BSoD Error, potentially caused by MWB..?

Storm · February 5, 2015

Not really sure what's up with this. My PC got the same BSoD while playing a game around 4 times today. I have an SSD, so was able to reboot and hop right back into said game. After I close the game, I begin to browse a few websites. I get the BSoD again. Come back from dinner, it happens again. I hopped onto google, hoping to find a solution to said error, and the error that I found was supposedly caused by MWB..? I booted into Safemode, uninstalled mwb, and I seem to be running fine now and have been for the past hour or so? I'm an avid mwb user, and definitely don't want to uninstall it permanently. Are there any solutions fix this?

Picture of the error: (Soon to be uploaded shortly, phone weirded out on me)

PC Specs and Operating System:

Thanks in advance for any help I can get on this. Please let me know if I need to post the dump logs.

BAD_POOL_HEADER

Technical Information:

*** STOP: 0x00000019 (0x0000000000000020,0xFFFFFA8009A68100,0xFFFFFA8009A68120,0x0000000004020010)

Edited February 5, 2015 by AdvancedSetup
placed image inline

AdvancedSetup · February 5, 2015

Hello and :welcome:

Please read the following and post back the 3 requested logs.

Diagnostic Logs

Thank you

Storm · February 5, 2015

Hey, here are my logs.

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01

Ran by J (administrator) on LONGSPEAK on 04-02-2015 21:33:25

Running from C:\Users\J\Downloads

Loaded Profiles: J (Available profiles: J)

Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 8 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\DAODx.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Spotify Ltd) C:\Users\J\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe

(ShareX Developers) C:\Program Files\ShareX\ShareX.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6827664 2012-08-07] (Realtek Semiconductor)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-15] (NVIDIA Corporation)

HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\...\Run: [MultiWall] => "C:\Program Files (x86)\MultiWall\MultiWall.exe" -hide

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1942720 2015-01-23] (Valve Corporation)

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\...\Run: [spotify Web Helper] => C:\Users\J\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-28] (Spotify Ltd)

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\...\Run: [GoogleChromeAutoLaunch_EC7D443C1E63C91CE213351B75D9A2A3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-01-26] (Google Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk

ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe ()

Startup: C:\Users\J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk

ShortcutTarget: ShareX.lnk -> C:\Program Files\ShareX\ShareX.exe (ShareX Developers)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

FireFox:

========

FF ProfilePath: C:\Users\J\AppData\Roaming\Mozilla\Firefox\Profiles\qgxufpbr.default

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Extension: Tamper Data - C:\Users\J\AppData\Roaming\Mozilla\Firefox\Profiles\qgxufpbr.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi [2015-02-02]

Chrome:

=======

CHR Profile: C:\Users\J\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-28]

CHR Extension: (Google Docs) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-28]

CHR Extension: (Google Drive) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-28]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-28]

CHR Extension: (YouTube) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-28]

CHR Extension: (Adblock Plus) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-28]

CHR Extension: (Steam inventory helper) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-01-15]

CHR Extension: (Google Search) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-28]

CHR Extension: (AdBlock) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-28]

CHR Extension: (Reddit Enhancement Suite) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-12-28]

CHR Extension: (Geometry Theme) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhcfkokkfkkdhmnfeoeidaoleemdgmap [2014-12-28]

CHR Extension: (Google Wallet) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-28]

CHR Extension: (Gmail) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-28]

CHR Extension: (Reddit Trading Flair Linker Enhanced) - C:\Users\J\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnahghpneiabcncanmccahgloopbbbgp [2014-12-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [123096 2015-01-16] (altPUG LLC)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-15] (NVIDIA Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-15] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-15] (NVIDIA Corporation)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)

S3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-04] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-15] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [25088 2015-02-02] (SteelSeries ApS)

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 21:33 - 2015-02-04 21:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-04 21:33 - 2015-02-04 21:33 - 00011592 _____ () C:\Users\J\Downloads\FRST.txt

2015-02-04 21:33 - 2015-02-04 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-04 21:33 - 2015-02-04 21:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-02-04 21:33 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-04 21:33 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-04 21:33 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-02-04 21:31 - 2015-02-04 21:31 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\J\Downloads\mbam-setup-2.0.4.1028.exe

2015-02-04 21:29 - 2015-02-04 21:33 - 00000000 ____D () C:\FRST

2015-02-04 21:28 - 2015-02-04 21:28 - 02131968 _____ (Farbar) C:\Users\J\Downloads\FRST64.exe

