Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03.03.2019 01Ran by Michael (05-03-2019 20:20:34)Running from C:\Users\Michael\DesktopWindows 10 Pro Version 1803 17134.590 (X64) (2018-06-09 20:51:05)Boot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-458845543-3386048874-3319027442-500 - Administrator - Enabled) => C:\Users\AdministratorDefaultAccount (S-1-5-21-458845543-3386048874-3319027442-503 - Limited - Disabled)defaultuser0 (S-1-5-21-458845543-3386048874-3319027442-1000 - Limited - Enabled) => C:\Users\defaultuser0Guest (S-1-5-21-458845543-3386048874-3319027442-501 - Limited - Enabled)Michael (S-1-5-21-458845543-3386048874-3319027442-1001 - Administrator - Enabled) => C:\Users\MichaelWDAGUtilityAccount (S-1-5-21-458845543-3386048874-3319027442-504 - Limited - Disabled)==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Windows Defender (Enabled - Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46AS: Windows Defender (Enabled - Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)µTorrent (HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\uTorrent) (Version: 3.5.5.45095 - BitTorrent Inc.)4K Video Downloader 4.4 (HKLM-x32\...\17CEAB50-0275-4D5E-9C11-CF2963C59FA1) (Version: 4.4.6.2295 - Open Media LLC)7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)adbLink version 3.6 (HKLM-x32\...\05CF1DD3-4A94-4219-B176-BB1796680A6C_is1) (Version: 3.6 - jocala.com)Adobe Acrobat DC (HKLM-x32\...\AC76BA86-1033-FFFF-7760-0C0F074E4100) (Version: 15.007.20033 - Adobe Systems Incorporated)Adobe Acrobat Reader DC (HKLM-x32\...\AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 19.010.20098 - Adobe Systems Incorporated)Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)Adobe Photoshop Elements 13 (HKLM-x32\...\609818B9-23EB-4196-B466-EFE05E92A32F) (Version: 13.0 - Adobe Systems Incorporated)AirDroid 3.3.5.0 (HKLM-x32\...\AirDroid) (Version: 3.3.5.0 - Sand Studio)Airytec Switch Off (HKLM\...\Airytec Switch Off) (Version: 3.5.1 - Airytec)AOMEI PE Builder 2.0 (HKLM-x32\...\A83692F5-3E9B-4E95-9E7E-B5DF5566909D_is1) (Version: - AOMEI Technology Co., Ltd.)Audacity 2.2.2 (HKLM-x32\...\Audacity_is1) (Version: 2.2.2 - Audacity Team)AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - )Bonjour (HKLM\...\B91110FB-33B4-468B-90C2-4D5E8AE3FAE1) (Version: 2.0.2.0 - Apple Inc.)Bulk Rename Utility 2.7.1.3 (HKLM\...\Bulk Rename Utility_is1) (Version: - TGRMN Software)calibre (HKLM-x32\...\C1ABA225-DEC3-4F06-B7E7-7EA785BDC120) (Version: 3.23.0 - Kovid Goyal)ComicRack v0.9.178 (HKLM\...\ComicRack) (Version: v0.9.178 - cYo Soft)CyberLink PowerDVD 17 (HKLM-x32\...\D15BFD7F-6BBA-49A7-A6B1-14C00DCA6842) (Version: 17.0.1523.60 - CyberLink Corp.)DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version: - )FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\...\9C7E31E3-017F-434C-AC40-24431A354A1E_is1) (Version: 2.2.2 - )FLAC Frontend (HKLM-x32\...\315E5E8B-0560-413A-B604-622A4C8BECBD) (Version: 2.1.1 - Xiph.org)foobar2000 v1.4.1 (HKLM-x32\...\foobar2000) (Version: 1.4.1 - Peter Pawlowski)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.119 - Google Inc.)Google Update Helper (HKLM-x32\...\60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.33.23 - Google Inc.) HiddenHandBrake 1.2.0 (HKLM-x32\...\HandBrake) (Version: 1.2.0 - )HiSuite (HKLM-x32\...\Hi Suite) (Version: 9.0.3.300 - )HL-3140CW (HKLM-x32\...\C6580DE1-F539-4700-ADD2-3185121E51A8) (Version: 1.0.1.0 - Brother Industries, Ltd.)ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)Java 8 Update 181 (64-bit) (HKLM\...\26A24AE4-039D-4CA4-87B4-2F64180181F0) (Version: 8.0.1810.13 - Oracle Corporation)K-Lite Mega Codec Pack 14.3.