Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2014 Ran by Pawel at 2014-11-13 20:27:29 Running from C:\Users\Pawel\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2615021221-2235552605-2224125913-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games) AMD Catalyst Install Manager (HKLM\...\{C2956908-53A3-88FC-B795-B16508296FC4}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5557 - AVG Technologies) AVG 2015 (Version: 15.0.4213 - AVG Technologies) Hidden AVG 2015 (Version: 15.0.5557 - AVG Technologies) Hidden Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB) CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform) Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version: - Valve) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software) Far Cry 3 (HKLM-x32\...\Uplay Install 46) (Version: - Ubisoft) Fraps (HKLM-x32\...\Fraps) (Version: - ) Ghostbusters: The Video Game (HKLM-x32\...\Steam App 9870) (Version: - Terminal Reality) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) Killing Floor - Toy Master (HKLM-x32\...\Steam App 326960) (Version: - David Hensley) Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive) K-Lite Codec Pack 10.8.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.0 - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 pl)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla) Mp3tag v2.65a (HKLM-x32\...\Mp3tag) (Version: v2.65a - Florian Heidenreich) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Nosgoth (HKLM-x32\...\Steam App 200110) (Version: - Psyonix) NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice.org 2.4 (HKLM-x32\...\{E33DB440-A008-4928-8A4E-5FC5ADDED608}) (Version: 2.4.9364 - OpenOffice.org) Opera Stable 25.0.1614.68 (HKLM-x32\...\Opera 25.0.1614.68) (Version: 25.0.1614.68 - Opera Software ASA) Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH) PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH) PDF Editor 4 (HKLM-x32\...\PDF Editor 4) (Version: - ) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.) Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition) Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.) Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) System Requirements Lab CYRI (HKLM-x32\...\{2DF5765E-5386-4540-9383-DBC9A0A596F9}) (Version: 6.0.15.0 - Husdawg, LLC) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Binding of Isaac Rebirth 1.0 (HKLM-x32\...\The Binding of Isaac Rebirth 1.0) (Version: 1.0 - Games on Cat-A-Cat.Net) Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.8.10 - Electronic Arts) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN) WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 28-10-2014 17:38:01 Installed DirectX 29-10-2014 16:26:32 Installed DirectX 29-10-2014 16:28:46 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 29-10-2014 16:29:17 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 29-10-2014 16:29:32 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 29-10-2014 16:30:07 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 01-11-2014 17:27:34 Installed DirectX 07-11-2014 00:46:28 Installed DirectX 12-11-2014 08:56:11 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {056E3149-C966-4A8E-B111-B93C1445C007} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.) Task: {10BBA1FB-D71A-47CE-9990-ED29B7EAEA47} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-13] (Adobe Systems Incorporated) Task: {87AC9404-D465-4CE2-ACC9-220CECB5CD90} - System32\Tasks\ASP => C:\Program Files (x86)\RCP\systweakasp.exe Task: {919DF099-B23B-41D1-B5E2-920AEA609088} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.) Task: {B332336D-6782-4C7D-AB4B-6FEBFED63279} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd) Task: {F72471C1-AA6B-44CF-94AD-4C966A954BEA} - System32\Tasks\Opera scheduled Autoupdate 1413723126 => C:\Program Files (x86)\Opera\launcher.exe [2014-10-29] (Opera Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-10-29 19:24 - 2014-10-29 19:24 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2014-10-18 17:20 - 2014-06-04 09:21 - 00571904 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2014-10-18 17:20 - 2014-05-19 16:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-2615021221-2235552605-2224125913-500 - Administrator - Disabled) Guest (S-1-5-21-2615021221-2235552605-2224125913-501 - Limited - Disabled) Kuba (S-1-5-21-2615021221-2235552605-2224125913-1001 - Administrator - Enabled) => C:\Users\Kuba Pawel (S-1-5-21-2615021221-2235552605-2224125913-1000 - Administrator - Enabled) => C:\Users\Pawel Tata (S-1-5-21-2615021221-2235552605-2224125913-1002 - Administrator - Enabled) => C:\Users\Tata ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/13/2014 07:03:26 