Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-06-2017 Ran by Kenny (11-06-2017 00:12:24) Running from C:\Users\Kenny\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2013-09-27 10:16:52) Boot Mode: Safe Mode (minimal) ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3455111124-2029184662-1593870379-500 - Administrator - Disabled) Guest (S-1-5-21-3455111124-2029184662-1593870379-501 - Limited - Disabled) Kenny (S-1-5-21-3455111124-2029184662-1593870379-1000 - Administrator - Enabled) => C:\Users\Kenny ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: BullGuard Antivirus (Disabled - Up to date) {13E9CAA5-762A-794E-2DA9-245D5622A105} AS: BullGuard Antispyware (Disabled - Up to date) {A8882B41-5010-76C0-1719-1F2F2DA5EBB8} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: BullGuard Firewall (Disabled) {2BD24B80-3C45-7816-06F6-8D68A8F1E67E} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated) Adobe Flash Player 25 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 25.0.0.171 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS USB2.0 UVC VGA WebCam (HKLM-x32\...\{044B477C-3AF5-4DF2-A946-200C2C9E8933}) (Version: 0011.0028.2009.1215 - PixArt) Belgium e-ID middleware 4.1.18 (build 1730) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A71730}) (Version: 4.1.1730 - Belgian Government) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden BullGuard (HKLM\...\BullGuard) (Version: 16.0 - BullGuard Ltd.) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.98.18.65 - Conexant) Copy (x32 Version: 130.0.366.000 - Hewlett-Packard) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden DJ Control Instinct (HKLM-x32\...\{931FD350-D575-47FE-A741-9517C4DDDA10}) (Version: 1.00.0000 - Guillemot) DJ_AIO_06_F4500_SW_MIN (x32 Version: 130.0.406.000 - Hewlett-Packard) Hidden DJUCED (HKLM-x32\...\{1BE0813F-4110-4B1C-B96D-EB7278199DDC}) (Version: 1.0.24 - Guillemot) F4500 (x32 Version: 130.0.406.000 - Hewlett-Packard) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden Hercules DJ Products Series drivers (HKLM-x32\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 3.HDJS.2012 - Hercules) HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP) HP Deskjet F4500 Printer Driver Software 13.0 Rel .6 (HKLM\...\{7F08A772-2816-4F46-84F1-49578502AD28}) (Version: 13.0 - HP) HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP) HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP) HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard) HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden hpPrintProjects (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden hpWLPGInstaller (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden iCloud (HKLM\...\{2AAF09D5-4B3F-4975-B6A9-ECE2631FC942}) (Version: 4.0.5.20 - Apple Inc.) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2405 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.23.4 - JMicron Technology Corp.) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Malwarebytes versie 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes) MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Nederlands) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1043) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3455111124-2029184662-1593870379-1000\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft Outlook Hotmail Connector 64-bits (HKLM\...\{95140000-007A-0413-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mio Cyclo plug-in (HKLM-x32\...\{7061420D-D6D8-4C83-A5C3-5FF735CFBECE}) (Version: 1.0.27.1 - MiTAC) Mio Share (HKU\S-1-5-21-3455111124-2029184662-1593870379-1000\...\e83feedbe3788a88) (Version: 4.0.7.0 - Mio) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype Technologies S.A.) Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.) SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform) Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden Virtual COM Port Driver (HKLM-x32\...\InstallShield_{9853299F-7AD8-4560-9896-60650BD8ACBF}) (Version: 1.3.1 - STMicroelectronics) Virtual COM Port Driver (x32 Version: 1.3.1 - STMicroelectronics) Hidden WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden Windows Driver Package - Broadcom (BTHUSB) Bluetooth (02/25/2010 6.2.0.9419) (HKLM\...\85CE3A3657FAE5FD305B143E90E6FC89BA53001C) (Version: 02/25/2010 6.2.0.9419 - Broadcom) Windows Driver Package - Broadcom Bluetooth (01/19/2010 6.2.0.1417) (HKLM\...\7341A1B43E7FE58942EB1E820A17C18305DFBCE6) (Version: 01/19/2010 6.2.0.1417 - Broadcom) Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0) (HKLM\...\2AA10AB519DC7432D599A0E860206A7DDCC27764) (Version: 07/29/2009 6.1.7100.0 - Broadcom) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1) (Version: 07/30/2009 6.2.0.9405 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows Driver Package - Fedict SmartCard (08/08/2015 4.1.5) (HKLM\...\9F46F7AB1E3B1B5F5482EA8D97F401B04FBF7958) (Version: 08/08/2015 4.1.5 - Fedict) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3455111124-2029184662-1593870379-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Kenny\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64\FileCoAuthLib64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3455111124-2029184662-1593870379-1000_Classes\CLSID\{41052F6E-3662-4584-BCD3-77BCCAAE8470}\InprocServer32 -> C:\Users\Kenny\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-3455111124-2029184662-1593870379-1000_Classes\CLSID\{60813F68-E9F7-4B3C-80B4-A76A66211660}\localserver32 -> C:\Users\Kenny\AppData\Local\SkypePlugin\7.32.6.278\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-3455111124-2029184662-1593870379-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Kenny\AppData\Local\SkypePlugin\7.32.6.278\EdgeCalling.exe (Skype Technologies S.A.