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.3.0 - KLCP)Kodi (HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\Kodi) (Version: - XBMC Foundation)LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )Medieval CUE Splitter (HKLM-x32\...\B96D2269-568B-4CBF-9332-12FAE8B158F7) (Version: 1.2.0 - Medieval Software)Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\3A9FC03D-C685-4831-94CF-4EDFD3749497) (Version: 3.5.8080.0 - Microsoft Corporation)Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3) (Version: 3.5.8080.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 (HKLM-x32\...\35b83883-40fa-423c-ae73-2aff7e1ea820) (Version: 12.0.40649.5 - Microsoft Corporation)Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\e46eca4f-393b-40df-9f49-076faf788d83) (Version: 14.0.23026.0 - Microsoft Corporation)Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\e2803110-78b3-4664-a479-3611a381656a) (Version: 14.0.24215.1 - Microsoft Corporation)Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)Minimal ADB and Fastboot version 1.4 (HKLM-x32\...\C5564379-582D-457A-9E68-A9E7C1F1C4EC_is1) (Version: 1.4 - Sam Rodberg)MiniTool Partition Wizard Free 10.2.3 (HKLM\...\05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6_is1) (Version: - MiniTool Solution Ltd.)MKVToolNix 8.2.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 8.2.0 - Moritz Bunkus)Mozilla Firefox 65.0.2 (x64 en-GB) (HKLM\...\Mozilla Firefox 65.0.2 (x64 en-GB)) (Version: 65.0.2 - Mozilla)Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.0.2 - Mozilla)Mp3tag v2.93 (HKLM-x32\...\Mp3tag) (Version: 2.93 - Florian Heidenreich)MPEG Video Wizard DVD 4.0.4.110 (09/2008) (HKLM-x32\...\MPEG Video Wizard DVD) (Version: 4.0.4.110 (09/2008) - Womble Multimedia, Inc.)MPEG Video Wizard DVD 5.0.1.112 (10/2015) (HKLM-x32\...\9FD45917-95E6-449D-ACC9-01E634A34CBD_is1) (Version: 5.0.1.112 - Womble Multimedia, Inc.)MPEG Video Wizard DVD 5.0.1.112 (10/2015) (HKLM-x32\...\Mpeg Video Wizard DVD 5.0) (Version: 5.0.1.112 (10/2015) - Womble Multimedia, Inc.)MyHarmony (HKLM-x32\...\2AD8F8A1-ECE5-4890-BCC2-B4396370A0D4) (Version: 1.0.308 - Logitech)Newsbin Pro (HKLM\...\Newsbin6) (Version: 6.81 - DJI Interprises, LLC)Plex Media Server (HKLM-x32\...\303920b6-0ccc-40d1-9d1c-e04040da35f5) (Version: 1.14.0.5470 - Plex, Inc.)Plex Media Server (HKLM-x32\...\AFBAD95F-42FE-43EF-9488-930C1380F710) (Version: 1.14.470 - Plex, Inc.) HiddenPrivate Internet Access (HKLM\...\33023371-7761-4F81-BBB1-0E0D0D175ACF) (Version: 1.1.1+02545 - London Trust Media, Inc.)PuTTY release 0.70 (64-bit) (HKLM\...\45B3032F-22CC-40CD-9E97-4DA7095FA5A2) (Version: 0.70.0.0 - Simon Tatham)QoQReVerse (HKLM-x32\...\QoQReVerse) (Version: - )QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)Realtek High Definition Audio Driver (HKLM-x32\...\F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)Revo Uninstaller Pro 4.0.0 (HKLM\...\67579783-0FB7-4F7B-B881-E5BE47C9DBE0_is1) (Version: 4.0.0 - VS Revo Group, Ltd.)R-Studio 5.4 (HKLM-x32\...\R-Studio 5.4NSIS) (Version: 5.4.134120 - R-Tools Technology Inc.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\90140000-0011-0000-1000-0000000FF1CE_Office14.PROPLUS_A3364707-2F53-4C83-8F68-C9877A9080C7) (Version: - Microsoft)StartIsBack++ (HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartIsBack) (Version: 2.6.4 - startisback.com)Stopping Plex (HKLM-x32\...\49172598-5AA7-481B-87DE-F2755431E754) (Version: 1.14.470 - Plex, Inc.) HiddenSUPERAntiSpyware (HKLM\...\CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA) (Version: 6.0.1248 - SUPERAntiSpyware.com)TweakNews (HKLM-x32\...\50B45977-E3FB-46FE-8D16-7D7BC51B0616) (Version: 2.0.0.0 - Base Network Services, B.V.) HiddenTweakNews (HKLM-x32\...\TweakNews 2.0.0.0) (Version: 2.0.0.0 - Base Network Services, B.V.)Viber (HKLM-x32\...