Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-10-2016
Ran by tifaout (22-10-2016 22:48:06)
Running from C:\Users\tifaout\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-10-14 15:34:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3397089103-181955046-2448013520-500 - Administrator - Disabled)
Guest (S-1-5-21-3397089103-181955046-2448013520-501 - Limited - Disabled)
tifaout (S-1-5-21-3397089103-181955046-2448013520-1000 - Administrator - Enabled) => C:\Users\tifaout

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6257.0 - IDT)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.3 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.3268 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{BEE86606-EFB5-4353-9F34-29E0C59CDCFA}) (Version: 15.2.0.0284 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Internet Mobile (HKLM-x32\...\Internet Mobile) (Version: 21.005.22.03.162 - Huawei Technologies Co.,Ltd)
Java 8 Update 92 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418092F0}) (Version: 8.0.920.14 - Oracle Corporation)
Java SE Development Kit 8 Update 92 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180920}) (Version: 8.0.920.14 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 en-GB)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
My WIFI Router (HKLM-x32\...\My WIFI Router) (Version: 3.0.064-1201-001 - TxNetwork, Inc.)
NetWorx 5.5.4 (HKLM\...\NetWorx_is1) (Version: - Softperfect)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team)
Oracle VM VirtualBox 4.3.12_ZZZZ (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Patch PS CS6 Extended 13.0 (HKLM-x32\...\Patch PS CS6 Extended 13.0) (Version: 13.0 - Dr.Adham eL Sharkawy © Startimes)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 10.0.1 - VMware, Inc)
VMware Workstation (Version: 10.0.1 - VMware, Inc.) Hidden
WinRAR 5.10 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WPS Office (10.1.0.5785) (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5785 - Kingsoft Corp.)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {502E2418-B6AE-4551-A250-7695565B7C95} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-14] (Google Inc.)
Task: {62EB92D9-F733-435D-8401-F33EDADA5856} - System32\Tasks\WpsKtpcntrQingTask_tifaout => C:\Program Files (x86)\Kingsoft\Kingsoft Office\10.1.0.5785\office6\ktpcntr.exe [2016-10-16] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {7C1ACEB3-6A3D-4EC6-8CE3-31E6A513338C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-14] (Google Inc.)
Task: {A66DE308-DB5F-40E4-A495-6F2642FCDBAB} - System32\Tasks\WpsExternal_tifaout_20161016235241 => C:\Program Files (x86)\Kingsoft\Kingsoft Office\ksolaunch.exe [2016-10-16] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {D72BBE30-5C91-49F3-99C7-7A95F71B4A8B} - System32\Tasks\WpsUpdateTask_tifaout => C:\Program Files (x86)\Kingsoft\Kingsoft Office\10.1.0.5785\wtoolex\wpsupdate.exe [2016-10-16] (Zhuhai Kingsoft Office Software Co.,Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsExternal_tifaout_20161016235241.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\ksolaunch.exe~/wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll
Task: C:\Windows\Tasks\WpsKtpcntrQingTask_tifaout.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\10.1.0.5785\office6\ktpcntr.exeÃqing 10.1.0.5785 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads
Task: C:\Windows\Tasks\WpsUpdateTask_tifaout.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\10.1.0.5785\wtoolex\wpsupdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-04-15 20:13 - 2015-04-15 20:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2013-11-06 16:24 - 2013-11-06 16:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-10-21 14:12 - 2016-05-19 14:25 - 00808960 _____ () C:\Program Files\NetWorx\sqlite.dll
2011-03-14 15:27 - 2011-03-14 15:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-10-14 15:43 - 2016-10-14 15:43 - 00514560 _____ () C:\Program Files (x86)\Internet Mobile\Internet Mobile.exe
2016-10-14 15:44 - 2016-10-14 15:43 - 00655712 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\ouc.exe
2014-11-18 02:59 - 2014-11-18 02:59 - 00047464 _____ () C:\Program Files (x86)\Wi-Fi\WiFiGxSvc.exe
2013-10-18 12:10 - 2013-10-18 12:10 - 14405200 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
2016-05-11 15:02 - 2016-05-07 01:26 - 00279552 _____ () D:\Apps\Droid4X\Droid4XService.exe
2016-10-14 15:43 - 2016-10-14 15:43 - 00430592 _____ () C:\Program Files (x86)\Internet Mobile\core.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00264192 _____ () C:\Program Files (x86)\Internet Mobile\sdk.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00011362 _____ () C:\Program Files (x86)\Internet Mobile\mingwm10.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00043008 _____ () C:\Program Files (x86)\Internet Mobile\libgcc_s_dw2-1.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 02415104 _____ () C:\Program Files (x86)\Internet Mobile\QtCore4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 09515520 _____ () C:\Program Files (x86)\Internet Mobile\QtGui4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 15675904 _____ () C:\Program Files (x86)\Internet Mobile\QtWebKit4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 01148416 _____ () C:\Program Files (x86)\Internet Mobile\QtNetwork4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 03962880 _____ () C:\Program Files (x86)\Internet Mobile\QtXmlPatterns4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00306176 _____ () C:\Program Files (x86)\Internet Mobile\phonon4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00382464 _____ () C:\Program Files (x86)\Internet Mobile\Proxy.DLL
