speech runtime exe

What is ‘SpeechRuntime.exe’? How to Disable / Fix it?

SpeechRuntime.exe is an executable file that is a part of the Microsoft Windows operating system. This executable file belongs to the Speech Runtime Executable process and is typically located in the following directory:

SpeechRuntime.exe is a critical windows component because it is related to Cortana – windows’ virtual assistant. So, it’s responsible for speech functions like “Hey Cortana” . Therefore, removing this file is not recommended.

When the registry scan is run, the problem appears as  ActiveX/COM Issues  with the Data pointing towards:

with the path of the Registry Key as  HKCR\CLSID\{…}

However, people often face different issues with this file while using a cleaning utility that leads them to think – Is this executable file harmful to the system?

Table of Contents

Is it Harmful?

Cyber thieves often use executable files to inject malware into the system. Therefore, people are hesitant to open any unknown executable file. Similar is the case with speechruntime.exe. But there are ways of verifying its authenticity.

Checking the Authenticity via Task Manager

If the executable file is running in the background, then you can follow the following procedure:

• Open the ‘Task Manager’ by pressing ‘Ctrl + Alt + Delete’ or searching in the Start Menu.

• Right-click on it and choose the ‘Properties’ option.
• The file is authentic if the Properties dialog is displaying the following location:

Checking the Authenticity via File Explorer

If you can’t find the Speech Runtime Executable in the Task Manager, this means the file is not running in the background. For this, check the authenticity by using the following method:

• Open ‘This PC’ (if you’re on Windows-8/10 and ‘Computer’ for Windows-7) and in the address bar type the following:

• The rest of the ownership authentication procedure is the same as ‘Step 5 of Method # 1’ .

Exceptions:

The file can be harmful in the following cases:

• If you find a suspicious directory in the ‘General’ tab of the executable file’s properties.
• If you find any other ownership in the ‘Details’ tab of the executable file’s properties.
• If the file is using too many GPU and CPU resources. Because often .exe files containing malware are using most of the system’s resources without opening them.

Why does CCleaner Show it?

As mentioned earlier that speechruntime.exe is a windows entry, so if you’re using Windows 10, it’s recommended not to mess with the speechruntime.exe file. Because it’s necessary for the proper functioning of Accessibility options of Cortana for visually impaired users. Plus, Microsoft strictly prohibits the use of registry cleaners on windows.

Specifically talking about Windows 10, its registry entries are often changing, so registry cleaners can’t keep up with that. You can also check Microsoft’s guide regarding using Registry Cleaning utilities on Windows 10.

Even if CCleaner is marking speechruntime.exe as an issue, then it’s still not an issue. Because

• First of all, CCleaner is a junk cleaner and not a malware cleaner. So, that means it can’t detect malware which shows that this executable file is not malware.
• Secondly, Windows OS needs this executable file.

Plus, the officials of CCleaner don’t recommend using registry cleaner on Windows 10 unless:

• You want to clean or locate the leftover entries of a software application that you have uninstalled.

So, it’s recommended not to mess with these files because deleting these files might lead you to reinstallation of windows. Plus, CCleaner will hopefully resolve this issue as well.

How to Disable it?

Unless CCleaner resolves this issue, you can apply the following solutions for disabling it:

1. Disable it by Rolling Back to the Previous Windows Update

Most people who are facing this issue on Windows 10 are using the KB4601319 version of windows. If you uninstall this version, this issue will be resolved. So, in this step, we will discuss the procedure for rolling back to the previous version:

2. Whitelisting the SpeechRuntime.exe in CCleaner

The second thing you can do to fix this issue is by whitelisting the exe file in CCleaner. So, let’s how to do that:

• In the opened window of CCleaner, click the ‘Options’ icon on the left.

• Now you’ll locate to the same following address:

Talha Saeed

Unlock your potential with Microsoft Copilot

Microsoft Speech Platform - Runtime Languages (Version 11)

Speech Recognition and Text-to-Speech Engines for Microsoft supported Languages

Important! Selecting a language below will dynamically change the complete page content to that language.

Choose the download you want.

Total size: 0 bytes

Date Published:

MSSpeech_SR_da-DK_TELE.msi

MSSpeech_TTS_ca-ES_Herena.msi

MSSpeech_SR_en-GB_TELE.msi

MSSpeech_SR_nl-NL_TELE.msi

MSSpeech_TTS_fi-FI_Heidi.msi

MSSpeech_TTS_zh-HK_HunYee.msi

MSSpeech_TTS_nb-NO_Hulda.msi

MSSpeech_SR_sv-SE_TELE.msi

MSSpeech_SR_zh-HK_TELE.msi

MSSpeech_TTS_en-IN_Heera.msi

MSSpeech_SR_fr-CA_TELE.msi

MSSpeech_SR_ca-ES_TELE.msi

MSSpeech_SR_fi-FI_TELE.msi

MSSpeech_TTS_pt-BR_Heloisa.msi

MSSpeech_SR_nb-NO_TELE.msi

MSSpeech_TTS_fr-FR_Hortense.msi

MSSpeech_TTS_sv-SE_Hedvig.msi

MSSpeech_TTS_pt-PT_Helia16k.msi

MSSpeech_TTS_zh-TW_HanHan.msi

MSSpeech_TTS_it-IT_Lucia.msi

MSSpeech_TTS_de-DE_Hedda.msi

SR Engine Supplement License.rtf

MSSpeech_TTS_da-DK_Helle.msi

MSSpeech_TTS_zh-CN_HuiHui.msi

MSSpeech_SR_en-US_TELE.msi

MSSpeech_SR_ru-RU_TELE.msi

MSSpeech_TTS_nl-NL_Hanna.msi

MSSpeech_SR_pt-PT_TELE.msi

MSSpeech_SR_en-CA_TELE.msi

MSSpeech_SR_de-DE_TELE.msi

MSSpeech_TTS_fr-CA_Harmonie.msi

MSSpeech_TTS_en-CA_Heather.msi

MSSpeech_SR_zh-CN_TELE.msi

MSSpeech_SR_pl-PL_TELE.msi

MSSpeech_TTS_en-US_Helen.msi

MSSpeech_TTS_pt-PT_Helia.msi

MSSpeech_SR_ko-KR_TELE.msi

MSSpeech_TTS_es-ES_Helena.msi

MSSpeech_SR_it-IT_TELE.msi

TTS Supplement License.rtf

MSSpeech_SR_zh-TW_TELE.msi

MSSpeech_TTS_ru-RU_Elena.msi

MSSpeech_TTS_en-GB_Hazel.msi

MSSpeech_SR_es-MX_TELE.msi

MSSpeech_TTS_en-US_ZiraPro.msi

MSSpeech_TTS_pl-PL_Paulina.msi

MSSpeech_SR_ja-JP_TELE.msi

MSSpeech_SR_en-IN_TELE.msi

MSSpeech_TTS_en-AU_Hayley.msi

MSSpeech_SR_pt-BR_TELE.msi

MSSpeech_SR_fr-FR_TELE.msi

MSSpeech_SR_en-AU_TELE.msi

MSSpeech_TTS_ja-JP_Haruka.msi

MSSpeech_TTS_es-MX_Hilda.msi

MSSpeech_TTS_ko-KR_Heami.msi

MSSpeech_SR_es-ES_TELE.msi

System Requirements

Supported Operating Systems

Windows Server 2008, Windows Server 2008 R2, Windows 7, Windows Vista

• Windows Vista or later
• Windows 2003 Server or later
• Windows 2008 Server or later

Install Instructions

• First install the Microsoft Speech Platform - Runtime 11.0
• Click the file you want to download from the list below.
• Do one of the following:
• To start the installation immediately, click Open or Run this program from its current location .
• To copy the download to your computer for installation at a later time, click Save or Save this program to disk
• The downloads only contain the language data files:
• For the Runtime, please download the Microsoft Speech Platform - Runtime 11
• For the Software Development Kit, please download the Microsoft Speech Platform - SDK 11

Related Resources

• Microsoft Speech Technologies
• Microsoft Speech Platform - Runtime 11
• Microsoft Speech Platform - Software Development Kit (SDK) 11

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Is Speech Runtime Executable spying on me in Windows 10

When looking at task manager I see Speech Runtime Executable always taking a bit of CPU

Cortana (not Hey Cortana) is ON and Hey Cortana is OFF is enabled and these are my privacy settings

My computer has a built in microphone and I do not like Microsoft spying so I also have disabled some diagnostic and telemetry services

Are they listening to me?