\4108ACD5-9E7B-4AF7-B40E-9D9EDCE812F1) (Version: 9.5.0.8 - Viber Media Inc.) HiddenViber (HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\14b149ea-244a-44af-bfaf-f2bb2b40b18a) (Version: 9.5.0.8 - Viber Media Inc.)VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.0.0 - Elaborate Bytes)VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)WD Discovery (HKLM-x32\...\A80AE043-EF68-4B64-9C6F-088405FED315) (Version: 102.0.1.10 - Western Digital Technologies, Inc.)WD My Cloud (HKLM\...\4B86F896-11DC-4711-BB60-81104832FA44) (Version: 1.0.7.17 - Western Digital Technologies, Inc.)WhatsApp (HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\WhatsApp) (Version: 0.3.2276 - WhatsApp)Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)XMedia Recode version 3.4.4.9 (HKLM-x32\...\DDA3C325-47B2-4730-9672-BF3771C08799_is1) (Version: 3.4.4.9 - XMedia Recode)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\865e5e76-ad83-4dca-a109-50dc2113ce9b\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\99E2B362-3E4E-4255-9B29-41A7F40777BA\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\99E2B362-3E4E-4255-9B29-41A7F40777BB\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\a2a9545d-a0c2-42b4-9708-a0b2badd77c9\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\AD1405D2-30CF-4877-8468-1EE1C52C759F\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\c71c41f1-ddad-42dc-a8fc-f5bfc61df958\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\E5C31EC8-C5E6-4E07-957E-944DB4AAD85E\InprocServer32 -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll (www.startisback.com) [File not signed]CustomCLSID: HKU\S-1-5-21-458845543-3386048874-3319027442-1001_Classes\CLSID\FCEA18FF-BC55-4E63-94D7-1B2EFBFE706F\Shell\Open\Command -> C:\Users\Michael\AppData\Local\StartIsBack\StartIsBackCfg.exe () [File not signed]ContextMenuHandlers1: [$PowerDVD] -> E72C61D0-C453-42BA-84C9-88AEE3DEE676 => C:\ProgramData\CyberLink\PowerDVD17\OpenWith\PDVD_Shell64.dll [2017-03-21] (CyberLink Corp. -> CyberLink Corp.)ContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> A6595CD1-BF77-430A-A452-18696685F7C7 => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)ContextMenuHandlers1: [BRUMenuHandler] -> 5D924130-4CB1-11DB-B0DE-0800200C9A66 => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2014-06-24] (TGRMN Software -> Bulk Rename Utility)ContextMenuHandlers1: [Mp3tagShell] -> 6351E20C-35FA-4BE3-98FB-4CABF1363E12 => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-03-29] (Florian Heidenreich) [File not signed]ContextMenuHandlers1: [VirtualCloneDrive] -> B7056B8E-4F99-44f8-8CBD-282390FE5428 => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG -> Elaborate Bytes AG)ContextMenuHandlers1: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)ContextMenuHandlers1-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)ContextMenuHandlers2: [BRUMenuHandler] -> 5D924130-4CB1-11DB-B0DE-0800200C9A66 => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2014-06-24] (TGRMN Software -> Bulk Rename Utility)ContextMenuHandlers2: [Mp3tagShell] -> 6351E20C-35FA-4BE3-98FB-4CABF1363E12 => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-03-29] (Florian Heidenreich) [File not signed]ContextMenuHandlers2: [VirtualCloneDrive] -> B7056B8E-4F99-44f8-8CBD-282390FE5428 => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG -> Elaborate Bytes AG)ContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]ContextMenuHandlers4: [BRUMenuHandler] -> 5D924130-4CB1-11DB-B0DE-0800200C9A66 => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2014-06-24] (TGRMN Software -> Bulk Rename Utility)ContextMenuHandlers4: [Mp3tagShell] -> 6351E20C-35FA-4BE3-98FB-4CABF1363E12 => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-03-29] (Florian Heidenreich) [File not