2016-10-14 15:43 - 2016-10-14 15:43 - 00218112 _____ () C:\Program Files (x86)\Internet Mobile\Common.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00135168 _____ () C:\Program Files (x86)\Internet Mobile\Trace.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00545280 _____ () C:\Program Files (x86)\Internet Mobile\PluginContainer.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00238080 _____ () C:\Program Files (x86)\Internet Mobile\AtCodec.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00304128 _____ () C:\Program Files (x86)\Internet Mobile\DeviceSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00238592 _____ () C:\Program Files (x86)\Internet Mobile\NetSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00133120 _____ () C:\Program Files (x86)\Internet Mobile\OSDialup.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00161792 _____ () C:\Program Files (x86)\Internet Mobile\XCodec.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00157184 _____ () C:\Program Files (x86)\Internet Mobile\DataServicePlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00176128 _____ () C:\Program Files (x86)\Internet Mobile\CallSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00264704 _____ () C:\Program Files (x86)\Internet Mobile\AddrBookSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00217600 _____ () C:\Program Files (x86)\Internet Mobile\SmsSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00142336 _____ () C:\Program Files (x86)\Internet Mobile\USSDSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00156672 _____ () C:\Program Files (x86)\Internet Mobile\STKSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00154624 _____ () C:\Program Files (x86)\Internet Mobile\GpsSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00339968 _____ () C:\Program Files (x86)\Internet Mobile\DeviceAppPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00065536 _____ () C:\Program Files (x86)\Internet Mobile\OSPowerMgr.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00114688 _____ () C:\Program Files (x86)\Internet Mobile\Win7Support.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 01078272 _____ () C:\Program Files (x86)\Internet Mobile\AddrBookPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00670720 _____ () C:\Program Files (x86)\Internet Mobile\SmsAppPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00182272 _____ () C:\Program Files (x86)\Internet Mobile\CallAppPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00547840 _____ () C:\Program Files (x86)\Internet Mobile\CallLogSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00158720 _____ () C:\Program Files (x86)\Internet Mobile\NetConnectSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00211968 _____ () C:\Program Files (x86)\Internet Mobile\DialUpPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00102400 _____ () C:\Program Files (x86)\Internet Mobile\OSAdapt.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00180736 _____ () C:\Program Files (x86)\Internet Mobile\NDISPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00131072 _____ () C:\Program Files (x86)\Internet Mobile\OSNDIS.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 01101824 _____ () C:\Program Files (x86)\Internet Mobile\NDISAPI.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00278528 _____ () C:\Program Files (x86)\Internet Mobile\NetInfoSrvPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00062976 _____ () C:\Program Files (x86)\Internet Mobile\OSCall.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00539648 _____ () C:\Program Files (x86)\Internet Mobile\DeviceMgrUIPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00398336 _____ () C:\Program Files (x86)\Internet Mobile\QtXml4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00123392 _____ () C:\Program Files (x86)\Internet Mobile\ATR2SMgr.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00184832 _____ () C:\Program Files (x86)\Internet Mobile\XFramePlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00309760 _____ () C:\Program Files (x86)\Internet Mobile\StatusBarMgrPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00117760 _____ () C:\Program Files (x86)\Internet Mobile\LayoutPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00443904 _____ () C:\Program Files (x86)\Internet Mobile\DialupUIPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00093184 _____ () C:\Program Files (x86)\Internet Mobile\NotifyServicePlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00335360 _____ () C:\Program Files (x86)\Internet Mobile\NetConnectPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00297472 _____ () C:\Program Files (x86)\Internet Mobile\MenuMgrPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00486400 _____ () C:\Program Files (x86)\Internet Mobile\NetInfoUIExPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00827392 _____ () C:\Program Files (x86)\Internet Mobile\SMSUIPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00771584 _____ () C:\Program Files (x86)\Internet Mobile\AddrBookUIPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00210944 _____ () C:\Program Files (x86)\Internet Mobile\ToolBarMgrPlugin.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00693760 _____ () C:\Program Files (x86)\Internet Mobile\LiveUpdateInterface.DLL