• Microsoft isn't spying on you. If you want want Cortana to respond to your voice commands and/or Cortana. –  Ramhound Mar 25, 2016 at 13:11
• Hey cortana is off –  Suici Doga Apr 8, 2016 at 9:10
• Your question says "Cortana is enabled". Your comment says "cortana is off". One of these statements is false (it cannot be enabled and off at the same time). Please edit the question and clarify. –  DavidPostill ♦ Apr 8, 2016 at 9:53
• @DavidPostill Yes, Cortana is on but hey cortana is off –  Suici Doga Apr 8, 2016 at 10:05
• @Ramhound They do. By default when Cortana is ON "Hey Cortana" (which is a Cortana feature) is OFF. You have to enable Hey Cortana (which I did not to protect my privacy) –  Suici Doga Apr 8, 2016 at 10:29

Yes and no. Cortana is not only a text-to-speech converter. Its a virtual assistant which needs to be able to activated by voice commands (explains how it can detect it whenever you say "Hey Cortana") and to achieve that it needs to be "listening". That being said Cortana doesn't send whatever it hears to Microsoft. It's not a whistleblower :P . Information it stores comes from your interactions with it.

• Cortana is not open and provides is still taking CPU. Also Hey Cortana is off –  Suici Doga Mar 25, 2016 at 13:30
• 1 A whistleblower let it known that recordings are actually used by external parties and not just used locally. Source: arstechnica.com/gadgets/2019/08/… –  akaBase Oct 22, 2019 at 11:42

You must log in to answer this question.

Not the answer you're looking for browse other questions tagged windows-10 cpu privacy microphone cortana ..

• The Overflow Blog
• Is AI making your code worse?
• Featured on Meta
• Changing how community leadership works on Stack Exchange: a proposal and...
• Shifting the data dump schedule: A proposal
• Google Cloud will be Sponsoring Super User SE

Hot Network Questions

• Faster than light ship is doomed, captain keeps log anyway
• Where is the paradox in the double-slit experiment?
• Typesetting and alignment of optimization problem where objective value row is excluded
• The darkness that is equivalent to the block of 99.5% of the sun
• Six consecutive positive integers with certain shape
• What about luggage on a solo cycling trip?
• Did the UNIVAC I really have a 2.25 MHz clock speed?
• Rock Paper Scissors Game feedback
• Would a saber-toothed predator make a good draught animal?
• How does luggage work with Multi-leg travel on a single ticket?
• Adding Node to Linked List
• Short comment paper - time to review Vs urgency of the topic
• Can academics make a living solely out of publishing?
• Reference request: Best book to cite on a property of the family of Cauchy distributions
• Riverboat Soufflé
• Why is it inefficient to expel high speed gas?
• Confusion about time signature
• Are there any indications what the stance of a future Trump administration would be towards Gaza?
• Are there atoms in the lattice of intermediate logics?
• Why can't group 2B metals (Zn, Cd, Hg) form complexes with ligands such as CO, nitrosyl (NO), and olefins but do from complexes with NH3, CN- etc?
• Compact set and total boundedness, confusion with definition
• Have been gone for - acceptable?
• meaning of the sentence—It's easier to act your way into a new way of thinking, than think your way into a new way of acting.?
• The logic and literal meaning of 実感もくそもある (How does it mean what it means?)

This browser is no longer supported.

Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.

SpeechRuntime.exe --ToastNotifier (Registry Key keeps getting created almost instantly)

When we try using Ccleaner and other industry standard acceptable registry cleanup tools a few keys are backed up and removed. It includes SpeechRuntime.exe --ToastNotifier.

However this key seems to be automatically recreated on Microsoft Windows 11 almost instantly after it is cleaned up by the tools

Windows 11 A Microsoft operating system designed for productivity, creativity, and ease of use. 7,875 questions Sign in to follow

Thank you for your question and reaching out. I can understand you are having query\issues related to Registry.

Please note that Ccleaner is third party application hence , Kindly get in touch with Ccleaner forums or support.

Also SpeechRuntime.exe is Windows executable file so it is not recommended to delete it.

--If the reply is helpful, please Upvote and Accept as answer--

SpeechRuntime.exe

• File Path: C:\WINDOWS\system32\Speech_OneCore\common\SpeechRuntime.exe
• Description: Speech Runtime Executable

Runtime Data

Loaded modules:.

• Status: Signature verified.
• Serial: 33000002ED2C45E4C145CF48440000000002ED
• Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: SpeechRuntime.exe
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.22000.51 (WinBuild.160101.0800)
• Product Version: 10.0.22000.51
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit
• VirusTotal Detections: 0/73
• VirusTotal Link: https://www.virustotal.com/gui/file/8dc913847be78d52194d81f725a63293cd0ef3090bdc6d7efadd1dcaaf3858a8/detection

MIT License. Copyright (c) 2020-2021 Strontic.

• Remember me Not recommended on shared computers

Forgot your password?

• CCleaner Help Requests

SpeechRunTime.exe

By melxpress February 6, 2021 in CCleaner Help Requests

Recommended Posts

I've been running CClearner Pro for many years (several times a day) on a PC and a laptop (both running Windows 10 64-bit).  As of late (over a week now), CC has detected the following "problem" while running the Registry scan on my PC only .  I am unable to figure out why CC is detecting this and why it cannot remove it.  I've searched through Google for SpeechRuntime.exe but doesn't seem to apply to this problem.  I decided to purchase a new SSD with a clean Windows 10 installation and the problem persists.

Problem: ActiveX/COM Issue    

Data: LocalServer32\C:\Windows\SysWOW64\Speech_OneCore\Common\SpeechRuntime.exe -ToastNotifier    

Registry Key: HKCR\CLSID\{265b1075-d22b-41eb-bc97-87568f3e6dab}  

Any help is much appreciated.

Link to comment

Share on other sites.

I've got the same "problem".  Defender doesn't seem to have an issue with the exe (scan) and after a check with Run->cmd sfc/scannow there wasn't any malfunction either. So it looks like Ccleaner has some unjust dislike of the exe file. However, maybe i am mistaken . The pc does funtion normally though. Considering you have had the issue as recently as i have, i would feel like a Ccleaner-thing...

Regards, Nico

That is a system entry relating to a system file and Windows is putting it back if you remove it, leave it alone. (It's part of the upcoming Spring 2021 update to Windows 10, it's just been put on most machines early in preparation for the update).

In fact we reccomend that you leave all registry entries in Windows 10 alone.

Our advice, and Microsoft's, is - don't use any registry cleaner with Windows 10 - if you do you may 'break' your Windows 10 and have to reinstall Windows from scratch.

Windows 10 changes the registry frequently, and registry cleaning apps will never be able to keep up with that.

You may get away with using one with no problems for months or years, but it's not worth the risk.

Registry cleaning is an advanced tool (mainly for use on an already broken computer), it's not meant for regular use and will not speed up a working machine in any way.

Here is the Microsoft article about (not) using regisrty cleaners: https://support.microsoft.com/en-gb/help/2563254/microsoft-support-policy-for-the-use-of-registry-cleaning-utilities

Also see this post from Dave CCleaner about the Registry Cleaner in CCleaner: https://community.ccleaner.com/topic/59952-i-get-a-registry-error-on-ccleaner-on-windows-10-i-have-scanned-5-times/?tab=comments#comment-326804

*** Out of Beer Error ->->-> Recovering Memory ***

Worried about 'Tracking Files'? Worried about why some files come back after cleaning? See this link: https://community.ccleaner.com/topic/52668-tracking-files/?tab=comments#comment-300043

It's clear that I'm not the only one with this specific "speechruntime" problem. It's specific because it's the exact same error and not just random registry entries. While you may say that it's designed for Windows 7 or older, you probably need to speak with your development team to not have this feature for windows 10 if it's dangerous. Like I have mentioned this before, I have used your product for years and never had any issues, which is a good thing because I wouldn't have purchased the PRO if otherwise.

As already said you shouldn't be using any registry cleaner except for troubleshooting/fixing specific problems.

As already said the developers are already looking to remove it from the main menus in CCleaner, so that people are not tempted to use it when they shouldn't do. (We moderators been nagging them to do this for over a year now).

It can be a useful tool if it is used correctly; so it probably won't be scrapped altogether.

(Chainsaws are not the right tool for carving your Sunday roast, but are useful when used correctly for the right job)

Do you use Cortana?

  SpeechRuntime.exe is part of that.

Support contact

https://support.ccleaner.com/s/contact-form?language=en_US&form=general

[email protected]

Registry cleaners can give a false positive which is what's happening.

Goofy and cryptic looking entries in the registry that don't actually resolve to a correct path can trip up many registry cleaners in regards to what's located in C:\Windows which isn't really safe to clean, especially if the OS or a software doesn't automatically add it back in automatically for you.

It's a reason they should have a setting to skip all detections located in C:\Windows. If you must continue using the registry cleaner (not a good ideal with Windows 10) realize you can manually right-click any entry deemed as "invalid" to exclude it which is especially important for anything that points to C:\Windows as an issue.

same problem

i tried to uninstall this windows update: KB4601319

it works, but if you reinstall the update, the line is here again..

https://www.bleepingcomputer.com/news/microsoft/how-to-uninstall-windows-10-updates-manually/

I got it with a KB update today.

