Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2013 Ran by KAROKO at 2013-11-13 03:58:21 Running from C:\Users\KAROKO\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} ==================== Installed Programs ====================== Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) AutoIt v3.3.8.1 (x32) Business Everywhere (x32 Version: 4.1.102) CCleaner (Version: 4.06) Comodo Dragon (x32 Version: 27.0.4.0) Fallen Earth (x32) Garry's Mod (x32) GG (HKCU Version: 12) Half-Life 2 (x32) iLivid (x32 Version: 5.0.0.4002) Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190) League of Legends (x32 Version: 3.0.1) LOLReplay (x32 Version: 0.8.3.0) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Mozilla Firefox 24.0 (x86 lv) (x32 Version: 24.0) Notepad++ (x32 Version: 6.5) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662) SciTE4AutoIt3 4/5/2013 (x32 Version: 4/5/2013) Sierra Utilities (x32) Star Conflict (x32) Steam (x32 Version: 1.0.0.0) SuperFrog (Nieoficjalna wersja pod Windows) (HKCU) Team Fortress 2 (x32) TeamSpeak 3 Client (HKCU Version: 3.0.13.1) Total Commander 64-bit (Remove or Repair) (Version: 8.01) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Uplink (x32 Version: 1.00.0000) WinRAR 4.20 (64-bit) (Version: 4.20.0) ==================== Restore Points ========================= 13-11-2013 02:00:37 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-09-22 16:36 - 00438845 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {6FAF90B0-23B8-426A-A60A-0A14A3277567} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd) ==================== Loaded Modules (whitelisted) ============= 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () D:\Program Files (x86)\Notepad++\NppShell_05.dll 2013-05-03 07:09 - 2013-05-03 07:09 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll 2012-06-06 16:13 - 2012-06-06 16:13 - 00093184 _____ () C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\GIS.dll 2012-06-06 16:13 - 2012-06-06 16:13 - 00182784 _____ () C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\ProxyDetection.dll 2012-06-06 16:13 - 2012-06-06 16:13 - 01105920 _____ () C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\NDISAPI.dll 2012-08-17 20:38 - 2012-08-17 20:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll 2013-05-29 13:19 - 2013-05-29 13:19 - 00976520 _____ () C:\Program Files (x86)\Comodo\Dragon\ffmpegsumo.dll 2013-10-15 12:53 - 2013-10-15 13:41 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\KAROKO\Downloads\cennik.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/13/2013 02:59:42 AM) (Source: Application Error) (User: ) Description: Faulting application name: k6kjzc11.exe, version: 2.1.19163.0, time stamp: 0x515d31f0 Faulting module name: k6kjzc11.exe, version: 2.1.19163.0, time stamp: 0x515d31f0 Exception code: 0xc0000005 Fault offset: 0x0008c870 Faulting process id: 0x130c Faulting application start time: 0xk6kjzc11.exe0 Faulting application path: k6kjzc11.exe1 Faulting module path: k6kjzc11.exe2 Report Id: k6kjzc11.exe3 Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service) (User: ) Description: The index cannot be initialized. Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service) (User: ) Description: The application cannot be initialized. Context: Windows Application Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service) (User: ) Description: The gatherer object cannot be initialized. Context: Windows Application, SystemIndex Catalog Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service) (User: ) Description: The plug-in in cannot be initialized. Context: Windows Application, SystemIndex Catalog Details: Element not found. (HRESULT : 0x80070490) (0x80070490) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service) (User: ) Description: The plug-in in cannot be initialized. Context: Windows Application, SystemIndex Catalog Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service) (User: ) Description: The Windows Search Service cannot load the property store information. Context: Windows Application, SystemIndex Catalog Details: The content index database is corrupt. (HRESULT : 0xc0041800) (0xc0041800) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service) (User: ) Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt. Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service) (User: ) Description: The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index. Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service) (User: ) Description: The Windows Search Service cannot open the Jet property store. Details: 0x%08x (0xc0041800 - The content index database is corrupt. (HRESULT : 0xc0041800)) System errors: ============= Error: (11/13/2013 02:36:40 AM) (Source: Service Control Manager) (User: ) Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (11/13/2013 02:36:40 AM) (Source: Service Control Manager) (User: ) Description: The Windows Search service terminated with service-specific error %%-1073473535. Error: (11/13/2013 02:34:05 AM) (Source: DCOM) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Microsoft Office Sessions: ========================= Error: (11/13/2013 02:59:42 AM) (Source: Application Error)(User: ) Description: k6kjzc11.exe2.1.19163.0515d31f0k6kjzc11.exe2.1.19163.0515d31f0c00000050008c870130c01cee0135133b250C:\Users\KAROKO\Downloads\k6kjzc11.exeC:\Users\KAROKO\Downloads\k6kjzc11.exe428e1280-4c07-11e3-9e15-001d7d95f2aa Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service)(User: ) Description: Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service)(User: ) Description: Context: Windows Application Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service)(User: ) Description: Context: Windows Application, SystemIndex Catalog Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/13/2013 02:36:40 AM) (Source: Windows Search Service)(User: ) Description: Context: Windows Application, SystemIndex Catalog Details: Element not found. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service)(User: ) Description: Context: Windows Application, SystemIndex Catalog Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service)(User: ) Description: Context: Windows Application, SystemIndex Catalog Details: The content index database is corrupt. (HRESULT : 0xc0041800) (0xc0041800) Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service)(User: ) Description: Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service)(User: ) Description: Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) 4700 Error: (11/13/2013 02:36:39 AM) (Source: Windows Search Service)(User: ) Description: Details: 0x%08x (0xc0041800 - The content index database is corrupt. (HRESULT : 0xc0041800)) CodeIntegrity Errors: =================================== Date: 2013-11-02 00:57:54.191 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-11-02 00:57:54.187 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-11-02 00:57:54.174 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-11-02 00:57:54.157 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-11-02 00:57:54.154 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-11-02 00:57:54.150 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-10-22 18:01:51.121 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-10-22 18:01:51.121 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-10-22 18:01:51.121 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-10-22 18:01:51.106 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 85% Total physical RAM: 2046.55 MB Available physical RAM: 304.59 MB Total Pagefile: 4093.11 MB Available Pagefile: 1722.41 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:48.73 GB) (Free:14.92 GB) NTFS Drive d: () (Fixed) (Total:100.21 GB) (Free:46.83 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 1BAF1BAE) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=100 GB) - (Type=OF Extended) ==================== End Of Log ============================