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {2E120264-89E7-4DC8-BFDF-732395157C71} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-17] (Adobe Systems Incorporated) Task: {340A1295-8B62-4540-BFDF-CDCF67E9F79B} - System32\Tasks\{75AEE328-9831-4995-B37B-68733928F7E1} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.73.106.456/nl/abandoninstall?page=tsWLM Task: {34C56E77-C782-4ECB-AA51-69A1314DA07B} - System32\Tasks\BullGuard\BullGuardUpdate2 => c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2017-05-24] (BullGuard Ltd.) Task: {5E1A23A2-2724-4941-8807-31FDDBFDB34D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated) Task: {6195EF80-FD2E-41A2-9308-777106D8C3FF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {6AB291EF-1AE0-4C11-B9FD-BDB3C2F42F8F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {A97A7182-C6E9-4C19-9C52-FE018EE593B8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {AB3689CA-D459-4035-984B-671B930C639C} - System32\Tasks\{1B116133-DD2D-4AE3-98BC-55BC4CD699DB} => pcalua.exe -a "C:\Users\Kenny\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X0TG01MD\setup_1.0.27.1.exe" -d C:\Users\Kenny\Desktop Task: {B751B991-8B4B-4019-9D99-BE294EC66E72} - System32\Tasks\{519AF353-EA37-48D1-9BB7-6D9BEB41F638} => pcalua.exe -a C:\Users\Kenny\Downloads\setup.exe -d C:\Users\Kenny\Downloads Task: {B9A2716A-45D2-4123-9BE8-DC473CDFF426} - System32\Tasks\{D2F5969D-25F5-4836-87FE-25B210710A26} => pcalua.exe -a "C:\Users\Kenny\Downloads\setup (1).exe" -d C:\Users\Kenny\Downloads Task: {C3DAFEFD-A277-43E6-9947-5CAF10A6CDCB} - System32\Tasks\{BE936B1F-478D-49A2-802C-22F9D1A50BA1} => pcalua.exe -a C:\Users\Kenny\Downloads\setup_1.0.27.1.exe -d C:\Users\Kenny\Desktop Task: {DF17FDE6-7319-4EFA-BD10-BC5CDC1751B3} - System32\Tasks\{F60E8D09-98BE-4D37-B395-7BB5F07E9888} => pcalua.exe -a "C:\Users\Kenny\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L2XG083Z\setup.exe" -d C:\Users\Kenny\Desktop (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2017-05-24 15:25 - 2017-05-24 15:23 - 00727320 _____ () c:\program files\bullguard ltd\bullguard\SQLite.dll 2017-05-24 15:25 - 2017-05-24 15:23 - 00084248 _____ () c:\program files\bullguard ltd\bullguard\zlib1.dll 2017-05-24 15:25 - 2017-05-24 15:23 - 00644888 _____ () c:\program files\bullguard ltd\bullguard\LibXml2.dll 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1" e" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsMain => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsUpdate => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3455111124-2029184662-1593870379-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Kenny\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp DNS Servers: Media is not connected to internet. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) ==================== MSCONFIG/TASK MANAGER disabled items == ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{4133159E-990B-468E-BCAC-22E7B5E16B93}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [UDP Query User{4A22C134-F213-4BF1-82CA-5120D71AF3EC}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [{6A21DE08-92C3-489A-86BC-72836ECAF31C}] => (Allow) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe FirewallRules: [{EDB7A3F2-66C1-43A7-9527-AA4C58D9DF6C}] => (Allow) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe FirewallRules: [{0ED16050-A54C-4CE1-8CAD-01216E668609}] => (Allow) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe FirewallRules: [{C2C850BB-72FA-41C9-BF28-DBB90B82AD3B}] => (Allow) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe FirewallRules: [{7D357E73-381A-447C-835B-EE0074E7A18B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{9ADDD399-2C09-4BED-A62C-A544168C7C67}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{681FDC18-9543-48D1-B967-CAF0906EC156}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{25DE0CC1-02C8-439B-A06D-B03EDB2B7038}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B2935FC7-5CBA-43D5-9F2D-9AD30380DB4F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{21CBB615-193E-40EB-880D-42EB60D2C09B}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{8D64DFD4-7C5F-4BEF-8742-AB91D4C7334A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{9EC4D0D5-7109-4176-9E8E-65E915B2E57E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{7DEEAF0C-EBF2-4686-BA71-BD28AB817F62}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{A000A0DB-D0D0-48FC-8507-0390B6F3EEB9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{9FDDBDB0-5056-4AD9-A9F7-84BB61064601}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{35197A5F-2886-48EF-8323-D5332DF8FEA6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{C6E50324-9745-4F84-A47A-300B11427E9A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{45D22691-B548-4CE8-8503-3EBB697ACD05}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{8B8F53D2-256D-4B31-93FD-70FCC5337181}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe FirewallRules: [{1877EB15-3C69-4E81-BE84-1ADC809B370A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{ACA2B8E7-A4BA-4818-AA47-1CA7DD8A1EC4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{A6135D1E-FB21-468A-B690-DA95A3FB893B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{E9AA1811-05F0-4CB5-9F54-775CEB1357EC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{6F59442D-FB93-46ED-9E9C-C4AC1DD2D6E1}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [{05E29DE9-FCF9-44FC-9F4A-2011D3C3AD63}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe FirewallRules: [{C6D35FBD-25A0-4912-B989-B09C5F4690A3}] => (Allow) C:\Users\Kenny\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{7BB2B58B-910E-4115-83A5-1684DEF350CC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{8463918E-4C54-4327-9B52-4052DD65D0F2}] => (Allow) LPort=2869 FirewallRules: [{10E524E7-0114-4F7E-84A0-E5D4345CBA02}] => (Allow) LPort=1900 FirewallRules: [{570DD400-E11E-4FEF-AEE1-472E5782DD59}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{F438D877-B3C8-434F-9E4F-5F29D8B0849F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/10/2017 11:46:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: ) Description: De service Cryptografische services kan het object van VSS-back-up 'System Writer' niet initialiseren. Details: Could not query the status of the EventSystem service. System Error: A system shutdown is in progress. . Error: (06/10/2017 11:31:09 PM) (Source: System Restore) (EventID: 8193) (User: ) Description: Er kan geen herstelpunt worden gemaakt (proces = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; beschrijving = Configured Microsoft Office Professional Plus 2010; fout = 0x8007043c). Error: (06/10/2017 11:31:04 PM) (Source: System Restore) (EventID: 8193) (User: ) Description: Er kan geen herstelpunt worden gemaakt (proces = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; beschrijving = Configured Microsoft Office Professional Plus 2010; fout = 0x8007043c). Error: (06/10/2017 10:38:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: ) Description: De service Cryptografische services kan het object van VSS-back-up 'System Writer' niet initialiseren. Details: Could not query the status of the EventSystem service. System Error: A system shutdown is in progress. . Error: (06/10/2017 05:48:34 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: ) Description: De service Cryptografische services kan het object van VSS-back-up 'System Writer' niet initialiseren. Details: Could not query the status of the EventSystem service. System Error: A system shutdown is in progress. . Error: (06/10/2017 05:47:39 PM) (Source: System Restore) (EventID: 8193) (User: ) Description: Er kan geen herstelpunt worden gemaakt (proces = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; beschrijving = Configured Microsoft Office Professional Plus 2010; fout = 0x8007043c). Error: (05/26/2017 09:11:25 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: ) Description: De service Cryptografische services kan het object van VSS-back-up 'System Writer' niet initialiseren. Details: Could not query the status of the EventSystem service. System Error: A system shutdown is in progress. . Error: (05/25/2017 09:04:05 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 9672 Error: (05/25/2017 09:04:05 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 9672 Error: (05/25/2017 09:04:05 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second System errors: ============= Error: (06/11/2017 12:09:11 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: DCOM kreeg foutmelding '1084' bij het starten van de wuauserv-service met de argumenten '' om de server {E60687F7-01A1-40AA-86AC-DB1CBF673334} te starten Error: (06/11/2017 12:08:58 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: DCOM kreeg foutmelding '1068' bij het starten van de fdPHost-service met de argumenten '' om de server {D3DCB472-7261-43CE-924B-0704BD730D5F} te starten Error: (06/11/2017 12:08:57 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: DCOM kreeg foutmelding '1068' bij het starten van de fdPHost-service met de argumenten '' om de server {145B4335-FE2A-4927-A040-7C35AD3180EF} te starten Error: (06/11/2017 12:08:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. Error: (06/11/2017 12:08:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Network List Service-service is afhankelijk van de Network Location Awareness-service, die vanwege de volgende fout niet kan worden gestart: Afhankelijkheidsservice of -groep kan niet worden gestart. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz Percentage of memory in use: 23% Total physical RAM: 3884.56 MB Available physical RAM: 2975.58 MB Total Virtual: 7767.3 MB Available Virtual: 6905.65 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:102.78 GB) (Free:2.94 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (DATA) (Fixed) (Total:195.31 GB) (Free:175.44 GB) NTFS Drive f: (STICKJE_PC2) (Removable) (Total:57.6 GB) (Free:57 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 8D6C833F) Partition 1: (Active) - (Size=102.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 57.6 GB) (Disk ID: D5FA7676) Partition 1: (Not Active) - (Size=57.6 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================