Simply Solution: Right-click it, then select Exclude

a PAYING CUSTOMER FOR MANY YEARS!!! is telling the community of an issue...

and a MODERATOR is "indirectly" saying

to the CUSTOMER that HE is the STUPID one ("dont use ANY registry cleaners...", "its an advanced tool...")

to PAY (Pro Version $$$)

for a SERVICE (CCLEANER/Registry cleaner)

for nothing....(using it on win10)

its the WHOLE REASON WHY he has CCleaner. (and the company even existing)...

TL;DR registry cleaners ARE and WILL always be a thing UNTIL Microsoft's auto-cleans itself

now, to OG poster @ melxpress

right-click, exclude it for now, i hope support knows about issue very soon

my guess is they will add it as hidden exclusion soon if its legit false pos 

5 hours ago, Frenchstud said: WOW... a PAYING CUSTOMER FOR MANY YEARS!!! is telling the community of an issue... and a MODERATOR is "indirectly" saying to the CUSTOMER that HE is the STUPID one ("dont use ANY registry cleaners...", "its an advanced tool...") to PAY (Pro Version $$$) for a SERVICE (CCLEANER/Registry cleaner) for nothing....(using it on win10) its the WHOLE REASON WHY he has CCleaner. (and the company even existing)... TL;DR registry cleaners ARE and WILL always be a thing UNTIL Microsoft's auto-cleans itself   now, to OG poster @ melxpress right-click, exclude it for now, i hope support knows about issue very soon my guess is they will add it as hidden exclusion soon if its legit false pos       

instead of the advice which irratated you, because you want to use the tool.  Either exclude the offending key as andavari stated or do you registry section as described in my signature below this post.  Unlike my friend nukecad, I don't believe not registry cleaning being a win10 thing; instead I see it as an always windows thing that must be treated with kid's gloves and it has always been that way (i've had this signature since I joined in the early 2000s

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email [email protected]

11 hours ago, Frenchstud said: and a MODERATOR is "indirectly" saying to the CUSTOMER that HE is the STUPID one ("dont use ANY registry cleaners...", "its an advanced tool...")      

That's just trolling in my opinion. Microsoft has a clear policy on using registry cleaners in Windows 10 .

By warning people on this forum to not use the registry cleaner in CCleaner it can save a user from causing a completely avoidable issue that may or may not be easy to remedy.

Using registry cleaners can and will eventually cause issues especially if a user blindly trusts the results and deletes everything presented to them  in a registry cleaner's list of "invalids" which is usually the case.

Registry cleaners may not always be "a thing" as you state for the fact if Microsoft wanted to blacklist any software it wouldn't work with Windows 10 anymore (such as really old versions of CCleaner which you can't use anymore as a relevant example) . Registry cleaners are a legacy dinosaur type of tool where I could see could them eventually being relegated as blacklisted if they damage enough Windows 10 installations especially if it becomes a nuisance to Microsoft with too many customer support requests.

We all have our own opinions, and respect each others opinions, mine is based on the official Microsoft stance on Reg Cleaners and Win 10.

I don't say reg cleaners should never be used with Win 10. Just that they shouldn't be used blithely, and certainly not in the expectation that it will 'speed up' your computer.

The advice in Nergal's signature for using a reg cleaner is good advice. But Windows has changed a lot since the early 2000's and reg cleaning is not usually necessary with Windows 10.

Unlike Andavari I don't see Microsoft blacklisting ALL reg cleaners, because they are still useful tools when used correctly in the right circumstances. I do see them blacklisting the more troublesome or aggressive ones, and as we have seen they sometimes regard CCleaner's reg cleaner as troublesome - that is not because it's bad, simply because it is so widely distributed and often used when not needed. Let's face it, most CCleaner users wouldn't even have a reg cleaner if it wasn't included with CCleaner.

Whatever the merits or otherwise of running registry cleaners on Windows 10, Ccleaner IS flagging an error here.

There is no SpeechRuntime.exe in syswow64 but there is in system32 .

As said above it is a system file that Windows needs (Whether it is 64 bit or 32 bit, Windows needs it):

Quote That is a system entry relating to a system file and Windows is putting it back if you remove it, leave it alone.

I just find it odd that Microsoft would create a situation where a register entry would point to non-existent software.

6 hours ago, FrankZB said: I just find it odd that Microsoft would create a situation where a register entry would point to non-existent software.

usually a security reason behind that (maybe not in this case i'm unsure)

The registry has stuff in it that points to seemly nothing and even settings for something that isn't even installed, some of it is for compatibility in case something is installed at a later time. But not all of it gets flagged by registry cleaners (speaking registry cleaners in general not just the one in CCleaner) .

Edit: I've found out it's also related to WinSxS folder, and that alone is like a can of worms to even mess with.

• 3 yr hazelnut changed the title to SpeechRunTime.exe

13 hours ago, FrankZB said: I just find it odd that Microsoft would create a situation where a register entry would point to non-existent software.

I believe that the particular entry discussed here is a new entry related to Cortana, as Hazelnut said above, also it's possibly related to the accessibility options for blind users.

So it's related to the built in Windows utilities.

Any/every Patch Tuesday, or other Windows 10 update, is liable to change the registry and add new entries. (New entries that a registry cleaner will not recognise, because they are new).

At the moment Windows 10 updater is adding things in the background, and making changes in the registry , that will not be activated until the spring 2021 Feature Update in a month or two. (Windows 10 version 21H1) https://www.bleepingcomputer.com/news/microsoft/windows-10-21h1-coming-soon-here-are-the-new-features/

So yes; you will have things on your machine, especially in the registry, that don't seem to be connected with anything - YET.

Registry cleaners will not recognise these new entries/changes, and may/will try to remove them.

Microsoft do this so that when the update/activation comes it's an "Enablement Package" that switches on these already downloaded things making it much quicker than having to download everything at that time. If you remove them it just means that Windows will have to download them again.

Think of it like getting the paint in ready for redecorating, and putting the right paint in each room for when you start. If you thrown that new paint out you'll just have to get it again when you come to do the actual painting.

I had his too.  You have to take ownership of each of the keys that have to do with it (and there are several) which is a bit of a process, but don't, because it has to do with the sound driver.  (Which I found out the hard way).

It appears that someone at CCleaner has figured this one out and it no longer shows as an error. (Either that or Microsoft has fixed it!)

Basic question: If were not supposed to run registry cleaners on Windows 10 installation, why is CCleaner selling us a utility that does just that????

1 hour ago, latimers said: Basic question: If were not supposed to run registry cleaners on Windows 10 installation, why is CCleaner selling us a utility that does just that????

Because Registry Cleaners do have a valid use - for helping to fix a computer that has problems (ie. following a malware infection or if something goes wrong uninstalling an app).

It's  using them for the wrong purpose (to try and speed up a healthy machine, which it won't do) and using them indiscriminately that can cause problems rather than fixing problems.

CCleaner also has a  Disc Analyzer, a Duplicate Finder, and a Drive Wiper - you don't use them everyday, you only use them when you need to - Reg cleaners are the same, only use a registry cleaner when you need to.

And yes, before someone says it -  We all agree that the reg cleaner in CCleaner should be with those tools and not as prominient as it is now.

Even Piriform agree, it's just taking them time to change that: https://community.ccleaner.com/topic/59952-i-get-a-registry-error-on-ccleaner-on-windows-10-i-have-scanned-5-times/?tab=comments#comment-326804

If it was beneficial to run a routine/regular registry clean in CCleaner then it would have been included as a part of Health Check. It wasn't included in Health Check because it is NOT beneficial to do a registry clean if you don't need to. It can be unhealthy to run a registry clean that isn't needed.

Carlos Lemos

I use the portable CCleaner and just started to notice the issue reported in this thread, exactly as shown by melxpress February 6. This started to happen after I uninstalled MinGW manually by removing all libraries of this manager and then ist shortcut and folder, because it did not appear in the apps list for doing the uninstall. This may have left some hanging issues in the register.

The PC is working normally, so I hope this will not be serious and leave it as it stands (though I would prefer to get no register issue reports as I before).

I don't know why some apps cannot be uninstalled normally and leave these register problems.

If someone more experienced has some advice other than doing nothing, I would be grateful.

That registry entry "SpeechRuntimetime.exe" is new to Windows and is needed by Windows, which is why Windows keeps putting it back if you remove it.

It is nothing to do with anything that you may have uninstalled, it is a part of Windows.

See this for more info on what it is, (and why you shouldn't be using the registry cleaner with Windows 10 unless you have a problem to fix). See also the post by Dave CCleaner which follows that one and explains CCleaner's current policy on using the Registry Cleaner. https://community.ccleaner.com/topic/59952-i-get-a-registry-error-on-ccleaner-on-windows-10-i-have-scanned-5-times/?tab=comments#comment-326797

I wonder why this one LITTLE thing is so blown out like it's a huge issue. It's allot of nothing really!

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Already have an account? Sign in here.

