Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-01-2016 Ran by Mateusz (2016-01-29 21:52:56) Running from C:\Users\Mateusz\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2016-01-25 11:11:26) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1797107554-670502137-552658141-500 - Administrator - Disabled) Guest (S-1-5-21-1797107554-670502137-552658141-501 - Limited - Disabled) Mateusz (S-1-5-21-1797107554-670502137-552658141-1000 - Administrator - Enabled) => C:\Users\Mateusz ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1797107554-670502137-552658141-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) CrossFire (HKLM-x32\...\CrossFire_is1) (Version: 1220 - Z8Games.com) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.2.0.0115 - Disc Soft Ltd) Gothic II Gold Edition wersja 2.6.0.0 (HKLM-x32\...\Gothic II Gold Edition_is1) (Version: 2.6.0.0 - GTX Box Team) Hotspot Shield 5.1.5 (HKLM-x32\...\HotspotShield) (Version: 5.1.5 - AnchorFree Inc.) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation) NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation) NVIDIA Graphics Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.11.2.10120 - Electronic Arts, Inc.) Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATTENTION SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {01EF8394-39D3-4DA8-83A3-35B7D2A1243B} - System32\Tasks\{3B810657-6339-45DB-BE27-D5369EE75D80} => pcalua.exe -a C:\Users\Mateusz\Downloads\ACPI64_Win7\AsusSetup.exe -d C:\Users\Mateusz\Downloads\ACPI64_Win7 Task: {03B96F07-B172-4AAC-BA68-F5CE3B2F59E7} - System32\Tasks\{05C7BC89-306B-4BF7-9019-340968DE2258} => pcalua.exe -a C:\Users\Mateusz\AppData\Roaming\yoursearching\UninstallManager.exe -c -ptid=face Task: {0CEA9DF8-FFB2-468E-A0D0-145276930861} - System32\Tasks\Builder Kingdom => Rundll32.exe "C:\Users\Mateusz\AppData\Local\Builder Kingdom\{483671CE-9E58-2F57-2BC3-0E5359FB4E88}\BuilderKingdom.dll",#1 <==== ATTENTION Task: {121C1019-3A5A-4B89-9DAE-ACE8349ACCB6} - System32\Tasks\{6757E012-49B5-43CF-9705-ACCEC992C6B7} => pcalua.exe -a C:\Users\Mateusz\AppData\Local\Temp\Uninstall.exe -d C:\Users\Mateusz\AppData\Local\Temp Task: {3F475426-DD5A-4030-9579-736BB9D13747} - System32\Tasks\LuckyBrowse => C:\Program Files (x86)\LuckyBrowse\app\luckybrowse.exe <==== ATTENTION Task: {57F6E488-46E3-439E-A4CE-FB20D158861C} - System32\Tasks\Lebetap => C:\PROGRA~1\GROOVE~1\Ghjun.bat Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {5A4D968E-7E9E-4022-92EB-0CCA3217620D} - System32\Tasks\Builder Kingdom2 => Rundll32.exe "C:\Users\Mateusz\AppData\Local\Builder Kingdom\{483671CE-9E58-2F57-2BC3-0E5359FB4E88}\gcp.dll",#1 <==== ATTENTION Task: {611F660E-AA1B-44E5-88C8-3E047C8FA590} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION Task: {6E8DCBD6-A642-4344-8B0B-F68A8F2192B2} - System32\Tasks\NQODFJXGGHCSGKWW => C:\ProgramData\Service1104\Service1104.exe [2016-01-29] () <==== ATTENTION Task: {7FDEC17F-7CD6-49A8-B2CD-C129AD8AE533} - System32\Tasks\Regkup => C:\PROGRA~1\SHOPPE~1\Jatqead.bat Task: {9D1289A6-E5C8-47D7-8031-6DAEC210713A} - System32\Tasks\{8743D8FE-462C-4A57-8288-23BE562F7DC2} => pcalua.exe -a "C:\Program Files (x86)\SpaceSondPro_v53.12485\SpaceSondPro_Service.exe" -d "C:\Program Files (x86)\SpaceSondPro_v53.12485\" Task: {AEFEF19E-3D38-415E-9A8B-3303A5E6AADC} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION Task: {BBAF1243-BAB6-48D6-9830-E4B370E3D87D} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {DDFB7744-F6EB-4C65-BD4B-5B4B91EA5E23} - System32\Tasks\{443428B0-4943-40BF-87B2-AEAF0438C0C7} => pcalua.exe -a "C:\Users\Mateusz\AppData\Local\Temp\Temp1_pbsetup (1).zip\pbsetup.exe" (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\NQODFJXGGHCSGKWW.job => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G1Tzftpbl2,953debf9-0029-416a-89c5-bfdb85d9601d, ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G1Tzftpbl2,953debf9-0029-416a-89c5-bfdb85d9601d, ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G1Tzftpbl2,953debf9-0029-416a-89c5-bfdb85d9601d, ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet-Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G1Tzftpbl2,953debf9-0029-416a-89c5-bfdb85d9601d, ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G1Tzftpbl2,953debf9-0029-416a-89c5-bfdb85d9601d, ==================== Loaded Modules (Whitelisted) ============== 2015-10-22 15:05 - 2015-10-22 15:05 - 01927680 _____ () C:\Program Files\Sound+\SoundP.dll 2016-01-25 12:37 - 2015-12-16 15:53 - 00126072 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-01-26 14:54 - 2016-01-26 14:48 - 00540160 _____ () C:\ProgramData\ApplicationHosting\ApplicationHosting.exe 2016-01-25 12:38 - 2015-12-16 18:34 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-01-28 16:54 - 2016-01-28 16:54 - 00182976 _____ () C:\Program Files (x86)\SFK\SSFK.exe 2016-01-29 14:25 - 2016-01-29 14:25 - 00243200 _____ () C:\Program Files (x86)\F5D69160-1453814086-11DD-B8FE-00235414C3CE\knse64AA.tmp 2016-01-26 14:15 - 2016-01-26 14:15 - 00416256 _____ () C:\Program