2016-10-14 15:43 - 2016-10-14 15:43 - 00082944 _____ () C:\Program Files (x86)\Internet Mobile\plugins\imageformats\qgif4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00081920 _____ () C:\Program Files (x86)\Internet Mobile\plugins\imageformats\qico4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00192000 _____ () C:\Program Files (x86)\Internet Mobile\plugins\imageformats\qjpeg4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00350720 _____ () C:\Program Files (x86)\Internet Mobile\plugins\imageformats\qmng4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00370176 _____ () C:\Program Files (x86)\Internet Mobile\plugins\imageformats\qtiff4.dll
2016-10-14 15:43 - 2016-10-14 15:43 - 00197632 _____ () C:\Program Files (x86)\Internet Mobile\plugins\codecs\qcncodecs4.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 00011362 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\mingwm10.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 00043008 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\libgcc_s_dw2-1.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 02415104 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\QtCore4.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 01148416 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\QtNetwork4.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 00843264 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\QueryStrategy.dll
2016-10-14 15:44 - 2016-10-14 15:43 - 00398336 _____ () C:\ProgramData\Internet Mobile\OnlineUpdate\QtXml4.dll
2013-10-18 12:46 - 2013-10-18 12:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll
2016-10-21 20:29 - 2016-10-20 08:47 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.71\libglesv2.dll
2016-10-21 20:29 - 2016-10-20 08:47 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.71\libegl.dll
2015-06-08 19:06 - 2015-06-08 19:06 - 00014336 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2016-10-21 21:42 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3397089103-181955046-2448013520-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\tifaout\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.251.231.241 - 212.217.1.12
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{0C653DD6-D39E-4840-8077-BE55131DD626}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7465641B-7C17-462F-A368-8B3174095AAA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{43F83C97-E165-4E1F-A8B2-580A71C54BFF}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{066D8C18-B14A-4041-A47A-E42BFD6F5692}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{53CF8B87-BC47-4265-A1FC-47EBF3B8BA46}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{E9E358B1-2EEF-4C79-84F6-BFFFF7C13A7A}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{7259AF46-79FF-499A-B094-A5E842C8A469}] => (Allow) C:\Program Files (x86)\Wi-Fi\Wi-Fi.exe
FirewallRules: [TCP Query User{22FDBC51-EF79-42B9-AF7F-FD104C367EF9}D:\apps\droid4x\droid4x.exe] => (Allow) D:\apps\droid4x\droid4x.exe
FirewallRules: [UDP Query User{028D0C97-850D-471A-A90C-A96D5CE6B9BC}D:\apps\droid4x\droid4x.exe] => (Allow) D:\apps\droid4x\droid4x.exe
FirewallRules: [{7EBF32C2-DCEE-47C8-9CEA-F70A3EFD8366}] => (Block) D:\apps\droid4x\droid4x.exe
FirewallRules: [{600EEBAF-D53C-4472-BD9B-C5C0D6736AE2}] => (Block) D:\apps\droid4x\droid4x.exe
FirewallRules: [TCP Query User{65513003-C807-49AA-A42A-288E5AE56A47}D:\apps\droid4x\download\minithunderplatform.exe] => (Allow) D:\apps\droid4x\download\minithunderplatform.exe
FirewallRules: [UDP Query User{A63BCA11-B89D-4B6A-A618-26DDF7C2E7EA}D:\apps\droid4x\download\minithunderplatform.exe] => (Allow) D:\apps\droid4x\download\minithunderplatform.exe
FirewallRules: [{9D30636A-7322-4C16-8730-7A57F0595A74}] => (Block) D:\apps\droid4x\download\minithunderplatform.exe
FirewallRules: [{283AB3E9-A4C0-4EB4-A5FB-5804AF9AE5CD}] => (Block) D:\apps\droid4x\download\minithunderplatform.exe
FirewallRules: [{E020CB25-ED3E-493F-93EE-45FFF9BD821E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F1948D7B-7A51-4656-96FB-675BC455391E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D62D10B3-1E2C-47AC-9E28-C08A63452C93}] => (Allow) C:\Program Files\NetWorx\networx.exe
FirewallRules: [{C5C13FAF-A4EF-41C4-860E-1F9199F6EADC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C6C775BC-9F2B-4F6B-9B95-EACD7109560D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{97B858F9-9EF9-4C7A-9488-4E6069E1DB97}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{675C3639-35D6-4215-A881-D28EBAE50175}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{EAF195B3-2D5E-4290-87CB-187AC60DDD5B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Restore Points =========================