• Existing user? Sign In
• Online Users
• All Activity
• CCleaner for Windows
• CCleaner for Mac
• CCleaner Browser
• CCleaner for Android
• CCleaner Cloud
• CCleaner Business Edition
• Create New...

Important Information

By using this site, you agree to our Terms of Use .

• Create Account

• View New Content
• Forum Rules
• BleepingComputer.com
• Startup List
• Virus Removal
• Uninstall List
• Welcome Guide

• → Security
• → Am I infected? What do I do?

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Latest News:     Over 100 US and EU orgs targeted in StrelaStealer malware attacks

Featured Deal: This grade "A" refurbished MacBook Air could be yours for $315

Latest Buyer's Guide:     How to install a VPN on your router: Step-by-step guide

URGENT: Infected SpeechRuntime.exe

• Please log in to reply

• Gender: Male
• Local time: 09:18 PM

Posted 01 October 2015 - 01:03 AM

Hello there,

Fairly new to these forums, so hopefully I've posted this to the right place.

Long story short, according to my Panda Free Antivirus, the SpeechRuntime.exe program located in C:\Windows\System32\Speech_OneCore\Common has become infected.

And, of course, it cannot be removed by the Antivirus, as Windows deems it super important.

So far, I've additionally ran Malwarebytes, AdwCleaner, Security Task Manager, and Junkware Removal Tool, all of which have not detected anything else, nor flagged the SpeechRuntime.exe as problematic. Panda is the only tool that has waved the red flag, which began roughly two days ago, after three PUPs were found (and deleted). The only strange behavior I have seen since then is one random computer restart, which was not triggered by a power outage or loose cord.

My question here is: does this sound fishy, or is it a false positive? Should I go ahead and attempt to remove the file, as explained here ? Or is SpeechRuntime.exe something that can break my system, if I try to delete it?

Any advice or suggestions would be greatly appreciated.

Thanks for your time,

Edited by JoLynch, 01 October 2015 - 03:22 AM.

BC AdBot (Login to Remove)

#2 Sintharius

Bleepin' Sniper

• 5,639 posts
• Gender: Female
• Location: The Netherlands
• Local time: 05:18 AM

Posted 01 October 2015 - 03:24 AM

• Topic Starter

Posted 01 October 2015 - 03:37 AM

Hi there, What is Panda's detection for the file? It's not a good idea to remove your system files in any case.

Hello Alexstrasza,

Thanks for responding. The Full Virus Scan option through Panda detects it as an unsolved threat, which continues to remain that way after every scan. The scan logs do not seem to imply anything else specific. After checking the Process Monitor tab, it does indeed flag SpeechRuntime.exe as a High Threat and an "unidentified virus".

My initial thought was that it's a false positive, but it seems awfully suspicious that all this started right after those PUPs were found.

Could be something going on with Panda. Should I uninstall/reinstall it and attempt another Full Scan?

Edited by JoLynch, 01 October 2015 - 03:52 AM.

#4 Sintharius

Posted 01 October 2015 - 03:52 AM

• Download Security Check by screen317 from here or here .
• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.

Posted 01 October 2015 - 04:31 PM

Hi there, Let's get some information on your computer first. MiniToolbox by Farbar Disable your antivirus if it does not allow you to download the tool! Please download MiniToolBox , save it to your desktop and run it. Place a checkmark in Select all , then click Go and post the result (MTB.txt). A copy of Result.txt will be saved in the same directory the tool is run. === Security Check by screen317 Download Security Check by screen317 from here or here . Save it to your Desktop. Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt. Please copy and paste the contents of the log in your next reply. Regards, Alex  

Hello again,

Thanks for the links! Looking over the MiniToolBox log, looks like Panda may be the culprit. Lots of error logs, and Windows Defender not being very thrilled about being disabled, so Panda can run. (The scanner apparently now thinks that the SpeechRuntime.exe is no longer malicious, after having run both MiniToolBox and Security Check).

Though, just to verify, I did temporarily disable Panda while downloading/using MiniToolBox. After turning Panda back on, it did flag the program as malicious (as expected), but that it contained W32/Exploit.gen. I put it under quarantine, but is this a false positive? I did download it from the link you've supplied.

Here are the logs (and thank you for taking the time to read them through):

