Browser shop

Bookjunky · November 23, 2014

I am getting pop ups galore from Browser shop and Right Coupon neither of which are installed on my computer, show in the add/remove programs or any type of search. Malwarebytes does not see them. Is there any possible way to get rid of that garbage?

Maniac · November 23, 2014

Hello Bookjunky! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Please follow the instructions here and then post your log files in a new reply in this thread:

https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/

Bookjunky · November 25, 2014

I am a paying customer with 6 months left of my subscription. Customer support can take quiet a while to get a response from and I have found in the past this forum is much more helpful.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2014 01

Ran by Pat at 2014-11-25 17:25:23

Running from C:\Users\Pat\Downloads\Installers

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ActiveState ActivePython 2.7.6.9 (32-bit) (HKLM-x32\...\{B6FB74C1-B37C-44BC-A1C7-38B8DB3FC996}) (Version: 2.7.9 - ActiveState Software Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)

Amazon Cloud Drive (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\23ab716f18849b6f) (Version: 2.4.2013.3290 - Amazon)

Amazon Cloud Player (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\Amazon Amazon Cloud Player) (Version: 2.4.0.26 - Amazon Services LLC)

Amazon Send to Kindle (HKLM-x32\...\SendToKindle) (Version: 1.0.1.239 - Amazon)

AMD Catalyst Install Manager (HKLM\...\{A731A859-7426-DEB6-80A3-E6A2508DC85A}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)

AmrAddonInstall (Version: 1.2.8.0 - Microsoft) Hidden

Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Ask Mr. Robot (HKLM-x32\...\{86e39a0a-85dd-4d6f-b1cd-46d8208bd2e9}) (Version: 1.3.17.0 - Ask Mr. Robot)

Ask Mr. Robot (Version: 1.3.17.0 - Ask Mr. Robot) Hidden

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1929380210.4759644.48.2147344384 - Audible, Inc.)

Bandizip (HKLM\...\Bandizip) (Version: 5.03 - Bandisoft.com)

Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)

Bitdefender Antivirus Plus (HKLM\...\Bitdefender) (Version: 17.28.0.1191 - Bitdefender)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

calibre 64bit (HKLM\...\{53078727-80C2-4F4F-9E36-093133F73F3B}) (Version: 1.36.0 - Kovid Goyal)

CometBird 11.0 (x86 en-US) (HKLM-x32\...\CometBird 11.0 (x86 en-US)) (Version: 11.0 - CometNetwork)

Curse Client (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dashlane (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\Dashlane) (Version: 3.0.7.74002 - Dashlane SAS)

Dropbox (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)

Easy Computer Sync (HKLM-x32\...\Easy Computer Sync) (Version: 2.0 - Bravura Software LLC)

eReader (HKLM-x32\...\{ED8BB1CA-535A-408D-85C9-ED1986D2B85E}) (Version: - )

Evernote v. 5.4.1 (HKLM-x32\...\{A5F7DF42-F67D-11E3-B7EB-00163E98E7D6}) (Version: 5.4.1.3962 - Evernote Corp.)

EverQuest (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\soe-EverQuest) (Version: 1.0.3.183 - Sony Online Entertainment)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)

Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

iCloud (HKLM\...\{2AAF09D5-4B3F-4975-B6A9-ECE2631FC942}) (Version: 4.0.5.20 - Apple Inc.)

iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)

Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)

Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)

Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)

Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation)

Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)

Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4667.1002 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\OneDriveSetup.exe) (Version: 17.0.4041.0512 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)

Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

ModifyRegistry version 0.1 (HKLM-x32\...\{1D5BE6B5-7FD4-4A78-90F2-AF6B53BC8C1C}_is1) (Version: 0.1 - VIA Technologies, Inc.)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 33.1.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 en-US)) (Version: 33.1.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MTP Porting Kit (HKLM-x32\...\{353B1E6D-7073-4450-8C80-699BD8FCFB49}) (Version: 12.0.0 - Microsoft Corp)

Nero MediaHome Free (HKLM-x32\...\{6CC8CA12-AD2B-4C07-B2C4-B32CDBF5F29D}) (Version: 15.0.01800 - Nero AG)

NVIDIA 3D Vision Controller Driver 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.60 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)

NVIDIA Graphics Driver 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.60 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)

NVIDIA Miracast Virtual Audio 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 344.60 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4667.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden

OpenAL (HKLM-x32\...\OpenAL) (Version: - )

OverDrive Media Console (HKLM-x32\...\{7326DA0C-C09B-491C-81FF-6DA12B2256BB}) (Version: 3.3.0 - OverDrive, Inc.)

Pandora (HKLM-x32\...\com.pandora.desktop.E7C14276FFE9EEF0BC7DCE654C467D9A299EFD21.1) (Version: 2.0.8 - PANDORA MEDIA, INC.)