2015-02-04 21:28 - 2015-02-04 21:28 - 01682416 _____ (Malwarebytes Corporation) C:\Users\J\Desktop\mbam-check-2.1.1.1001.exe

2015-02-04 19:58 - 2015-02-04 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

2015-02-04 19:58 - 2015-02-04 19:58 - 00000000 ____D () C:\Program Files\Speccy

2015-02-03 18:27 - 2015-02-03 18:28 - 01333493 _____ () C:\Users\J\Documents\wat.wmv

2015-02-03 15:43 - 2015-02-03 15:43 - 00081075 _____ () C:\Users\J\Desktop\cfg.zip

2015-02-02 14:39 - 2015-02-02 14:39 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-02-02 14:39 - 2015-02-02 14:39 - 00000000 ____D () C:\Users\J\AppData\Roaming\Mozilla

2015-02-02 14:39 - 2015-02-02 14:39 - 00000000 ____D () C:\Users\J\AppData\Local\Mozilla

2015-02-02 14:39 - 2015-02-02 14:39 - 00000000 ____D () C:\ProgramData\Mozilla

2015-02-02 14:39 - 2015-02-02 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-02-02 14:39 - 2015-02-02 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-02-02 13:11 - 2015-02-02 13:11 - 00000054 _____ () C:\Users\J\Desktop\cs.txt

2015-02-02 08:12 - 2015-02-02 08:12 - 00025088 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\ssdevfactory.sys

2015-02-01 15:34 - 2015-02-01 16:03 - 336007419 _____ () C:\Users\J\Documents\funny mm.wmv

2015-02-01 15:12 - 2015-02-01 15:29 - 225023119 _____ () C:\Users\J\Documents\case opening.wmv

2015-02-01 15:07 - 2015-02-01 15:12 - 45965823 _____ () C:\Users\J\Documents\tradeup.wmv

2015-02-01 15:04 - 2015-02-01 15:04 - 00014392 _____ () C:\Users\J\Documents\tradeup.veg

2015-01-31 18:58 - 2015-02-03 16:18 - 00001055 _____ () C:\Users\J\Desktop\store.txt

2015-01-29 16:39 - 2015-02-01 15:05 - 00012192 _____ () C:\Users\J\Documents\case opening.veg

2015-01-29 16:39 - 2015-01-29 16:39 - 00011544 _____ () C:\Users\J\Documents\case opening.veg.bak

2015-01-27 17:42 - 2015-01-27 17:48 - 85885979 _____ () C:\Users\J\Documents\00000001.restored.wmv

2015-01-27 17:25 - 2015-01-27 17:29 - 83821979 _____ () C:\Users\J\Documents\swag.wmv

2015-01-25 18:03 - 2015-01-25 18:03 - 00000000 ____D () C:\Windows\pss

2015-01-25 16:52 - 2015-01-25 16:52 - 00007601 _____ () C:\Users\J\AppData\Local\Resmon.ResmonCfg

2015-01-20 15:18 - 2014-05-14 09:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-01-20 15:18 - 2014-05-14 09:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-01-20 15:18 - 2014-05-14 09:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-01-20 15:18 - 2014-05-14 09:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-01-20 15:18 - 2014-05-14 09:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-01-20 15:18 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-01-20 15:18 - 2014-05-14 09:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-01-20 15:18 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-01-18 22:09 - 2015-01-18 17:45 - 26775758 _____ () C:\Users\J\Desktop\ponchonacho_d2_63000_nova ace.dem

2015-01-18 15:23 - 2015-01-18 15:23 - 00000000 ____D () C:\Users\J\AppData\Roaming\Sony Creative Software Inc

2015-01-16 22:41 - 2015-01-16 22:41 - 00000000 ____D () C:\ProgramData\Celavimus

2015-01-16 22:40 - 2015-01-16 22:40 - 00001197 _____ () C:\Users\Public\Desktop\CEVO Client (CSGO).lnk

2015-01-16 22:40 - 2015-01-16 22:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client

2015-01-16 22:40 - 2015-01-16 22:40 - 00000000 ____D () C:\Program Files (x86)\CEVO

2015-01-13 16:15 - 2015-01-13 16:15 - 603489897 _____ () C:\Windows\MEMORY.DMP

2015-01-13 16:13 - 2015-01-13 16:13 - 00000000 ____H () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf

2015-01-13 16:13 - 2015-01-13 16:13 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ssdevfactory_01011.Wdf

2015-01-13 16:13 - 2015-01-13 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries

2015-01-13 16:13 - 2012-07-25 21:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2015-01-13 16:13 - 2012-07-25 21:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2015-01-13 16:13 - 2012-07-25 19:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2015-01-13 16:13 - 2012-06-02 07:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2015-01-13 16:12 - 2015-01-13 16:12 - 00000000 ____D () C:\Users\ADMINI~1

2015-01-12 18:44 - 2015-01-12 18:57 - 181054681 _____ () C:\Users\J\Desktop\mm.wmv

2015-01-11 21:41 - 2015-01-11 21:41 - 00000000 ____D () C:\Users\J\AppData\Roaming\InstallShield

2015-01-11 21:41 - 2015-01-11 21:41 - 00000000 ____D () C:\ProgramData\InstallShield

2015-01-11 21:41 - 2015-01-11 21:41 - 00000000 ____D () C:\ProgramData\Brother

2015-01-11 21:37 - 2015-01-13 16:12 - 00029486 _____ () C:\Windows\DPINST.LOG

2015-01-11 17:08 - 2015-01-11 17:08 - 00006028 _____ () C:\Windows\system32\--traceoff

2015-01-11 17:08 - 2015-01-11 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-01-11 17:08 - 2015-01-11 17:08 - 00000000 _____ () C:\Windows\system32\--debugoff

2015-01-11 17:07 - 2015-01-11 17:07 - 00000000 ____D () C:\ProgramData\Sony

2015-01-11 17:07 - 2015-01-11 17:07 - 00000000 ____D () C:\Program Files\Sony

2015-01-09 19:43 - 2015-02-04 19:41 - 00424078 _____ () C:\Windows\PFRO.log

2015-01-09 19:43 - 2015-02-04 19:41 - 00016493 _____ () C:\Windows\setupact.log

2015-01-09 19:43 - 2015-01-09 19:43 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-09 17:09 - 2015-01-11 17:00 - 00000000 ____D () C:\Program Files (x86)\Sony

2015-01-09 17:04 - 2015-01-09 17:10 - 00002576 _____ () C:\Users\J\Documents\Vegas.htm

2015-01-09 17:00 - 2015-01-09 17:00 - 00000000 ____D () C:\Users\J\AppData\Roaming\Publish Providers

2015-01-09 16:55 - 2015-01-09 16:55 - 00000000 ____D () C:\Windows\system32\appmgmt

2015-01-09 16:49 - 2015-01-11 17:07 - 00000000 ____D () C:\Users\J\AppData\Local\Sony

2015-01-09 16:48 - 2015-01-11 17:26 - 00000000 ____D () C:\Users\J\AppData\Roaming\Sony

2015-01-09 16:32 - 2015-02-04 19:36 - 00000000 ____D () C:\Users\J\AppData\Roaming\uTorrent

2015-01-09 16:32 - 2015-01-09 16:32 - 00000000 ____D () C:\ProgramData\APN

2015-01-09 15:44 - 2015-01-09 15:44 - 00000000 ____D () C:\Windows\Minidump

2015-01-07 20:29 - 2015-01-07 20:29 - 00002764 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-01-07 20:29 - 2015-01-07 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2015-01-07 20:29 - 2015-01-07 20:29 - 00000000 ____D () C:\Program Files\CCleaner

2015-01-07 16:37 - 2015-01-24 11:57 - 00000000 ____D () C:\Users\J\AppData\Roaming\OBS

2015-01-07 16:37 - 2015-01-24 11:53 - 00000000 ____D () C:\Program Files (x86)\OBS

2015-01-07 16:37 - 2015-01-07 16:37 - 00000935 _____ () C:\Users\J\Desktop\Open Broadcaster Software.lnk

2015-01-07 16:37 - 2015-01-07 16:37 - 00000000 ____D () C:\Users\J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2015-01-07 16:37 - 2015-01-07 16:37 - 00000000 ____D () C:\Program Files\OBS