MiniToolBox by Farbar   Version: 25-07-2015 01 Ran by J (administrator) on 01-10-2015 at 02:02:28 Running from "C:\Users\J\Downloads" Microsoft Windows 10 Home  (X64) Model: CG8350 Manufacturer: ASUSTeK Computer INC. Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== "Reset FF Proxy Settings": Firefox Proxy settings were reset. ========================= Hosts content: ================================= ========================= IP Configuration: ================================ Realtek PCIe GBE Family Controller = Local Area Connection (Connected) # ---------------------------------- # IPv4 Configuration # ---------------------------------- pushd interface ipv4 reset set global popd # End of IPv4 configuration Windows IP Configuration    Host Name . . . . . . . . . . . . : J-PC    Primary Dns Suffix  . . . . . . . :    Node Type . . . . . . . . . . . . : Hybrid    IP Routing Enabled. . . . . . . . : No    WINS Proxy Enabled. . . . . . . . : No    DNS Suffix Search List. . . . . . : ftrdhcpuser.net Ethernet adapter Local Area Connection* 2:    Media State . . . . . . . . . . . : Media disconnected    Connection-specific DNS Suffix  . :    Description . . . . . . . . . . . : Juniper Network Connect Virtual Adapter    Physical Address. . . . . . . . . :    DHCP Enabled. . . . . . . . . . . : Yes    Autoconfiguration Enabled . . . . : Yes Ethernet adapter Local Area Connection:    Connection-specific DNS Suffix  . : ftrdhcpuser.net    Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller    Physical Address. . . . . . . . . :    DHCP Enabled. . . . . . . . . . . : Yes    Autoconfiguration Enabled . . . . : Yes    Link-local IPv6 Address . . . . . :    IPv4 Address. . . . . . . . . . . :      Subnet Mask . . . . . . . . . . . : 255.255.255.0    Lease Obtained. . . . . . . . . . : Thursday, October 01, 2015 1:58:44 AM    Lease Expires . . . . . . . . . . : Friday, October 02, 2015 1:58:43 AM    Default Gateway . . . . . . . . . :    DHCP Server . . . . . . . . . . . :    DHCPv6 IAID . . . . . . . . . . . : 196914885    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-5D-C3-44-BC-AE-C5-EA-84-18    DNS Servers . . . . . . . . . . . :    NetBIOS over Tcpip. . . . . . . . : Enabled Server:  dslrouter.ftrdhcpuser.net Address:  192.168.1.1 Name:    google.com Addresses:  2607:f8b0:4009:804::1004       173.194.46.39       173.194.46.46       173.194.46.32       173.194.46.40       173.194.46.33       173.194.46.41       173.194.46.34       173.194.46.36       173.194.46.38       173.194.46.35       173.194.46.37 Pinging google.com [173.194.46.37] with 32 bytes of data: Reply from 173.194.46.37: bytes=32 time=198ms TTL=54 Reply from 173.194.46.37: bytes=32 time=200ms TTL=54 Ping statistics for 173.194.46.37:     Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds:     Minimum = 198ms, Maximum = 200ms, Average = 199ms Server:  dslrouter.ftrdhcpuser.net Address:  192.168.1.1 Name:    yahoo.com Addresses:  2001:4998:c:a06::2:4008       2001:4998:44:204::a7       2001:4998:58:c02::a9       206.190.36.45       98.139.183.24       98.138.253.109 Pinging yahoo.com [98.138.253.109] with 32 bytes of data: Reply from 98.138.253.109: bytes=32 time=203ms TTL=50 Reply from 98.138.253.109: bytes=32 time=201ms TTL=50 Ping statistics for 98.138.253.109:     Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds:     Minimum = 201ms, Maximum = 203ms, Average = 202ms Pinging 127.0.0.1 with 32 bytes of data: Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Ping statistics for 127.0.0.1:     Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds:     Minimum = 0ms, Maximum = 0ms, Average = 0ms =========================================================================== Interface List   2...00 ff 00 84 f9 a6 ......Juniper Network Connect Virtual Adapter   3...bc ae c5 ea 84 18 ......Realtek PCIe GBE Family Controller   1...........................Software Loopback Interface 1 =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination        Netmask          Gateway       Interface  Metric           0.0.0.0          0.0.0.0      192.168.1.1     192.168.1.22     20         127.0.0.0        255.0.0.0         On-link         127.0.0.1    306         127.0.0.1  255.255.255.255         On-link         127.0.0.1    306   127.255.255.255  255.255.255.255         On-link         127.0.0.1    306       192.168.1.0    255.255.255.0         On-link      192.168.1.22    276      192.168.1.22  255.255.255.255         On-link      192.168.1.22    276     192.168.1.255  255.255.255.255         On-link      192.168.1.22    276         224.0.0.0        240.0.0.0         On-link         127.0.0.1    306         224.0.0.0        240.0.0.0         On-link      192.168.1.22    276   255.255.255.255  255.255.255.255         On-link         127.0.0.1    306   255.255.255.255  255.255.255.255         On-link      192.168.1.22    276 =========================================================================== Persistent Routes:   None IPv6 Route Table =========================================================================== Active Routes:  If Metric Network Destination      Gateway   1    306 ::1/128                  On-link   3    276 fe80::/64                On-link   3    276 fe80::24bd:94f4:7e0f:c12a/128                                     On-link   1    306 ff00::/8                 On-link   3    276 ff00::/8                 On-link =========================================================================== Persistent Routes:   None ========================= Winsock entries ===================================== Catalog5 01 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation) Catalog5 02 C:\WINDOWS\SysWOW64\napinsp.dll [54784] (Microsoft Corporation) Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 04 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [23552] (Microsoft Corporation) Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation) x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [79872] (Microsoft Corporation) x64-Catalog5 02 C:\Windows\System32\napinsp.dll [67072] (Microsoft Corporation) x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation) x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation) x64-Catalog5 05 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation) x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.) x64-Catalog9 01 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 02 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 03 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 04 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 05 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 06 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 07 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 08 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 09 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 10 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) x64-Catalog9 11 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors: ================== Error: (10/01/2015 01:58:40 AM) (Source: ATIeRecord) (User: ) Description: ATI EEU PnP start/stop failed Error: (09/30/2015 11:08:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: J-PC) Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (09/30/2015 11:08:13 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x0005d522 Faulting process id: 0x494 Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 11:08:11 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x0005d522 Faulting process id: 0x1dcc Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 11:08:11 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x000193ee Faulting process id: 0x1dcc Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 11:08:10 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x000193ee Faulting process id: 0x494 Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 10:45:14 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x0005d522 Faulting process id: 0x2358 Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 10:45:13 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x000193ee Faulting process id: 0x2358 Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 10:21:04 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x0005d522 Faulting process id: 0x1fac Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 Error: (09/30/2015 10:21:01 PM) (Source: Application Error) (User: ) Description: Faulting application name: PSUAMain.exe, version: 4.0.0.644, time stamp: 0x54efac0e Faulting module name: CC3290MT.DLL, version: 9.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x000193ee Faulting process id: 0x1fac Faulting application start time: 0xPSUAMain.exe0 Faulting application path: PSUAMain.exe1 Faulting module path: PSUAMain.exe2 Report Id: PSUAMain.exe3 Faulting package full name: PSUAMain.exe4 Faulting package-relative application ID: PSUAMain.exe5 System errors: ============= Error: (10/01/2015 01:58:47 AM) (Source: Service Control Manager) (User: ) Description: The ScRegSetValueExW call failed for FailureActions with the following error: %%5 Error: (10/01/2015 01:58:40 AM) (Source: Service Control Manager) (User: ) Description: The WajaIEn Monitor service failed to start due to the following error: %%2 Error: (10/01/2015 01:58:40 AM) (Source: Service Control Manager) (User: ) Description: The Net.Tcp Listener Adapter service depends on the Net.Tcp Port Sharing Service service which failed to start because of the following error: %%1058 Error: (09/30/2015 11:08:18 PM) (Source: DCOM) (User: J-PC) Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca Error: (09/30/2015 11:08:18 PM) (Source: Service Control Manager) (User: ) Description: The User Data Access_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (09/30/2015 11:08:18 PM) (Source: Service Control Manager) (User: ) Description: The User Data Storage_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (09/30/2015 11:08:18 PM) (Source: Service Control Manager) (User: ) Description: The Contact Data_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (09/30/2015 11:08:18 PM) (Source: Service Control Manager) (User: ) Description: The Sync Host_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (09/30/2015 10:12:23 PM) (Source: Service Control Manager) (User: ) Description: The Intel® Management and Security Application User Notification Service service terminated unexpectedly.  It has done this 1 time(s). Error: (09/30/2015 10:12:21 PM) (Source: Service Control Manager) (User: ) Description: The SQL Server VSS Writer service terminated unexpectedly.  It has done this 1 time(s). Microsoft Office Sessions: ========================= Error: (10/01/2015 01:58:40 AM) (Source: ATIeRecord)(User: ) Description: Error: (09/30/2015 11:08:18 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: J-PC) Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141 Error: (09/30/2015 11:08:13 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c00000050005d52249401d0fc093366c18dC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL558e221c-6062-4cd3-bd72-87df8ce1e2d2 Error: (09/30/2015 11:08:11 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c00000050005d5221dcc01d0fc0c44a7046bC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL6aae96ee-06cf-43f3-8d85-8defce3bad85 Error: (09/30/2015 11:08:11 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c0000005000193ee1dcc01d0fc0c44a7046bC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL4679c0aa-2af6-4352-9883-5a9844f5517f Error: (09/30/2015 11:08:10 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c0000005000193ee49401d0fc093366c18dC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLLabe2961a-9ae4-4c53-89a6-d9a35320a0dc Error: (09/30/2015 10:45:14 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c00000050005d522235801d0fc0c52e1f19dC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLLb4e10a43-fd23-4dc7-9db4-ce5754dafe6b Error: (09/30/2015 10:45:13 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c0000005000193ee235801d0fc0c52e1f19dC:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL48cf5954-800c-4651-b92a-d70bf88d0092 Error: (09/30/2015 10:21:04 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c00000050005d5221fac01d0fc08c5ce2616C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL42399651-fcdb-4344-bcbe-69f77c67187f Error: (09/30/2015 10:21:01 PM) (Source: Application Error)(User: ) Description: PSUAMain.exe4.0.0.64454efac0eCC3290MT.DLL9.0.0.000000000c0000005000193ee1fac01d0fc08c5ce2616C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exeC:\Program Files (x86)\Panda Security\Panda Security Protection\CC3290MT.DLL97804ff6-a381-4a31-bcc1-c4dbb3238cf5 CodeIntegrity Errors: ===================================   Date: 2015-08-08 07:30:06.273   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:30:05.694   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:29:54.859   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:29:51.551   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:17.300   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:17.252   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:12.843   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:12.303   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:11.806   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.   Date: 2015-08-08 07:28:11.590   Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. =========================== Installed Programs ============================ 64 Bit HP CIO Components Installer (HKLM\...\{9301985B-D116-4A93-A93D-94580084FF86}) (Version: 1.2.0 - Hewlett-Packard) Hidden 64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000004}_955) (Version:  - Adobe Systems Incorporated) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated) Adobe Anchor Service x64 CS4 (HKLM\...\{887797BF-37A5-4199-B0C9-0D38D6196E9A}) (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe CMaps x64 CS4 (HKLM\...\{90BA8112-80B3-4617-A3C1-BD2771B60F74}) (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Standard (HKLM-x32\...\Adobe_1e3ba55b33b1e8227645fb9c82acca3) (Version: 4.0 - Adobe Systems Incorporated) Adobe CSI CS4 x64 (HKLM\...\{8DAA31EB-6830-4006-A99F-4DF8AB24714F}) (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 x64 (HKLM\...\{A3454894-144A-4D80-B605-C128FE0D7329}) (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Fonts All x64 (HKLM\...\{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}) (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.1.0.070 - Adobe Systems Incorporated) Adobe InDesign CS4 Icon Handler x64 (HKLM\...\{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}) (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 x64 (HKLM\...\{8875A1C0-6308-4790-8CF6-D34E89880052}) (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated) Adobe PDF iFilter 11 for 64-bit platforms (HKLM\...\{BA5C0CC3-421B-4AE5-9370-1650D1941F30}) (Version: 11.0.00 - Adobe) Adobe PDF Library Files x64 CS4 (HKLM\...\{DFFABE78-8173-4E97-9C5C-22FB26192FC5}) (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (64 Bit) (HKLM\...\{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}) (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Type Support x64 CS4 (HKLM\...