signed]ContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)ContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> A6595CD1-BF77-430A-A452-18696685F7C7 => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)ContextMenuHandlers6: [RUShellExt] -> 2C5515DC-2A7E-4BFD-B813-CACC2B685EB7 => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2018-09-06] (VS Revo Group Ltd. -> VS Revo Group)ContextMenuHandlers6: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)ContextMenuHandlers6-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: 0235C2B8-AD6A-4F13-9109-36C4826FC31E - System32\Tasks\CCUpdater => C:\Users\Michael\AppData\Roaming\CCUpdater\CCUpdate.exe (Copyright 2005-2019 Piriform Software Ltd) [File not signed]Task: 068CE9B6-45B0-4C34-B833-764F6E07265B - System32\Tasks\klcp_update => CodecTweakTool.exeTask: 088C5004-85D3-4AB5-8AF6-F30F2637C735 - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)Task: 0A24FA41-E94E-4526-B651-8CF945911936 - System32\Tasks\AdobeAAMUpdater-1.0-I5-2500K-Michael => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)Task: 269CFE4D-1771-46FE-9E47-112A5D3F836D - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)Task: 35EC5C8B-6F68-44A6-A0A8-BD948CE78DE1 - System32\Tasks\qejh => C:\Users\Michael\qejh\pbet.exe (AutoIt Team) [File not signed]Task: 4ABD7A58-8AF5-4B03-A8C0-8513639980DA - System32\Tasks\Microsoft\Windows\rempl\shell => C:\Program Files\rempl\sedlauncher.exeTask: 59545D78-4F7D-410C-987D-FB4F5528290D - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)Task: 73A9008B-0309-486D-A6AD-33C07D43A72A - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)Task: 80E3E92E-D89D-4DF8-995A-6084416359EB - System32\Tasks\gcjzahj => C:\Users\Michael\gcjzahj\anso.exe (AutoIt Team) [File not signed]Task: 829170A8-7257-496F-863A-19DEDE5F9D70 - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)Task: 9D7286E3-7036-4B30-BF74-73A3C3E94512 - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECKTask: CED335F7-796C-4F6D-9181-51527824390D - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)Task: E00AAB76-048C-4645-996D-02B3643A0CA6 - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-458845543-3386048874-3319027442-500 => C:\Users\Michael\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exeTask: ED755F60-E1C5-41E9-8C3E-333836EDE609 - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)Task: F9ACBB3C-8824-4B59-85FF-C6631E2A7760 - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)==================== Shortcuts & WMI ========================(The entries could be listed to be restored or removed.)==================== Loaded Modules (Whitelisted) ==============2018-12-12 10:32 - 2018-12-12 10:32 - 000190784 _____ (Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe2018-06-09 21:38 - 2018-06-14 18:22 - 000521728 _____ (www.startisback.com) [File not signed] C:\Users\Michael\AppData\Local\StartIsBack\StartIsBack64.dll2018-11-16 12:58 - 2018-04-30 12:00 - 000075776 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll2018-03-29 20:09 - 2018-03-29 20:09 - 000424448 _____ (Florian Heidenreich) [File not signed] C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll2018-06-11 17:32 - 2012-07-13 11:07 - 000270336 ____N (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe2018-07-01 13:30 - 2018-07-01 13:30 - 039954944 _____ () [File not signed] C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x64__aam28m9va5cke\Plex.dll2018-07-01 13:30 - 2018-07-01 13:30 - 001478144 _____ (SQLite Development Team) [File not signed] C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x64__aam28m9va5cke\sqlite3.dll2018-06-11 17:32 - 2009-02-27 15:38 - 000139264 ____R () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll2018-06-11 17:32 - 2012-07-13 12:09 - 