Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-12-2014 Ran by Marek at 2014-12-03 21:31:47 Running from C:\Users\Marek\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-431021187-217253523-1019275998-1000\...\uTorrent) (Version: 3.3.1.30017 - BitTorrent Inc.) Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3501 - Acer Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated) AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.39 - Atheros Communications Inc.) Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.34 - Avanquest Software) BatteryCare 0.9.20 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.20 - Filipe Lourenço) CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.8.50 - Conexant) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform) ETDWare PS/2-X64 8.0.6.0_WHQL (HKLM\...\Elantech) (Version: 8.0.6.0 - ELAN Microelectronic Corp.) Evernote v. 4.5.7 (HKLM-x32\...\{0BE73D3C-B5AF-11E1-933A-984BE15F174E}) (Version: 4.5.7.7146 - Evernote Corp.) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.) Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KeePass Password Safe 2.19 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: - Dominik Reichl) Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.) Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Lync Web App Plug-in (HKLM\...\{6619085B-A9D5-4DDD-800B-964903EAF546}) (Version: 15.8.8308.726 - Microsoft Corporation) Microsoft Lync Web App Plug-in (HKLM\...\{7F2142CA-6DC2-4F55-8F41-A1C1BFE11BBD}) (Version: 4.0.7577.0 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.5131.5000 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Minecraft1.7.2 (HKLM-x32\...\Minecraft1.7.2) (Version: - ) Mozilla Firefox 33.1.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 pl)) (Version: 33.1.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MPC-HC 1.7.0 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.0.7858 - MPC-HC Team) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger) NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.213.0 - Tracker Software Products Ltd) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Sony PC Companion 2.10.181 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.181 - Sony) SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 - Ghisler Software GmbH) TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) XnView 2.05 (HKLM-x32\...\XnView_is1) (Version: 2.05 - Gougelet Pierre-e) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 04-11-2014 12:09:13 Windows Update 12-11-2014 11:10:14 Windows Update 15-11-2014 12:24:04 Windows Update 16-11-2014 06:48:25 Windows Update 20-11-2014 08:37:26 Windows Update 22-11-2014 18:03:10 Windows Update 26-11-2014 12:31:27 Windows Update 02-12-2014 18:18:37 Removed Java 7 Update 51 02-12-2014 18:21:29 Removed Java 7 Update 72 (64-bit) 02-12-2014 18:26:19 avast! antivirus system restore point 02-12-2014 18:30:26 Windows Update 02-12-2014 19:31:50 Windows Update 03-12-2014 20:14:51 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2014-12-03 18:36 - 2014-12-03 18:36 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {10F0DDB5-AA1C-4DEF-8C0C-CEFA68AE9CEC} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {18BEF305-F306-4E33-8CB0-E4D502671151} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd) Task: {2CD93EDA-3739-4C98-B2D8-AD15E2A8932A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-04] (Google Inc.) Task: {7008073B-4B35-47DE-9FC6-C418D6535D73} - System32\Tasks\BatteryCareAuto => C:\Program Files (x86)\BatteryCare\BatteryCare.exe [2014-10-18] (Filipe Lourenço) Task: {B9733CE3-7F4E-4D4E-A3AD-6E1F8DFF0E4E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated) Task: {FBC3E547-0AE0-4B3E-8C5F-102E1749BAE0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-04] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-03-16 14:42 - 2012-03-16 14:42 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll 2012-03-16 14:42 - 2012-03-16 14:42 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll 2014-12-03 21:22 - 2014-12-03 21:22 - 00098816 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32api.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00110080 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\pywintypes27.dll 2014-12-03 21:22 - 2014-12-03 21:22 - 00364544 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\pythoncom27.dll 2014-12-03 21:22 - 2014-12-03 21:22 - 00045568 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_socket.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 01160704 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_ssl.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00320512 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32com.shell.shell.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00713216 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_hashlib.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 01175040 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._core_.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00805888 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._gdi_.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00811008 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._windows_.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 01062400 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._controls_.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00735232 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._misc_.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00128512 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_elementtree.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00127488 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\pyexpat.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00557056 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\pysqlite2._sqlite.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00087552 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_ctypes.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00119808 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32file.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00108544 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32security.