Pandora (x32 Version: 2.0.8 - PANDORA MEDIA, INC.) Hidden

Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden

Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6767 - Realtek Semiconductor Corp.)

REDRAGON GAMING MOUSE version 1.1 (HKLM-x32\...\{6513799F-D2B9-4BEA-A76E-52249156A2B5}_is1) (Version: 1.1 - redragonzone)

Sawbuck (HKLM-x32\...\{459BFE07-FCF3-4274-AC8B-8E8DDA7214BA}) (Version: 0.6.8.0 - Google Inc)

SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden

SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)

VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

WD Quick View (HKLM-x32\...\{63911503-7EA4-4685-B2FD-D391EF622FB9}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)

WD SmartWare (HKLM\...\{34C6812E-E231-4B13-9DAC-21E06ECA864A}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)

WD SmartWare Installer (HKLM-x32\...\{1ec9e03a-452b-48fb-8e1b-27ee0477985f}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)

Windows 8 Portable Device Enabling Kit for MTP - Tools, Version 8 (HKLM-x32\...\{F04FB07B-0C96-48F8-95BB-FF8CAD522D2F}) (Version: 1 - Microsoft Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinZip (HKLM-x32\...\WinZip) (Version: 10.0 (6667) - WinZip Computing LP)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pat\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Users\Pat\AppData\Local\Bandizip\bdzshl64.dll (Bandisoft.com)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{ddef1ef4-9e08-4b76-9267-1b800cddf116}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Pat\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pat\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pat\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pat\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3951261367-891674079-5071855-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pat\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

==================== Restore Points =========================

07-11-2014 08:30:19 Installed Sawbuck

12-11-2014 10:25:48 Windows Update

14-11-2014 13:30:29 Installed DirectX

19-11-2014 22:07:46 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 08:25 - 2014-04-18 01:01 - 00000867 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 d3oxij66pru1i3.cloudfront.net

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1FB941D5-8B93-4909-B45A-288FE1E66AA0} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3951261367-891674079-5071855-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe

Task: {24416CEE-170F-4AD8-B01E-0D3FE696811E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-11] (Google Inc.)

Task: {3636007D-429D-48E0-8307-02C59202DA47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {7321B034-C7E1-470E-A6C9-36D20CF7D8DA} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-10-07] (Microsoft Corporation)

Task: {7C98B129-8DAC-49AF-BAE9-D8181993C69F} - System32\Tasks\Microsoft Office 15 Sync Maintenance for BOOKJUNKYSDREAM-Pat BookjunkysDream => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-09-23] (Microsoft Corporation)

Task: {9459F4CF-AC3F-4012-976E-F5D4BEB6602D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-11] (Google Inc.)

Task: {9DF71F17-F3A5-4411-9682-3E154A0F7457} - System32\Tasks\Bitdefender Autoscan => C:\Program Files\Bitdefender\Bitdefender\mtasklaunch.exe [2014-08-13] (Bitdefender)

Task: {A2566615-0D9D-46B9-B6B0-753F4D6E7EFF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-14] (Microsoft Corporation)

Task: {FB688180-3908-4255-9837-732F4363A14C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-10-13 09:45 - 2014-10-13 09:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll

2014-08-13 03:45 - 2014-08-13 03:45 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\accessl.ui

2014-06-24 13:33 - 2014-08-13 03:44 - 00004608 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\IMSecurityAL.ui

2014-07-24 04:13 - 2014-07-24 04:13 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00047_003\ashttpbr.mdl

2014-07-24 04:13 - 2014-07-24 04:13 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00047_003\ashttpdsp.mdl

2014-07-24 04:13 - 2014-07-24 04:13 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00047_003\ashttpph.mdl

2014-07-24 04:13 - 2014-07-24 04:13 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00047_003\ashttprbl.mdl

2014-02-26 20:47 - 2014-10-29 21:10 - 00117064 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2012-08-06 11:24 - 2012-08-06 11:24 - 00212480 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll

2012-03-05 15:03 - 2012-03-05 15:03 - 00677376 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

2012-02-16 13:53 - 2012-02-16 13:53 - 03642880 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll

2014-04-11 15:50 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-11-16 00:28 - 2014-09-23 08:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-02-03 17:55 - 2014-02-03 17:55 - 00792576 _____ () C:\Program Files\AskMrRobot\AmrTray.exe

2014-06-04 11:56 - 2014-11-14 19:15 - 00219832 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\Dashlane.exe

2014-05-13 20:56 - 2013-11-18 16:54 - 03234304 _____ () C:\Program Files (x86)\REDRAGON GAMING MOUSE\PDMon.exe

2014-06-04 11:56 - 2014-11-14 19:15 - 00225464 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\DashlanePlugin.exe

