The master browser is stopping or an election is being forced.
Error: (12/27/2016 07:52:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BlueStacks Plus Hypervisor service failed to start due to the following error:
The system cannot find the path specified.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-4020Y CPU @ 1.50GHz
Percentage of memory in use: 48%
Total physical RAM: 4001.07 MB
Available physical RAM: 2062.23 MB
Total Virtual: 4705.07 MB
Available Virtual: 2665.14 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:53.79 GB) (Free:12.59 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 59.6 GB) (Disk ID: 9E7152E5)
Partition: GPT.
========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 6FB8D794)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