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00007168 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\hashobjs_ext.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00167936 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32gui.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00018432 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32event.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00038912 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32inet.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00011264 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32crypt.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00070656 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._html2.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00027136 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\_multiprocessing.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00035840 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32process.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00686080 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\unicodedata.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00122368 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._wizard.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00024064 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32pipe.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00025600 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32pdh.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00525640 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\windows._lib_cacheinvalidation.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00010240 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\select.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00017408 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32profile.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00022528 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\win32ts.pyd 2014-12-03 21:22 - 2014-12-03 21:22 - 00078336 _____ () C:\Users\Marek\AppData\Local\Temp\_MEI29882\wx._animate.pyd ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-431021187-217253523-1019275998-500 - Administrator - Disabled) Guest (S-1-5-21-431021187-217253523-1019275998-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-431021187-217253523-1019275998-1002 - Limited - Enabled) Karla (S-1-5-21-431021187-217253523-1019275998-1003 - Administrator - Enabled) => C:\Users\Karla Marek (S-1-5-21-431021187-217253523-1019275998-1000 - Administrator - Enabled) => C:\Users\Marek ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/03/2014 09:22:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 09:20:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808 Faulting module name: mscorwks.dll, version: 2.0.50727.5485, time stamp: 0x53a11d6c Exception code: 0xc0000005 Fault offset: 0x00000000001934c8 Faulting process id: 0x%9 Faulting application start time: 0xmmc.exe0 Faulting application path: mmc.exe1 Faulting module path: mmc.exe2 Report Id: mmc.exe3 Error: (12/03/2014 09:20:44 PM) (Source: .NET Runtime) (EventID: 1023) (User: ) Description: .NET Runtime version 2.0.50727.5485 - Fatal Execution Engine Error (000007FEF25E600A) (80131506) Error: (12/03/2014 09:17:49 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 06:41:22 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 06:09:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 08:37:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 07:34:03 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 07:30:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor. System Error: The system cannot find the file specified. . System errors: ============= Error: (12/03/2014 09:22:16 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: cdrom Error: (12/03/2014 09:17:38 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: cdrom Error: (12/03/2014 06:40:02 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: cdrom Error: (12/03/2014 06:34:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Application Virtualization Client service terminated unexpectedly. It has done this 1 time(s). Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Application Virtualization Service Agent service terminated unexpectedly. It has done this 1 time(s). Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Client Virtualization Handler service terminated unexpectedly. It has done this 1 time(s). Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Raw Socket Service service terminated unexpectedly. It has done this 1 time(s). Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Live Updater Service service terminated unexpectedly. It has done this 1 time(s). Error: (12/03/2014 06:34:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The GREGService service terminated unexpectedly. It has done this 1 time(s). Microsoft Office Sessions: ========================= Error: (12/03/2014 09:22:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 09:20:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: mmc.exe6.1.7600.163854a5bc808mscorwks.dll2.0.50727.548553a11d6cc000000500000000001934c8 Error: (12/03/2014 09:20:44 PM) (Source: .NET Runtime) (EventID: 1023) (User: ) Description: .NET Runtime version 2.0.50727.5485 - Fatal Execution Engine Error (000007FEF25E600A) (80131506) Error: (12/03/2014 09:17:49 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 06:41:22 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2014 06:09:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 08:37:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 07:34:03 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2014 07:30:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor. System Error: The system cannot find the file specified. ==================== Memory info =========================== Processor: AMD C-60 APU with Radeon(tm) HD Graphics Percentage of memory in use: 39% Total physical RAM: 3818.9 MB Available physical RAM: 2323.04 MB Total Pagefile: 7635.98 MB Available Pagefile: 5719.84 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:219.79 GB) (Free:127.51 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0A2BA869) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=219.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================