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 21:18 - 2014-12-28 13:01 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-04 21:18 - 2014-12-28 13:01 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-04 20:23 - 2014-12-28 13:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-02-04 19:48 - 2009-07-13 21:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-04 19:48 - 2009-07-13 21:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-04 19:47 - 2009-07-13 22:13 - 00778150 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-04 19:44 - 2014-12-28 12:45 - 01990642 _____ () C:\Windows\WindowsUpdate.log

2015-02-04 19:41 - 2014-12-28 13:14 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-04 19:41 - 2014-12-28 13:03 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-02-04 19:41 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-04 18:32 - 2014-12-28 13:17 - 00000000 ____D () C:\Users\J\AppData\Roaming\Skype

2015-02-04 17:21 - 2014-12-28 15:54 - 00000000 ____D () C:\Users\J\AppData\Roaming\TS3Client

2015-02-04 16:23 - 2015-01-04 18:58 - 00000000 ____D () C:\Users\J\AppData\Roaming\.minecraft

2015-02-03 21:13 - 2014-12-28 13:01 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-03 21:13 - 2014-12-28 13:01 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-03 18:18 - 2014-12-28 13:32 - 00000000 ____D () C:\Users\J\Documents\ShareX

2015-02-03 15:20 - 2014-12-28 13:23 - 00000000 ____D () C:\Users\J\AppData\Local\SteelSeries Engine 3 Client

2015-02-03 15:16 - 2014-12-28 13:04 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2015-02-02 17:08 - 2015-01-04 18:57 - 00000000 ____D () C:\Program Files (x86)\Minecraft

2015-02-01 09:49 - 2014-12-28 13:39 - 00000000 ____D () C:\Users\J\AppData\Roaming\Spotify

2015-01-27 15:15 - 2014-12-28 16:50 - 00000000 ____D () C:\Users\J\AppData\Local\Spotify

2015-01-24 13:05 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\rescache

2015-01-20 18:40 - 2014-12-28 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX

2015-01-20 18:40 - 2014-12-28 13:31 - 00000000 ____D () C:\Program Files\ShareX

2015-01-16 22:40 - 2014-12-30 09:23 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-15 23:41 - 2014-12-28 13:07 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2015-01-15 23:41 - 2014-12-28 13:07 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2015-01-15 23:41 - 2014-12-28 13:07 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-01-15 23:41 - 2014-12-28 13:07 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-01-12 15:16 - 2014-12-28 12:44 - 00000000 ____D () C:\Users\J

2015-01-09 17:00 - 2015-01-04 18:59 - 00000000 ____D () C:\Users\J\AppData\Roaming\NVIDIA

2015-01-07 20:29 - 2014-12-28 13:39 - 00000000 ____D () C:\Windows\Panther

2015-01-07 17:45 - 2014-12-30 19:30 - 00000000 ____D () C:\Users\J\AppData\Roaming\Mumble

2015-01-06 15:35 - 2014-12-30 09:23 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys

==================== Files in the root of some directories =======

2015-01-25 16:52 - 2015-01-25 16:52 - 0007601 _____ () C:\Users\J\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:

====================

C:\Users\J\AppData\Local\Temp\ShareX-9.6.0-setup.exe

C:\Users\J\AppData\Local\Temp\ShareX-9.6.1-setup.exe

C:\Users\J\AppData\Local\Temp\utt9B10.tmp.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-24 12:58

==================== End Of Log ============================

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2015 01

Ran by J at 2015-02-04 21:33:48

Running from C:\Users\J\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)

CEVO CS:GO Client Beta version 1.0 (HKLM-x32\...\CEVO CS:GO Client Beta_is1) (Version: 1.0 - )

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)

Google Chrome (HKLM-x32\...\{C3FF5ACB-174A-3E07-AE2A-62063FBCC9B1}) (Version: 66.30.49247 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)

Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{02BAAFC5-4E16-42E6-A9F6-8DDE0B7ED3B8}) (Version: 1.0.0.0 - Mojang)

Mozilla Firefox 35.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 en-US)) (Version: 35.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

NVIDIA 3D Vision Controller Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Graphics Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6699 - Realtek Semiconductor Corp.)