000385024 ____N (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll2019-03-05 13:40 - 2019-03-05 13:41 - 002079240 _____ (Copyright 2005-2019 Piriform Software Ltd) [File not signed] C:\Users\Michael\AppData\Roaming\CCUpdater\CCUpdate.exe==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"==================== Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Hosts content: ==========================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2018-06-09 21:41 - 2018-12-13 20:22 - 000003842 _____ C:\WINDOWS\system32\drivers\etc\hosts127.0.0.1 activate.adobe.com127.0.0.1 practivate.adobe.com127.0.0.1 lmlicenses.wip4.adobe.com127.0.0.1 lm.licenses.adobe.com127.0.0.1 na1r.services.adobe.com127.0.0.1 hlrcv.stage.adobe.com127.0.0.1 www.r2rdownload.net127.0.0.1 www.r2rdownload.com127.0.0.1 www.elephantafiles.com127.0.0.1 www.r2rdownload.com127.0.0.1 cap.cyberlink.com127.0.0.1 209.34.83.73:443127.0.0.1 209.34.83.73:43127.0.0.1 209.34.83.73127.0.0.1 209.34.83.67:443127.0.0.1 209.34.83.67:43127.0.0.1 209.34.83.67127.0.0.1 ood.opsource.net127.0.0.1 199.7.52.190:80127.0.0.1 199.7.52.190127.0.0.1 OCSP.SPO1.VERISIGN.COM127.0.0.1 199.7.54.72:80127.0.0.1 199.7.54.72127.0.0.1 192.150.14.69127.0.0.1 192.150.18.101127.0.0.1 192.150.18.108127.0.0.1 192.150.22.40127.0.0.1 192.150.8.100127.0.0.1 192.150.8.118127.0.0.1 209-34-83-73.ood.opsource.net==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Calibre2\;C:\Users\Michael\AppData\Local\Microsoft\WindowsApps;C:\adb;C:\Program Files\PuTTY\HKU\S-1-5-21-458845543-3386048874-3319027442-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\Pictures\hd-windows-wallpaper.jpgDNS Servers: Media is not connected to internet.HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==If an entry is included in the fixlist, it will be removed.HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"HKLM\...\StartupApproved\Run: => "BCSSync"HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"HKLM\...\StartupApproved\Run32: => "PowerDVD17Agent"HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartupApproved\StartupFolder: => "crss.js"HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartupApproved\StartupFolder: => "script.lnk"HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1D7305B07635F8E0A4CF4B02D1C53C4D"HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartupApproved\Run: => "OneDrive"HKU\S-1-5-21-458845543-3386048874-3319027442-1001\...\StartupApproved\Run: => "AceStream"==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [TCP Query User3DF5D68B-284D-45E9-BB28-AD69FE97E4F6C:\users\michael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michael\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)FirewallRules: [UDP Query UserEE664663-A833-4837-9A9C-958C0A936E3FC:\users\michael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michael\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)FirewallRules: [TCP Query UserECF6B144-C8B4-4A47-A3A2-4C83051F691EC:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe (SAND STUDIO LIMITED -> Sand Studio)FirewallRules: [UDP Query User21239BBE-AB49-4A04-9F93-52F9C0CB2D6CC:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe (SAND STUDIO LIMITED -> Sand Studio)FirewallRules: [TCP Query UserF27580D0-4A69-4033-9E25-41A28917A867C:\program files\comicrack\comicrack.exe] => (Allow) C:\program files\comicrack\comicrack.exe () [File not signed]FirewallRules: [UDP Query User53C161AF-8E5C-4039-A0EC-47FAF61E1C83C:\program files\comicrack\comicrack.exe] => (Allow) C:\program files\comicrack\comicrack.exe () [File not signed]FirewallRules: [BFFD7525-4CBD-4090-A4AC-2044B1EC60FC] => (Block) C:\program files\comicrack\comicrack.exe () [File not signed]FirewallRules: [FB1987A7-B38C-4CD9-84C5-610FC902FE31] => (Block) C:\program