2014-10-30 10:14 - 2014-10-30 10:14 - 00027136 _____ () C:\Program Files\WindowsApps\134D4F5B.Box_2.1.0.13_neutral__2qk4zy5s3qmee\Box.Agent.WinRT.winmd

2014-10-19 07:35 - 2014-10-19 07:35 - 01782784 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\3f4dc590466037f015f65bc07d1ea923\Windows.ApplicationModel.ni.dll

2014-05-07 12:12 - 2014-05-07 12:14 - 00035328 _____ () C:\Program Files\WindowsApps\134D4F5B.Box_2.1.0.13_neutral__2qk4zy5s3qmee\nVentive.Umbrella.Services.Contract.WinRT.DLL

2014-10-20 03:26 - 2014-10-20 03:26 - 00207872 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.System\a4efa88b742703220e527956d8ab4e84\Windows.System.ni.dll

2014-05-07 12:12 - 2014-05-07 12:14 - 00104448 _____ () C:\Program Files\WindowsApps\134D4F5B.Box_2.1.0.13_neutral__2qk4zy5s3qmee\nVentive.Umbrella.Web.WinRT.DLL

2014-10-20 03:26 - 2014-10-20 03:26 - 01278464 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Storage\f9ac074d298db459c5eff6d3256861c8\Windows.Storage.ni.dll

2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 00292024 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWDebugDll_win32.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 00410296 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWDebug.3.0.7.74002.dll

2014-11-14 19:14 - 2014-11-14 19:14 - 00426168 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWUtils.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 30337720 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWExternLib.3.0.7.74002.dll

2014-11-14 19:14 - 2014-11-14 19:14 - 00266936 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLib_win.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 05763256 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWData.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 06092472 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWApplication.3.0.7.74002.dll

2014-08-13 03:45 - 2014-10-13 09:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll

2014-11-24 21:41 - 2014-11-24 21:41 - 00043008 _____ () c:\users\pat\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpi29idh.dll

2013-08-23 14:01 - 2013-08-23 14:01 - 25100288 _____ () C:\Users\Pat\AppData\Roaming\Dropbox\bin\libcef.dll

2014-11-24 21:41 - 2014-11-24 21:41 - 00098816 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32api.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00110080 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\pywintypes27.dll

2014-11-24 21:41 - 2014-11-24 21:41 - 00364544 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\pythoncom27.dll

2014-11-24 21:41 - 2014-11-24 21:41 - 00045568 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_socket.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 01160704 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_ssl.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00320512 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32com.shell.shell.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00713216 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_hashlib.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 01175040 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._core_.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00805888 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._gdi_.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00811008 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._windows_.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 01062400 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._controls_.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00735232 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._misc_.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00128512 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_elementtree.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00127488 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\pyexpat.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00557056 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\pysqlite2._sqlite.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00087552 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_ctypes.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00119808 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32file.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00108544 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32security.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00007168 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\hashobjs_ext.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00167936 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32gui.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00018432 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32event.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00038912 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32inet.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00011264 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32crypt.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00070656 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._html2.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00027136 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\_multiprocessing.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00035840 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32process.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00686080 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\unicodedata.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00122368 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._wizard.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00024064 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32pipe.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00025600 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32pdh.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00525640 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\windows._lib_cacheinvalidation.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00010240 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\select.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00017408 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32profile.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00022528 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\win32ts.pyd

2014-11-24 21:41 - 2014-11-24 21:41 - 00078336 _____ () C:\Users\Pat\AppData\Local\Temp\_MEI54443\wx._animate.pyd

2014-05-13 20:56 - 2011-01-26 23:53 - 00028160 _____ () C:\Program Files (x86)\REDRAGON GAMING MOUSE\uiHook.dll

2014-06-17 17:10 - 2014-06-17 17:10 - 00436576 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll

2014-06-17 17:10 - 2014-06-17 17:10 - 00318304 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll

2014-04-14 06:47 - 2014-11-24 21:42 - 00046080 _____ () C:\Users\Pat\AppData\Local\Apps\2.0\8MA1RZ94.J9C\93NMYMD8.N6N\amaz..tion_f2fa081ea2183235_0002.0004_9f25fd1982bf3008\NativeOperations.dll

2014-04-14 06:47 - 2014-04-14 06:47 - 00541696 _____ () C:\Users\Pat\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll

2014-11-16 00:28 - 2014-11-16 00:28 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 00718152 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libglesv2.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libegl.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 12174008 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLib.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 02047672 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLibData.3.0.7.74002.dll

2014-11-14 19:13 - 2014-11-14 19:13 - 00183992 _____ () C:\Users\Pat\AppData\Roaming\Dashlane\3.0.7.74002\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\Kwift_DP.3.0.7.74002.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libcef.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libGLESv2.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00907264 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\platforms\qwindows.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libEGL.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qgif.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qico.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qjpeg.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qmng.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qsvg.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qtiff.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQuick.2\qtquick2plugin.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQuick\Layouts\qquicklayoutsplugin.dll