Files (x86)\F5D69160-1453814086-11DD-B8FE-00235414C3CE\hnsg713E.tmp 2016-01-26 14:15 - 2016-01-26 14:15 - 00307712 _____ () C:\Program Files (x86)\F5D69160-1453814086-11DD-B8FE-00235414C3CE\jnsr59B7.tmp 2016-01-29 21:36 - 2016-01-29 21:36 - 01176064 _____ () C:\Users\Mateusz\AppData\Local\Temp\amisetup1767__16782.exe 2016-01-29 21:37 - 2016-01-29 21:37 - 01639936 _____ () C:\Windows\Temp\7316.tmp 2016-01-29 17:28 - 2016-01-29 17:28 - 00028160 _____ () C:\Users\Mateusz\AppData\Local\Builder Kingdom\{483671CE-9E58-2F57-2BC3-0E5359FB4E88}\BuilderKingdom.dll 2016-01-29 17:28 - 2016-01-29 17:28 - 00012800 _____ () C:\Users\Mateusz\AppData\Local\Builder Kingdom\{483671CE-9E58-2F57-2BC3-0E5359FB4E88}\gcp.dll 2016-01-29 17:28 - 2016-01-29 17:28 - 00011264 _____ () C:\Users\Mateusz\AppData\Local\Builder Kingdom\{483671CE-9E58-2F57-2BC3-0E5359FB4E88}\{80EE99A9-0971-847C-3645-2E1507340B25}.dat 2016-01-13 23:31 - 2016-01-13 23:31 - 00261328 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll 2015-12-15 20:46 - 2015-12-15 20:46 - 00280143 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libidn-11.dll 2009-03-27 21:02 - 2009-03-27 21:02 - 01554920 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libeay32.dll 2009-03-27 21:02 - 2009-03-27 21:02 - 00332254 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libssl32.dll 2016-01-25 12:38 - 2015-12-16 18:34 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da41-c675-11e5-83b7-00235414c3ce} AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da42-c675-11e5-83b7-00235414c3ce} AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da78-c675-11e5-83b7-00235414c3ce} AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da79-c675-11e5-83b7-00235414c3ce} AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da7a-c675-11e5-83b7-00235414c3ce} AlternateDataStreams: C:\Windows\system32\Drivers\sdfhgdf.sys:{6c53da7b-c675-11e5-83b7-00235414c3ce} ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2016-01-26 14:14 - 00000967 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1797107554-670502137-552658141-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 208.87.151.18 - 208.87.151.19 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{18E1A28D-B591-422B-830E-A7A855D2C68E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{ADBDEE34-6BE2-441A-A576-7B5A53C8232E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{EB9C1016-86F3-4E20-B933-3D6B12618CC4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D4A5E81C-BE7E-4144-AFE9-54F0525AC05D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{6D4E3FF4-06BF-47BF-A319-13E8BC423EE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{FBA6B844-76F9-46D6-9378-4B3679C00BD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{640F26EA-D1B7-497C-83F1-320635D3DB37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{80B3E08B-4A28-4FA1-A355-815ADF4879E3}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{F09A1A06-9146-4953-8F17-9EED029AB1EA}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [TCP Query User{28300737-C4BC-416D-9525-78F7CAC907E4}C:\users\mateusz\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mateusz\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{02B0A7B1-E808-47B6-92AB-929331E65286}C:\users\mateusz\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mateusz\appdata\roaming\utorrent\utorrent.exe FirewallRules: [{967BDB0C-5B30-4D69-BA34-51843154820A}] => (Allow) C:\Program Files (x86)\LuckyBrowse\app\LuckyBrowse.exe FirewallRules: [{94121C20-DC8B-4512-AA32-2939D42C61FF}] => (Allow) C:\Program Files (x86)\LuckyBrowse\app\LuckyBrowse.exe FirewallRules: [{BC86373D-691F-49AC-9DE0-9520C1EF2448}] => (Allow) C:\Users\Mateusz\AppData\Local\Chromium\Application\chrome.exe FirewallRules: [{2A6E270F-43A7-49F7-AE72-BEABF8CD5B15}] => (Allow) D:\GTX Box Team\Gothic II Gold Edition\System\Gothic2.exe FirewallRules: [{05306047-7609-439B-8AFE-E80E216D2994}] => (Allow) D:\GTX Box Team\Gothic II Gold Edition\System\Gothic2.exe FirewallRules: [{87A17625-A6F8-4792-A713-1A58B2559C3B}] => (Allow) C:\Users\Mateusz\AppData\Local\BrowserAir\Application\BrowserAir.exe FirewallRules: [{DBD78BA1-9EA2-4F02-BEC9-919F000ED17E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{1E02329B-CB31-4344-910B-EBFA3DD02092}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{4A56D281-B98B-4243-BF07-21573B6353C4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{2BE154DB-CCD1-4270-9340-C24238C6E7CC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe ==================== Restore Points ========================= 25-01-2016 12:32:28 Windows Update 25-01-2016 12:36:29 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 25-01-2016 12:38:27 Installed DirectX 25-01-2016 14:17:23 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 25-01-2016 14:17:36 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 25-01-2016 14:17:58 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 25-01-2016 18:32:47 Installed DirectX 25-01-2016 23:37:04 Device Driver Package Install: Anchorfree HSS VPN Adapter Network adapters 26-01-2016 14:09:18 Uniblue PC Mechanic installation 26-01-2016 15:01:43 Device Driver Package Install: Disc Soft Ltd Storage controllers 26-01-2016 15:01:57 Device Driver Package Install: Disc Soft Ltd Universal Serial Bus controllers 29-01-2016 12:20:15 Removed AllPCOptimizer. ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/29/2016 09:06:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/29/2016 04:36:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/29/2016 12:20:32 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: MSI116E.tmp Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.MissingMethodException Stack: at status.Form1.get_IsConnectedToInternet() at status.Form1..ctor() at status.Program.Main() Error: (01/29/2016 12:17:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: DeskBar.exe, version: 2.8.9.113, time stamp: 0x565d69c3 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x002b3d96 Faulting process id: 0x738 Faulting application start time: 0xDeskBar.exe0 Faulting application path: DeskBar.exe1 Faulting module path: DeskBar.exe2 Report Id: DeskBar.exe3 Error: (01/29/2016 12:17:35 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: DeskBar.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.NullReferenceException Stack: at DeskBar.InstalledBrowser.SetDefaultBrowser(DeskBar.InstalledBrowser) at DeskBar.InstalledBrowser.GetInstalledBrowsers(Boolean) at DeskBar.AppConfiguration.Validate() at DeskBar.App..ctor() at DeskBar.App.Main(System.String[]) Error: (01/29/2016 11:47:30 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/28/2016 08:50:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/28/2016 08:49:42 PM) (Source: ESENT) (EventID: 215) (User: ) Description: WinMail (3764) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. Error: (01/28/2016 04:45:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: bf3.exe, version: 1.6.0.0, time stamp: 0x511c9356 Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba58 Exception code: 0xc0000005 Fault offset: 0x00038da9 Faulting process id: 0x29c Faulting application start time: 0xbf3.exe0 Faulting application path: bf3.exe1 Faulting module path: bf3.exe2 Report Id: bf3.exe3 Error: (01/28/2016 04:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (01/29/2016 09:41:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The csrcc service terminated unexpectedly. It has done this 1 time(s). Error: (01/29/2016 09:41:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The F38307CC-3D86-47E4-840F-F6D24AA66724 service terminated unexpectedly. It has done this 1 time(s). Error: (01/29/2016 12:22:22 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for DeleteFlag with the following error: %%-1 Error: (01/29/2016 12:22:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The TVTime service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. Error: (01/29/2016 12:21:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Search Module Update service terminated unexpectedly. It has done this 1 time(s). Error: (01/29/2016 12:17:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Search Module UpdateD service failed to start due to the following error: %%577 Error: (01/26/2016 03:04:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The csrcc service terminated unexpectedly. It has done this 1 time(s). Error: (01/26/2016 03:04:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The B56FB4C7-66E5-4A02-8F52-9BE99862E6A2 service terminated unexpectedly. It has done this 1 time(s). Error: (01/26/2016 02:15:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The TDataSvr service terminated unexpectedly. It has done this 1 time(s). Error: (01/25/2016 12:38:50 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} CodeIntegrity: =================================== Date: 2016-01-29 17:44:45.220 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:44:45.010 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:40:51.794 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:40:51.582 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:40:30.175 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:40:29.857 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:39:30.044 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:33:17.174 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:33:17.143 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-29 17:33:17.054 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU E6300 @ 2.80GHz Percentage of memory in use: 21% Total physical RAM: 6143.05 MB Available physical RAM: 4817 MB Total Virtual: 12284.31 MB Available Virtual: 10877.99 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:97.56 GB) (Free:67.35 GB) NTFS Drive d: () (Fixed) (Total:368.1 GB) (Free:335.71 GB) NTFS Drive f: () (CDROM) (Total:1.93 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 74ACA8D6) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=368.1 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================