files\comicrack\comicrack.exe () [File not signed]FirewallRules: [8171BFF5-4803-4F3E-9701-F709FD4D31D2] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)FirewallRules: [C6BD1E7F-9463-4C72-8FCB-92D6B77F5FF2] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)FirewallRules: [TCP Query UserF72DEB50-7D8E-46D8-8D4F-98E99D93110B\\192.168.0.32\my_book_25da-1\public\e-applications\d-link\d-link storage utility(5.2.1.7)_01072016.exe] => (Allow) \\192.168.0.32\my_book_25da-1\public\e-applications\d-link\d-link storage utility(5.2.1.7)_01072016.exe No FileFirewallRules: [UDP Query User3E85912B-47D6-4DCF-BC5B-C4665EA0CA0E\\192.168.0.32\my_book_25da-1\public\e-applications\d-link\d-link storage utility(5.2.1.7)_01072016.exe] => (Allow) \\192.168.0.32\my_book_25da-1\public\e-applications\d-link\d-link storage utility(5.2.1.7)_01072016.exe No FileFirewallRules: [C26D52ED-1F93-4887-BC8A-DAB911948261] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)FirewallRules: [31A06695-39B6-41A3-B4A1-CF1EE7AC49E9] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)FirewallRules: [TCP Query UserF282FF86-4BA8-458C-9A93-4C9B69AFC1ADC:\program files (x86)\western digital\wd discovery\wddiscovery.exe] => (Allow) C:\program files (x86)\western digital\wd discovery\wddiscovery.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)FirewallRules: [UDP Query User52972DB4-3859-4DA8-AA0D-CD6B4C42A501C:\program files (x86)\western digital\wd discovery\wddiscovery.exe] => (Allow) C:\program files (x86)\western digital\wd discovery\wddiscovery.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)FirewallRules: [5F731042-56FE-4E85-8ECC-CB044B9AFC0E] => (Allow) C:\Program Files (x86)\Anvsoft\Syncios\pdt_syncios.exe No FileFirewallRules: [D882D952-C71B-478A-A4C9-EA68AFCE9263] => (Allow) C:\Program Files\Newsbin\NewsbinPro64.exe (DJI Interprises, LLC -> CMCEI)FirewallRules: [A495CB2E-CBDE-403E-98DD-E6D8504E0528] => (Allow) C:\Program Files\Newsbin\NewsbinPro64.exe (DJI Interprises, LLC -> CMCEI)FirewallRules: [EC260D3A-89F6-407D-B0AD-21CB1FF73CB3] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)FirewallRules: [4C78C1DB-887D-4603-8989-A6390ED2BD03] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD17\Kernel\DMS\CLMSServerPDVD17.exe (CyberLink Corp. -> CyberLink)FirewallRules: [F6C0264F-93C2-477A-94CD-E61CB6A0AD8F] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe (CyberLink Corp. -> CyberLink Corp.)FirewallRules: [57D5F2A2-8DFC-4ED6-86BE-43D30825CEB6] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD17\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)FirewallRules: [5F0C9A40-FE37-485A-AA94-CA2B6767189F] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD17\CastingStation.exe (CyberLink Corp. -> CyberLink Corp.)FirewallRules: [AEF1FD10-1A68-4346-BE73-D50AE7480DDF] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc -> Plex, Inc.)FirewallRules: [5AE882A6-9FC2-4409-9B44-51EA5AE4E753] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc -> Python Software Foundation)FirewallRules: [0DD38489-51DB-465C-B772-3776F6C00F52] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc -> Plex, Inc.)FirewallRules: [6A01FA73-2067-4B56-8DE4-B391052986CA] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc -> Plex)FirewallRules: [TCP Query User17AB749E-A913-495F-B9EF-6F875B9537F3C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [UDP Query User7F83870B-B3F6-4B4E-BE0C-DB4E54A0F97EC:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [BAAE354E-D6B6-4D6F-A932-FBFF18DD1CE9] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)==================== Restore Points =========================05-03-2019 19:42:40 Scheduled Checkpoint==================== Faulty Device Manager Devices =============Name: Realtek PCIe GBE Family ControllerDescription: Realtek PCIe GBE Family ControllerClass Guid: 4d36e972-e325-11ce-bfc1-08002be10318Manufacturer: RealtekService: rt640x64Problem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.