\{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}) (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin x64 (HKLM\...\{295CFB7C-A57E-4313-93E7-68E7CE1D0332}) (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated) AI Manager (HKLM-x32\...\{4AF95DE2-B54D-4C3F-9494-FD3B558E2C2D}) (Version: 1.09.06 - ASUSTeK Computer Inc.) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.01.15 - ASUSTeK Computer Inc.) Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc) AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD) AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Among the Sleep (HKLM-x32\...\Steam App 250620) (Version:  - Krillbite Studio) Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.7.0 - Asmedia Technology) ASUS Backup Wizard (HKLM-x32\...\{124C9BD0-8C52-40AB-8238-0605703B1C28}) (Version: 1.00.10 - ASUSTeK Computer Inc.) ATI AVIVO64 Codecs (HKLM\...\{391ED0B2-B886-A6D0-B1A6-C25A7FE5B452}) (Version: 11.6.0.50930 - ATI Technologies Inc.) Hidden ATI Problem Report Wizard (HKLM\...\{4F8A27CA-6788-7965-3259-5C3B9C37FCD8}) (Version: 3.0.795.0 - ATI Technologies) Hidden Autodesk Backburner 2012.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2012.0.0 - Autodesk, Inc.) Autodesk DirectConnect 2012 64-bit (HKLM\...\{AC3E3746-8F18-4F8A-9521-1493022C6E0A}) (Version: 6.0.443.0 - Autodesk) Hidden Autodesk DirectConnect 2012 64-bit (HKLM\...\Autodesk DirectConnect 2012 64-bit) (Version: 6.0.443.0 - Autodesk) Autodesk MatchMover 2012 64-bit (HKLM\...\{4529F749-C362-4119-AFA0-0A3F1CA924AB}) (Version: 14.00.0000 - Autodesk) Autodesk Maya 2012 64-bit (HKLM\...\{9E6BB4E4-0B20-4922-AA37-260FA5ACFBA5}) (Version: 14.0.0.0 - Autodesk) Hidden Autodesk Maya 2012 64-bit (HKLM\...\Autodesk Maya 2012 64-bit) (Version: 14.0.0.0 - Autodesk) Baldur's Gate™ II - Shadows of Amn™ (HKLM-x32\...\{8DAE4336-2B71-11D4-9A6C-006067325E47}) (Version:  - ) Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment) Best Buy pc app (HKLM-x32\...\{FBBC4667-2521-4E78-B1BD-8706F774549B}) (Version: 3.1.1.0 - Best Buy) Hidden Blurb Book Creator CS4 v2.7.0.20d16 (HKLM-x32\...\Blurb Template Creator CS4_is1) (Version:  - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Complément Messenger (HKLM-x32\...\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk) Connect (HKLM-x32\...\{B29AD377-CC12-490A-A480-1452337C618D}) (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Corel Painter 12 - IPM (HKLM\...\{1BF97502-21C5-429B-9B5B-8F560BE91348}) (Version: 12.2 - Corel Corporation) Hidden Corel Painter 12 (HKLM\...\_{08A8CCEA-36DC-4634-AAAA-79463D644C0E}) (Version: 12.0.1.727 - Corel Corporation) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment) Dotfuscator Software Services - Community Edition (HKLM-x32\...\{1AA5BD63-6614-44B2-88A7-605191EDB835}) (Version: 5.0.2500.0 - PreEmptive Solutions) Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.) Elevated Installer (HKLM-x32\...\{93765DFA-8A67-41FB-9FC0-B12341CA65F3}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden FileZilla Client 3.10.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.1 - Tim Kosse) FINAL FANTASY XIV: A Realm Reborn (HKLM-x32\...\Steam App 39210) (Version:  - SQUARE ENIX) Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Garmin Express (HKLM-x32\...\{e47a5c85-88a2-47d2-b380-fc2e763c2e6d}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries) Garmin Express Tray (HKLM-x32\...\{C233BCC3-29C4-49C0-B955-0A94509FC4FC}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden Garmin Update Service (HKLM-x32\...\{876AB032-B2A4-41FF-AF87-DBC78454C1B0}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden GDR 5520 for SQL Server 2008 (KB2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation) GDR 5538 for SQL Server 2008 (KB3045305) (64-bit) (HKLM\...\KB3045305) (Version: 10.3.5538.0 - Microsoft Corporation) Gone Home (HKLM-x32\...\Steam App 232430) (Version:  - The Fullbright Company) Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.) Happy Cloud Client (HKCU\...\HappyCloud) (Version: 4.54 - Happy Cloud, Inc.) Hewlett-Packard ACLM.NET v1.1.0.0 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard) Hidden HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}) (Version: 1.00.0000 - Microsoft) Hidden HTML Help Workshop (HKLM-x32\...\HTML Help Workshop) (Version:  - ) HydraVision (HKLM-x32\...\{07BFA98D-6DB0-6D9C-95D5-7EF347AF587B}) (Version: 4.2.180.0 - ATI Technologies Inc.) Hidden Icewind Dale: Enhanced Edition (HKLM-x32\...\Steam App 321800) (Version:  - Beamdog) IconHandler 64 bit (HKLM\...\{4E82E2E9-668B-4F8A-814A-78E163FCDBCD}) (Version: 2.0 - Corel Corporation) Hidden IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - ) Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel® OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation) Intel® OpenCL SDK 1.5 (HKLM\...\{ECAD1063-CF2B-45F3-9863-A8B970003BBD}) (Version: 1.5.0.15293 - Intel Corporation) iSpeedPC (HKLM-x32\...\{81F28E77-FECC-4517-8D0E-C77113AC0737}) (Version: 1.1.1 - iSpeedPC, Inc) iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.) Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation) Juniper Networks Network Connect 7.1.0 (HKLM-x32\...\Juniper Network Connect 7.1.0) (Version: 7.1.0.20169 - Juniper Networks) Juniper Networks, Inc. Setup Client Activex Control (HKLM-x32\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks, Inc.) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden kuler (HKLM-x32\...\{098727E1-775A-4450-B573-3F441F1CA243}) (Version: 2.0 - Adobe Systems Incorporated) Hidden LibreOffice 4.0 Help Pack (English) (HKLM-x32\...\{6B80B041-06E7-4EDB-B523-9397D1DF3684}) (Version: 4.0.1.2 - The Document Foundation) LibreOffice 4.2.5.2 (HKLM-x32\...\{8D8F47B2-0E03-4C50-9803-A01120878F96}) (Version: 4.2.5.2 - The Document Foundation) Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.) Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech) Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{50816F92-1652-4A7C-B9BC-48F682742C4B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{8142D25E-028A-4563-86ED-5755783C8029}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{939C80FA-96C9-44A6-B318-8E7D8BD8481B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools (HKLM-x32\...\{40416836-56CC-4C0E-A6AF-5C34BADCE483}) (Version: 2.0.50217.0 - Microsoft Corporation) Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft DirectX SDK (June 2010) (HKLM-x32\...\Microsoft DirectX SDK (June 2010)) (Version: 9.29.1962.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP) Microsoft redistributable runtime DLLs VS2010 (x86) (HKLM-x32\...\{ED3ED369-0D20-4F6E-9CBA-22EDDC171199}) (Version: 10.0.30319.314 - SAP) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Data-Tier Application Framework (HKLM-x32\...\{BC537AE0-88AF-47ED-B762-33B0D62B5188}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Data-Tier Application Project (HKLM-x32\...\{7A56D81D-6406-40E7-9184-8AC1769C4D69}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x64) (HKLM\...\{EAEBF166-B06A-4D7F-BAF7-6615303D5C7C}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Transact-SQL Language Service (HKLM-x32\...\{09C52940-A4D1-4409-A7CC-1AAE630CF578}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{F43ADE73-2880-4A95-B995-4FE386ECF667}) (Version: 10.3.5538.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft Sync Framework Runtime v1.0 SP1 (x64) (HKLM\...\{8438EC02-B8A9-462D-AC72-1B521349C001}) (Version: 1.0.3010.0 - Microsoft Corporation) Microsoft Sync Framework SDK v1.0 SP1 (HKLM-x32\...\{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}) (Version: 1.0.3010.0 - Microsoft Corporation) Microsoft Sync Framework Services v1.0 SP1 (x64) (HKLM\...\{034106B5-54B7-467F-B477-5B7DBB492624}) (Version: 1.0.3010.0 - Microsoft Corporation) Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) (HKLM\...\{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}) (Version: 2.0.3010.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010  x64 Designtime - 10.0.30319 (HKLM\...\{F5079164-1DB9-3BDA-853B-F78AF67CE071}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{85467CBC-7A39-33C9-8940-D72D9269B84F}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 IntelliTrace Collection (x64) (HKLM\...\{88BAE373-00F4-3E33-828F-96E89E5E0CB9}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Web Deploy 3.0 (HKLM\...\{AA72C306-30BE-4BB1-9E42-59552BAD2CDF}) (Version: 3.1236.1631 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries (HKLM\...\{5DE154DF-A55E-4FA5-BE59-32E78FCACF3E}) (Version: 6.1.5288.17011 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu (HKLM\...\{DFB3AD2B-4EE2-3077-BF1D-3CA164BC5336}) (Version: 3.5.30729 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32 (HKLM\...\{F5C819A5-E068-4f7d-B91A-1BD18702AFFB}) (Version: 6.1.5295.17011 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.) Mozilla Firefox 40.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 en-US)) (Version: 40.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) Neverwinter Nights 2 (HKLM-x32\...\{F20C1251-1D0A-4944-B2AE-678581B33B19}) (Version: 1.00.0000 - Obsidian) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.56.1 - Black Tree Gaming) NVIDIA DDS Utilities (HKLM-x32\...\{64963F0E-03F2-4B59-8D1B-1806545E7092}) (Version: 1.0 - ) NVIDIA Photoshop Plug-ins (HKLM-x32\...\{23F79416-CAD1-41BF-99A3-040F6C814AAA}) (Version: 1.00.000 - ) NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - ) NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation) NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit (HKLM\...\{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}) (Version: 2.60.0216.1828 - NVIDIA Corporation) OBS Multiplatform (HKLM-x32\...\OBS Multiplatform) (Version: 0.11.4 - OBS Project) OJPro8100FWUpdateAlert (HKLM-x32\...\{30A6FDE6-FF60-439C-898C-AFA60920B942}) (Version: 1.00.0000 - HP) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version:  - ) Painter 12 - Content (HKLM\...\{97759DE4-0A6A-4ACF-A511-4DA791BEAA1A}) (Version: 12.2 - Corel Corporation) Hidden Painter 12 - Core (HKLM\...\{42CD49CD-4B05-4A2D-8FD1-E37CC9315FA5}) (Version: 12.2 - Corel Corporation) Hidden Painter 12 - Corex64 (HKLM\...\{690C091A-E12C-469E-91C0-7BECCD698187}) (Version: 12.1.0 - Corel Corporation) Hidden Painter 12 - EN (HKLM\...\{77013803-5BA9-4C8A-BFC4-99AE7151C4B7}) (Version: 12.2 - Corel Corporation) Hidden Painter 12 - Setup Files (HKLM\...\{08A8CCEA-36DC-4634-AAAA-79463D644C0E}) (Version: 12.1 - Corel Corporation) Hidden Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.2 - Panda Security) Panda Devices Agent (HKLM-x32\...\{949F1EA1-D3E2-472E-BC7C-CB72374C0E55}) (Version: 1.05.00 - Panda Security) Hidden Panda Devices Agent (HKLM-x32\...\Panda Devices Agent) (Version: 1.03.04 - Panda Security) Panda Free Antivirus (HKLM\...\{FC002254-4E11-45B9-839E-B0E2A9BDC4C6}) (Version: 7.84.00.0000 - Panda Security) Hidden Panda Free Antivirus (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 15.01.00.0006 - Panda Security) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.6.0 - Pando Networks Inc.) PDF Settings CS4 (HKLM-x32\...\{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}) (Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (HKLM-x32\...\{CC75AB5C-2110-4A7F-AF52-708680D22FE8}) (Version: 5.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw_x64 (HKLM\...\{2D74E972-5A85-44DC-9193-8A302BA8C181}) (Version: 5.0 - Adobe Systems Incorporated) Hidden Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation) QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.) RAF (HKLM-x32\...\{E6B43401-E818-4961-AFED-118DD8E87642}) (Version: 1.00.0001 - FUJIFILM Corporation) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.31.1025.2010 - Realtek) Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{7236672F-6430-439E-9B27-27EDEAF1D676}) (Version: 1.00.0000 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Remember Me (HKLM-x32\...\Steam App 228300) (Version:  - DONTNOD Entertainment) Rosetta Stone TOTALe (HKLM-x32\...\{4010ADCB-1347-D570-FCF1-3002CABEBD2F}) (Version: 4.1.15.1 - Rosetta Stone, Ltd) Hidden Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition) SAP Visual Enterprise Viewer 7.0 Minimum (HKLM-x32\...\SAP Visual Enterprise Viewer 70) (Version: 7.0.1.178 - SAP AG) Security Task Manager 2.1d (HKLM-x32\...\Security Task Manager) (Version: 2.1d - Neuber Software) Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (HKLM\...\{2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}) (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation) Suite Shared Configuration CS4 (HKLM-x32\...\{842B4B72-9E8F-4962-B3C1-1C422A5C4434}) (Version: 1.0 - Adobe Systems Incorporated) Hidden Syberia (HKLM-x32\...\Steam App 46500) (Version:  - Anuman) System Requirements Lab Detection (HKLM-x32\...\{B893DA43-09D6-4656-9B84-3CE455422301}) (Version: 6.1.5.0 - Husdawg, LLC) TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios) The Longest Journey (HKLM-x32\...\Steam App 6310) (Version:  - Funcom) The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version:  - CD Projekt RED) Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games) Trine 2 (HKLM-x32\...\Steam App 35720) (Version:  - Frozenbyte) Valkyria Chronicles™ (HKLM-x32\...\Steam App 294860) (Version:  - SEGA) Vampire: The Masquerade - Bloodlines (HKLM-x32\...\Steam App 2600) (Version:  - Troika Games) VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden Visual C++ 2008 x64 Runtime - v9.0.30729.01 (HKLM-x32\...\{0DF3AE91-E533-3960-8516-B23737F8B7A2}.vc_x64runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation) Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64) (HKLM\...\{4A5A427F-BA39-4BF0-7777-9A47FBE60C9F}) (Version: 11.0.200 - Nuance Communications Inc.) Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-4 - Wacom Technology Corp.) WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation) WD Drive Manager (x64) (HKLM\...\{94794BBD-1FB4-428B-8F2D-E368BEF2C237}) (Version: 2.116 - Western Digital) Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) WinRAR 4.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH) XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games) Yahoo! Detect (HKLM-x32\...\YTdetect) (Version:  - ) ========================= Devices: ================================ ========================= Memory info: =================================== Percentage of memory in use: 21% Total physical RAM: 8173.22 MB Available physical RAM: 6391.91 MB Total Virtual: 16365.22 MB Available Virtual: 14226.92 MB ========================= Partitions: ===================================== 1 Drive c: (WIN7) (Fixed) (Total:917.33 GB) (Free:626.52 GB) NTFS ========================= Users: ======================================== User accounts for \\J-PC Administrator            DefaultAccount           Guest                     J             ========================= Minidump Files ================================== C:\WINDOWS\Minidump\083115-23312-01.dmp ========================= Restore Points ================================== 26-09-2015 06:01:25 Scheduled Checkpoint 30-09-2015 20:26:10 Windows Update **** End of log ****  