ShareX 9.6.1 (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 9.6.1 - ShareX Developers)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)

Spotify (HKU\S-1-5-21-1053089240-525954451-3889578908-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

SteelSeries Engine 3.3.3 (HKLM\...\SteelSeries Engine 3) (Version: 3.3.3 - SteelSeries ApS)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)

Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)

WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

27-12-2014 21:05:54 Removed Samsung Data Migration

27-12-2014 21:08:49 Installed Samsung Data Migration

27-12-2014 21:13:06 Installed Samsung Data Migration

27-12-2014 21:17:58 Installed Acronis Migrate Easy

03-02-2015 15:20:05 Installed DirectX

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:34 - 2009-06-10 14:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {5ED88605-5684-4C07-A48C-B94E2407058D} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-29] ()

Task: {85FB9960-B26F-42D2-A20A-A89ACD3CC9B5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-28] (Google Inc.)

Task: {AFE9E5C3-2A0A-457E-995B-C10264BC757C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

Task: {EA1F9952-58E2-4057-969A-835946EF88BB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-28] (Google Inc.)

Task: {FF78DA04-A77E-4308-9288-FDD332D72D9B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-28 13:13 - 2014-12-13 01:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2009-03-29 23:32 - 2009-03-29 23:32 - 00032768 ____R () C:\Windows\DAODx.exe

2014-09-18 00:23 - 2014-09-18 00:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2014-10-14 11:51 - 2014-10-14 11:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2014-09-18 00:23 - 2014-09-18 00:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2014-10-14 11:51 - 2014-10-14 11:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2015-02-02 09:48 - 2015-02-02 09:48 - 17833984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe

2015-01-03 10:28 - 2015-01-03 10:28 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll

2014-12-28 13:07 - 2015-01-15 23:42 - 00715080 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll

2014-12-28 13:07 - 2015-01-15 23:42 - 00854344 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll

2014-12-28 13:09 - 2014-12-01 14:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-12-28 13:09 - 2014-12-01 14:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-12-28 13:09 - 2014-12-01 14:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-12-28 13:09 - 2014-12-01 14:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-12-28 13:09 - 2014-11-11 11:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2014-12-28 13:22 - 2014-12-01 17:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll

2014-12-28 13:13 - 2014-12-01 17:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2014-12-28 13:13 - 2014-12-01 17:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-12-28 13:09 - 2015-01-23 15:34 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll

2014-12-28 13:09 - 2014-12-01 14:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2014-12-28 13:09 - 2015-01-23 15:33 - 00696512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2015-02-03 16:15 - 2015-01-26 20:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libglesv2.dll

2015-02-03 16:15 - 2015-01-26 20:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libegl.dll

2015-02-03 16:15 - 2015-01-26 20:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\pdf.dll

2014-12-28 13:09 - 2015-01-15 16:42 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2014-12-28 13:09 - 2015-01-15 16:42 - 01709960 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1053089240-525954451-3889578908-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\J\AppData\Local\GNE\DualWallpaper\DualWallpaper.bmp

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^J^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Folding@home.lnk => C:\Windows\pss\Folding@home.lnk.Startup

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\J\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\J\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

==================== Accounts: =============================

Administrator (S-1-5-21-1053089240-525954451-3889578908-500 - Administrator - Disabled)

Guest (S-1-5-21-1053089240-525954451-3889578908-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1053089240-525954451-3889578908-1002 - Limited - Enabled)

J (S-1-5-21-1053089240-525954451-3889578908-1000 - Administrator - Enabled) => C:\Users\J

==================== Faulty Device Manager Devices =============

Name: Network Controller

Description: Network Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Universal Serial Bus (USB) Controller

Description: Universal Serial Bus (USB) Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Universal Serial Bus (USB) Controller

Description: Universal Serial Bus (USB) Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (02/04/2015 07:43:10 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 07:37:16 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 07:36:43 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: Failed to create restore point (Process = C:\Program Files\AVAST Software\Avast\Setup\Instup.exe Files\AVAST Software\Avast\Setup\Instup.exe" /control_panel /instop:uninstall; Description = avast! antivirus system restore point; Error = 0x8007043c).

Error: (02/04/2015 07:25:50 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 07:07:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 06:55:59 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 06:44:59 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 06:34:03 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2015 05:02:13 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: Steam.exe, version: 2.59.12.64, time stamp: 0x54c2c1a7

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x56ff8b90

Faulting process id: 0x6c0

Faulting application start time: 0xSteam.exe0

Faulting application path: Steam.exe1

Faulting module path: Steam.exe2

Report Id: Steam.exe3

Error: (02/04/2015 03:13:17 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:

=============

Error: (02/04/2015 09:24:36 PM) (Source: atapi) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Ide\IdePort1.