2014-11-18 14:15 - 2014-11-18 14:15 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQml\Models.2\modelsplugin.dll

2014-08-20 15:17 - 2014-08-06 22:20 - 14669128 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Pat\SkyDrive:ms-properties

AlternateDataStreams: C:\Users\Pat\Downloads\8D33.tmp:BDU

AlternateDataStreams: C:\Users\Pat\Downloads\ChromeSetup.exe:BDU

AlternateDataStreams: C:\Users\Pat\Downloads\mbam_premium.exe:BDU

AlternateDataStreams: C:\Users\Pat\Downloads\SpyHunter-Installer.exe:BDU

AlternateDataStreams: C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_0news-1751121550

AlternateDataStreams: C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_1messages-431041656

AlternateDataStreams: C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_2events-250898981

AlternateDataStreams: C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_3friends-215113587

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "WinZip Quick Pick.lnk"

HKLM\...\StartupApproved\Run32: => "WD Quick View"

HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\StartupApproved\StartupFolder: => "Send to OneNote.lnk"

HKU\S-1-5-21-3951261367-891674079-5071855-1001\...\StartupApproved\Run: => "Amazon Cloud Player"

========================= Accounts: ==========================

Administrator (S-1-5-21-3951261367-891674079-5071855-500 - Administrator - Disabled)

Guest (S-1-5-21-3951261367-891674079-5071855-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3951261367-891674079-5071855-1003 - Limited - Enabled)

Pat (S-1-5-21-3951261367-891674079-5071855-1001 - Administrator - Enabled) => C:\Users\Pat

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/25/2014 04:04:29 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 27e0

Start Time: 01d0088e1b089fb8

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 0ecad54e-7482-11e4-82f1-74d4359309c7

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (11/25/2014 03:56:51 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 2580

Start Time: 01d0088cedae228e

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: fdab01dd-7480-11e4-82f1-74d4359309c7

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (11/25/2014 03:50:37 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: f04

Start Time: 01d0088c21ac51cd

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 156228ee-7480-11e4-82f1-74d4359309c7

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (11/24/2014 10:54:14 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/24/2014 10:54:12 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description:

Error: (11/24/2014 10:54:12 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: MSDTCC:\Windows\system32\msdtcuiu.DLL8

Error: (11/24/2014 10:54:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: LsaC:\Windows\System32\Secur32.dll8

Error: (11/24/2014 10:54:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: ESENTC:\Windows\system32\esentprf.dll8

Error: (11/24/2014 09:37:16 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4

Error: (11/24/2014 09:37:15 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4

System errors:

=============

Error: (11/24/2014 09:36:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The Bitdefender Virus Shield service hung on starting.

Error: (11/24/2014 09:35:48 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \SystemRoot\SysWow64\Drivers\UdfReadr.SYS

Error: (11/24/2014 09:35:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The AMD FUEL Service service terminated unexpectedly. It has done this 1 time(s).

Error: (11/23/2014 07:38:59 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The Bitdefender Virus Shield service hung on starting.

Error: (11/23/2014 07:37:56 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \SystemRoot\SysWow64\Drivers\UdfReadr.SYS

Error: (11/23/2014 07:39:04 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 7:36:38 PM on ‎11/‎23/‎2014 was unexpected.

Error: (11/23/2014 05:02:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Description with the following error:

%%5

Error: (11/23/2014 05:02:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Start with the following error:

%%5

Error: (11/23/2014 05:02:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Description with the following error:

%%5

Error: (11/23/2014 05:02:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Start with the following error:

%%5

Microsoft Office Sessions:

=========================

Error: (11/25/2014 04:04:29 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: LiveComm.exe17.5.9600.2068927e001d0088e1b089fb84294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe0ecad54e-7482-11e4-82f1-74d4359309c7microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (11/25/2014 03:56:51 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: LiveComm.exe17.5.9600.20689258001d0088cedae228e4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exefdab01dd-7480-11e4-82f1-74d4359309c7microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (11/25/2014 03:50:37 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: LiveComm.exe17.5.9600.20689f0401d0088c21ac51cd4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe156228ee-7480-11e4-82f1-74d4359309c7microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (11/24/2014 10:54:14 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/24/2014 10:54:12 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description:

Error: (11/24/2014 10:54:12 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: MSDTCC:\Windows\system32\msdtcuiu.DLL8

Error: (11/24/2014 10:54:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: LsaC:\Windows\System32\Secur32.dll8

Error: (11/24/2014 10:54:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: ESENTC:\Windows\system32\esentprf.dll8

Error: (11/24/2014 09:37:16 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4

Error: (11/24/2014 09:37:15 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4

CodeIntegrity Errors:

===================================

Date: 2014-06-24 11:27:38.555