  Results of screen317's Security Check version 1.009      x64 (UAC is enabled)    Internet Explorer 11   ``````````````Antivirus/Firewall Check:``````````````  Windows Firewall Enabled!   Panda Free Antivirus    Windows Defender          WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:`````````  Panda Cloud Cleaner     Java 8 Update 60    Visual Studio Extensions for Windows Library for JavaScript  Adobe Flash Player     19.0.0.185    Mozilla Firefox (40.0.3) ````````Process Check: objlist.exe by Laurent````````   `````````````````System Health check`````````````````  Total Fragmentation on Drive C:  % ````````````````````End of Log``````````````````````

Edited by JoLynch, 01 October 2015 - 04:34 PM.

#6 Sintharius

Posted 02 October 2015 - 03:15 AM

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.2 - Panda Security) iSpeedPC (HKLM-x32\...\{81F28E77-FECC-4517-8D0E-C77113AC0737}) (Version: 1.1.1 - iSpeedPC, Inc)

Posted 02 October 2015 - 06:54 PM

Hi there, Please uninstall the following software with Programs and Features: Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.2 - Panda Security) iSpeedPC (HKLM-x32\...\{81F28E77-FECC-4517-8D0E-C77113AC0737}) (Version: 1.1.1 - iSpeedPC, Inc)

I removed those programs with no problems. Unfortunately, in regards to VirusTotal: SpeechRuntime.exe is completely hidden when attempting to upload it, even when looking in the right location ( C:\Windows\System32\Speech_OneCore\Common) . * Update: Looks like a compressed zip file copy works. VirusTotal claims it's virus-free. Though, as a copy of the original, I am not entirely sure if that makes it valid. I am not tech savvy enough to know the difference, heh!

Though, now I am a bit concerned that uploading it to VirusTotal would be considered a security issue. Is SpeechRuntime.exe something that would contain personal data/information? I know little to nothing about what it actually does.

Panda is still claiming it's no longer malicious, on top of everything else - sounds like this all may have been a false alarm. Or do you think I should attempt to scan the file with a diffrent antivirus/tool?

Thanks again for your help!

Edited by JoLynch, 02 October 2015 - 10:25 PM.

#8 Sintharius

Posted 03 October 2015 - 03:22 AM

• After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
• The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
• When update is complete, click Malware Scan . When asked if you want the scanner to scan for Potentially Unwanted Programs , click Yes . Emsisoft Emergency Kit will start scanning.
• When the scan is completed click Quarantine selected objects . Note, this option is only available if malicious objects were detected during the scan.
• When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
• Please save the log in Notepad on your desktop and post the contents in your next reply.
• When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.

Posted 03 October 2015 - 05:19 AM

Hi there, Please upload the unzipped file to VT instead, as antivirus engines generally don't like compressed files (so archives may appear clean when in fact they are not). I just noticed that you posted another thread on Panda Security Forum here . We can scan with other scanners just to make sure nothing else is there. Emsisoft Emergency Kit Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\). After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop. The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates. When update is complete, click Malware Scan . When asked if you want the scanner to scan for Potentially Unwanted Programs , click Yes . Emsisoft Emergency Kit will start scanning. When the scan is completed click Quarantine selected objects . Note, this option is only available if malicious objects were detected during the scan. When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad. Please save the log in Notepad on your desktop and post the contents in your next reply. When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process. Regards, Alex  

VT did not detect anything on the copied unzipped file. And yes indeed that's me, I figured the Panda Antivirus forums wouldn't hurt, either.