==================== Event log errors: =========================Application errors:==================Error: (03/05/2019 08:18:49 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:23:33 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:21:20 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:16:34 PM) (Source: .NET Runtime) (EventID: 1022) (User: )Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 9604. Message ID: [0x2509].Error: (03/05/2019 07:09:31 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:09:28 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:07:28 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.Error: (03/05/2019 07:04:51 PM) (Source: SideBySide) (EventID: 78) (User: )Description: Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe".Error in manifest or policy file "" on line .A component version required by the application conflicts with another component version already active.Conflicting components are:.Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_fb3d9bff3069e088.manifest.Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.590_none_42ead2d644e6098e.manifest.System errors:=============Error: (03/05/2019 07:13:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscDataProtection and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 07:13:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscBrokerManager and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 07:11:03 PM) (Source: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv) (EventID: 10) (User: NT AUTHORITY)Description: A TCG Command has returned an error.Desc: AuthenticateSessionParam1: 0x1Param2: 0x60000001cParam3: 0x900000006Param4: 0x0Status: 0x1Error: (03/05/2019 06:57:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscBrokerManager and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 06:57:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscDataProtection and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 06:57:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscBrokerManager and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 06:57:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSIDWindows.SecurityCenter.WscBrokerManager and APPIDUnavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Error: (03/05/2019 06:55:15 PM) (Source: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv) (EventID: 10) (User: NT AUTHORITY)Description: A TCG Command has returned an error.Desc: AuthenticateSessionParam1: 0x1Param2: 0x60000001cParam3: 0x900000006Param4: 0x0Status: 0x1Windows Defender:===================================Date: 2019-03-04 13:56:17.910Description:Windows Defender Antivirus scan has been stopped before completion.Scan ID: F88C67E0-9043-48B1-A52C-90DC2EFC94B4Scan Type: AntimalwareScan Parameters: Full ScanDate: 2019-03-04 12:42:14.845Description:Windows Defender Antivirus has detected malware or other potentially unwanted software.For more information please see the following: =37020&name=Trojan:VBS/Mountsi.A!ml&threatid=2147726485&enterprise=0Name: Trojan:VBS/Mountsi.A!mlID: 2147726485Severity: SevereCategory: TrojanPath: amsi:_C:\Users\Michael\AppData\Roaming\dwm.exe; amsi:_VBScriptd1183aaf2b20056fDetection Origin: UnknownDetection Type: ConcreteDetection Source: AMSIProcess Name: C:\Users\Michael\AppData\Roaming\dwm.exeSignature Version: AV: 1.289.360.0, AS: 1.289.360.0, NIS: 1.289.360.0Engine Version: AM: 1.1.15700.9, NIS: 1.1.15700.9Date: 2019-03-04 12:42:10.937Description:Windows Defender Antivirus