14-10-2016 15:38:16 Installed IDT Audio
14-10-2016 15:40:10 Installed Java SE Development Kit 8 Update 92 (64-bit)
14-10-2016 19:55:44 Windows Update

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Serial Port
Description: PCI Serial Port
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: RICOH Bay8Controller
Description: RICOH Bay8Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/22/2016 06:38:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/21/2016 03:06:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/21/2016 04:33:33 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/21/2016 04:01:27 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/19/2016 02:10:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/19/2016 01:59:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/19/2016 12:28:48 AM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoId={5E6AED86-A32B-4579-8F8C-A2B22C5146F7}: The user tifaout-PC\tifaout dialed a connection named which has failed. The error code returned on failure is 680.

Error: (10/18/2016 10:37:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/17/2016 11:42:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (10/17/2016 07:56:29 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoId={40460F1C-351E-471F-859F-65032AC8CA26}: The user tifaout-PC\tifaout dialed a connection named Formule 3G prépayée which has failed. The error code returned on failure is 0.


System errors:
=============
Error: (10/22/2016 06:36:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Internet Mobile. OUC service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (10/22/2016 06:36:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Internet Mobile. OUC service to connect.

Error: (10/22/2016 05:20:11 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (10/22/2016 10:07:37 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (10/22/2016 02:10:47 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (10/21/2016 09:36:31 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (10/21/2016 09:36:31 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (10/21/2016 09:36:31 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (10/21/2016 09:36:31 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (10/21/2016 09:36:31 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz
Percentage of memory in use: 68%
Total physical RAM: 3887.38 MB
Available physical RAM: 1217.18 MB
Total Virtual: 7772.95 MB
Available Virtual: 4798.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.21 GB) (Free:50.76 GB) NTFS
Drive d: (narutam) (Fixed) (Total:135.32 GB) (Free:41.13 GB) NTFS
Drive e: (Internet Mobile) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 791B8A51)
Partition 1: (Not Active) - (Size=101 MB) - (Type=42)
Partition 2: (Active) - (Size=350 MB) - (Type=42)
Partition 3: (Not Active) - (Size=97.2 GB) - (Type=42)
Partition 4: (Not Active) - (Size=135.2 GB) - (Type=42)

==================== End of Addition.txt ============================