As for EEK, here is the log:

Emsisoft Emergency Kit - Version 10.0 Last update: 10/3/2015 3:06:44 AM User account: J-PC\J Scan settings: Scan type: Malware Scan Objects: Rootkits, Memory, Traces, Files Detect PUPs: On Scan archives: Off ADS Scan: On File extension filter: Off Advanced caching: On Direct disk access: Off Scan start:    10/3/2015 3:07:07 AM Value: HKEY_USERS\S-1-5-21-2955708846-4093058790-3520961471-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR     detected: Setting.DisableTaskMgr (A) Value: HKEY_USERS\S-1-5-21-2955708846-4093058790-3520961471-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS     detected: Setting.DisableRegistryTools (A) C:\wajam_validate.exe     detected: Application.InstallAd (A) Scanned    91119 Found    3 Scan end:    10/3/2015 3:14:03 AM Scan time:    0:06:56 C:\wajam_validate.exe    Quarantined Application.InstallAd (A) Value: HKEY_USERS\S-1-5-21-2955708846-4093058790-3520961471-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS    Quarantined Setting.DisableRegistryTools (A) Value: HKEY_USERS\S-1-5-21-2955708846-4093058790-3520961471-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR    Quarantined Setting.DisableTaskMgr (A) Quarantined    3

Looks like some potentially funky Wajam stuff snuck its way in elsewhere. Though the kit did identify all three as "No Risk". Should I change all web/account passwords to be extra safe?

Thanks for being so patient,

Edited by JoLynch, 03 October 2015 - 05:29 AM.

#10 Sintharius

Posted 03 October 2015 - 10:35 AM

• Read the EULA, then select Accept .
• Wait for Kaspersky Virus Removal Tool to initialize.
• In the main screen, select Change parameters , place a checkmark in System drive , then click OK .
• Click Start scan .
• Wait for Kaspersky Virus Removal Tool to complete scanning.
• When the scan is finished, select Neutralize all for all detected objects.
• Close Kaspersky Virus Removal Tool when done.
• Click here to download the installer for ESET Online Scanner and save it to your Desktop .
• Disable all your antivirus and antimalware software - see how to do that here .
• Right click on esetsmartinstaller_enu.exe and select Run as Administrator .
• Place a checkmark in YES, I accept the Terms of Use , then click Start . Wait for ESET Online Scanner to load its components.
• Select Enable detection of potentially unwanted applications .
• Remove found threats
• Scan archives
• Scan for potentially unsafe applications
• Enable Anti-Stealth technology
• Click Start to begin scanning.
• ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
• When the scan is done, click List threats (only available if ESET Online Scanner found something).
• Click Export , then save the file to your desktop.
• Click Back , then Finish to exit ESET Online Scanner.

#11 JoLynch

Posted 04 October 2015 - 10:36 PM

Hi there, Let me know if they returned the verdict as clean or infected. There is nothing to worry about those detections - Wajam is a browser hijacker, and the other two are policies that can be set by a large variety of programs. We will run two more antivirus scanners to make sure that they are clean. Kaspersky Virus Removal Tool Please download Kaspersky Virus Removal Tool from here . Right click on and select Run as Administrator . Read the EULA, then select Accept . Wait for Kaspersky Virus Removal Tool to initialize. In the main screen, select Change parameters , place a checkmark in System drive , then click OK . Click Start scan . Wait for Kaspersky Virus Removal Tool to complete scanning. When the scan is finished, select Neutralize all for all detected objects. Close Kaspersky Virus Removal Tool when done. Let me know if it found anything. === ESET Online Scanner Click here to download the installer for ESET Online Scanner and save it to your Desktop . Disable all your antivirus and antimalware software - see how to do that here . Right click on esetsmartinstaller_enu.exe and select Run as Administrator . Place a checkmark in YES, I accept the Terms of Use , then click Start . Wait for ESET Online Scanner to load its components. Select Enable detection of potentially unwanted applications . Click Advanced Settings , then place a checkmark in the following: Remove found threats Scan archives Scan for potentially unsafe applications Enable Anti-Stealth technology Click Start to begin scanning. ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time. When the scan is done, click List threats (only available if ESET Online Scanner found something). Click Export , then save the file to your desktop. Click Back , then Finish to exit ESET Online Scanner. Regards, Alex  

Both Kaspersky and ESET have found some non-malicious PUPs, which I've removed. (They were all variants of "win32/toolbar.visicom.A" - you wouldn't happen to know which program/feature this comes from, would you? Just curious).

Still waiting to hear the final verdict from the Panda forums. I will keep you posted.

*Update: Looks like they do not think the file is infected. They originally wanted me to send them the file so they could check it, but after mentioning that I had ran some side programs which cleaned up my cache/etc. - along with Panda no longer considering it malicious - they now deem it safe.

So I suppose that means the case is now closed! I appreciate all your help.

Edited by JoLynch, 05 October 2015 - 02:12 AM.

#12 Sintharius

Posted 05 October 2015 - 08:12 AM

• Close all running programs and start DelFix.
• Make sure all available options are checked.
• Click Run .
• DelFix will remove the most of the tools used during the cleaning process, purge all system restore points and create a new one, activate UAC (if you have it disabled) and restore settings changed by malware removal tools.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

• Privacy Policy
• Rules ·

Community Forum Software by IP.Board

• Need an account? Register now!
• Forum Password I've forgotten my password
• Remember me This is not recommended for shared computers
• Sign in anonymously Don't add me to the active users list

Contribute to the Windows Insider forum! Click  HERE  to learn more  💡

March 14, 2024

Contribute to the Windows Insider forum!

Click  HERE  to learn more  💡

Top Contributors in Windows Insider Program: CrazyKats  -  BryceSor  -  Pauli O   ✅

March 11, 2024

Top Contributors in Windows Insider Program:

CrazyKats  -  BryceSor  -  Pauli O   ✅

• Search the community and support articles
• Windows Insider Preview
• Windows Insider Program
• Search Community member

Ask a new question

BEX - SpeechRuntime.exe problem in win-10.ver 1703 OS Build 16215.1000

Extra information about the problem Bucket ID: 210c5aa1c679cf8278ae5a2978ec7cd8 (116393041281)

Need help .

***Post moved by the moderator to the appropriate forum category.***

Report abuse

Replies (3) .

• Microsoft Agent |

We understand that you are seeking assistance with the issue that you are having with your Windows 10 PC. To help you resolve the issue, kindly supplement us with further information by answering the questions below.

• What were you trying to accomplish on your Windows 10 PC which prompts you with those event logs?
• What are the troubleshooting steps that you have done in an attempt to resolve the issue?
• Were there changes made prior to the issue?

We look forward to your prompt response.

Was this reply helpful? Yes No

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

Thanks for your feedback.

Hello, We understand that you are seeking assistance with the issue that you are having with your Windows 10 PC. To help you resolve the issue, kindly supplement us with further information by answering the questions below. What were you trying to accomplish on your Windows 10 PC which prompts you with those event logs? What are the troubleshooting steps that you have done in an attempt to resolve the issue? Were there changes made prior to the issue? We look forward to your prompt response.

* problem started from 11.06.2017 immediately after installing OS Build 162015.1000 of Insider Home on my PC.

First error got for Speech Runtime .exe - Application error with message The exception unknown software exception(0xc000000d) occurred at the application location 0x77E9559 .

* thereafter , message got Microsoft Visual C+ + Runtime Library error and other error Runtime error 

"Progam:X:Windows/System32/WerFault.exe.

* Windows Perception Service stopped working - Problem Name : BEX , APPLICATION NAME : SPECTRUM.EXE.

All Windows 10 TRoubleshooter in setting have been run togather with DISM , but with futile result. DISM scan run upto 85% and stopped. PS scan did not run 

Tried to download and install OS 16226.1000 through windows update, Updates comes through windows update , some times it download 100% but Installation cold not be completed and failed. 

Win-10 system refreshed run on Dt.19.06.2017 and run successfully. but problem remains as it was.

1 person found this reply helpful

We appreciate your quick response. Since the automated troubleshooters, and the DISM tool failed to resolve the issue we recommend that you perform a clean boot. A clean boot is performed to start Windows by using a minimal set of drivers and startup programs. This helps eliminate software conflicts that occur when you install a program or an update or when you run a program in Windows 10. You may refer to the article below for the steps.

How to perform a clean boot in Windows

Question Info

• Windows Update
• Norsk Bokmål
• Ελληνικά
• Русский
• עברית
• العربية
• ไทย
• 한국어
• 中文(简体)
• 中文(繁體)
• 日本語