has detected malware or other potentially unwanted software.For more information please see the following: =37020&name=Trojan:Win32/Occamy.C&threatid=2147726780&enterprise=0Name: Trojan:Win32/Occamy.CID: 2147726780Severity: SevereCategory: TrojanPath: file:_C:\Users\Michael\AppData\Roaming\dwm.exeDetection Origin: Local machineDetection Type: FastPathDetection Source: SystemProcess Name: UnknownSignature Version: AV: 1.289.360.0, AS: 1.289.360.0, NIS: 1.289.360.0Engine Version: AM: 1.1.15700.9, NIS: 1.1.15700.9Date: 2019-03-04 12:42:09.847Description:Windows Defender Antivirus has detected malware or other potentially unwanted software.For more information please see the following: =37020&name=Trojan:VBS/Mountsi.A!ml&threatid=2147726485&enterprise=0Name: Trojan:VBS/Mountsi.A!mlID: 2147726485Severity: SevereCategory: TrojanPath: amsi:_C:\Users\Michael\AppData\Roaming\dwm.exeDetection Origin: UnknownDetection Type: ConcreteDetection Source: AMSIProcess Name: C:\Users\Michael\AppData\Roaming\dwm.exeSignature Version: AV: 1.289.360.0, AS: 1.289.360.0, NIS: 1.289.360.0Engine Version: AM: 1.1.15700.9, NIS: 1.1.15700.9Date: 2019-02-21 13:37:56.901Description:Windows Defender Antivirus scan has been stopped before completion.Scan ID: 2D247E3C-3107-4F11-9240-61FE19AA319DScan Type: AntimalwareScan Parameters: Quick ScanDate: 2019-03-05 19:05:33.904Description:Windows Defender Antivirus has encountered an error trying to update signatures.New Signature Version:Previous Signature Version: 1.289.501.0Update Source: Microsoft Update ServerSignature Type: AntiVirusUpdate Type: FullCurrent Engine Version:Previous Engine Version: 1.1.15700.9Error code: 0x80240438Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.CodeIntegrity:===================================Date: 2019-03-05 20:12:20.321Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 20:12:20.320Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:56:12.149Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:56:12.147Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:36:15.058Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:36:15.055Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:27:57.019Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.Date: 2019-03-05 19:27:57.017Description:Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.==================== Memory info ===========================Processor: Intel Core™ i7-2600K CPU @ 3.40GHzPercentage of memory in use: 42%Total physical RAM: 11193.84 MBAvailable physical RAM: 6384.43 MBTotal Virtual: 12921.84 MBAvailable Virtual: 8466.55 MB==================== Drives ================================Drive c: () (Fixed) (Total:235.45 GB) (Free:119.64 GB) NTFSDrive e: (200Gb) (Fixed) (Total:186.31 GB) (Free:28.2 GB) NTFSDrive f: (BOOTMII) (Removable) (Total:3.79 GB) (Free:3.79 GB) FAT32\\?\Volumec72c3af7-0000-0000-0000-100000000000\ (System Reserved) (Fixed) (Total:1.56 GB) (Free:1.53 GB) NTFS\\?\Volumec72c3af7-0000-0000-0000-10413b000000\ () (Fixed) (Total:1.46 GB) (Free:1.07 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: C72C3AF7)Partition 1: (Active) - (Size=1.6 GB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=235.5 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=1.5 GB) - (Type=27)========================================================Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 186.3 GB) (Disk ID: 9C879C87)Partition 1: (Not Active) - (Size=186.3 GB) - (Type=07 NTFS)========================================================Disk: 4 (Size: 3.8 GB) (Disk ID: 0380140E)Partition 1: (Active) - (Size=3.8 GB) - (Type=0C)==================== End of Addition.txt ============================
Plex Media Server 1.14.0.5470 Crack Download for Windows
2ff7e9595c