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/13/2014 04:38:55 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/13/2014 03:33:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: bf4.exe, version: 1.3.2.15221, time stamp: 0x541a1598 Faulting module name: bf4.exe, version: 1.3.2.15221, time stamp: 0x541a1598 Exception code: 0xc0000005 Fault offset: 0x00000000002a1e7b Faulting process id: 0xb1c Faulting application start time: 0xbf4.exe0 Faulting application path: bf4.exe1 Faulting module path: bf4.exe2 Report Id: bf4.exe3 Error: (11/13/2014 02:42:21 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/13/2014 02:03:43 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: bf3.exe, version: 1.6.0.0, time stamp: 0x511c9356 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x00000000 Faulting process id: 0xcac Faulting application start time: 0xbf3.exe0 Faulting application path: bf3.exe1 Faulting module path: bf3.exe2 Report Id: bf3.exe3 Error: (11/12/2014 03:49:12 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/12/2014 00:27:29 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/12/2014 09:01:54 AM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: ATI EEU Client has failed to start Error: (11/12/2014 01:55:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: TitanFall.exe, version: 1.0.0.0, time stamp: 0x5420d832 Faulting module name: dxgi.dll, version: 6.2.9200.16492, time stamp: 0x50f30fbd Exception code: 0xc0000005 Fault offset: 0x0000000000022f56 Faulting process id: 0x198 Faulting application start time: 0xTitanFall.exe0 Faulting application path: TitanFall.exe1 Faulting module path: TitanFall.exe2 Report Id: TitanFall.exe3 Error: (11/11/2014 08:12:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: TitanFall.exe, version: 1.0.0.0, time stamp: 0x5420d832 Faulting module name: dxgi.dll, version: 6.2.9200.16492, time stamp: 0x50f30fbd Exception code: 0xc0000005 Fault offset: 0x0000000000022f56 Faulting process id: 0xf40 Faulting application start time: 0xTitanFall.exe0 Faulting application path: TitanFall.exe1 Faulting module path: TitanFall.exe2 Report Id: TitanFall.exe3 System errors: ============= Error: (11/11/2014 11:46:00 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:59 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:49 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:48 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:47 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:46 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:45 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:44 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:43 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (11/11/2014 11:45:42 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Microsoft Office Sessions: ========================= Error: (11/13/2014 07:03:26 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/13/2014 04:38:55 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/13/2014 03:33:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: bf4.exe1.3.2.15221541a1598bf4.exe1.3.2.15221541a1598c000000500000000002a1e7bb1c01cfff4d7d6df351D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exeD:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe004fe981-6b42-11e4-9d37-bcaec56b742f Error: (11/13/2014 02:42:21 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/13/2014 02:03:43 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: bf3.exe1.6.0.0511c9356unknown0.0.0.000000000c000000500000000cac01cffed728f17c49D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exeunknowne914c2d8-6ad0-11e4-9021-bcaec56b742f Error: (11/12/2014 03:49:12 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/12/2014 00:27:29 PM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/12/2014 09:01:54 AM) (Source: ATIeRecord) (EventID: 16386) (User: ) Description: Error: (11/12/2014 01:55:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: TitanFall.exe1.0.0.05420d832dxgi.dll6.2.9200.1649250f30fbdc00000050000000000022f5619801cffe040e9b2eaaD:\Program Files (x86)\Origin Games\Titanfall\TitanFall.exeC:\Windows\system32\dxgi.dll908a2a58-6a06-11e4-a601-bcaec56b742f Error: (11/11/2014 08:12:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TitanFall.exe1.0.0.05420d832dxgi.dll6.2.9200.1649250f30fbdc00000050000000000022f56f4001cffdd4fc5dfc22D:\Program Files (x86)\Origin Games\Titanfall\TitanFall.exeC:\Windows\system32\dxgi.dllb1a200e1-69d6-11e4-a601-bcaec56b742f ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz Percentage of memory in use: 48% Total physical RAM: 4078.32 MB Available physical RAM: 2101.42 MB Total Pagefile: 8154.82 MB Available Pagefile: 6454.72 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:466.26 GB) (Free:415.97 GB) NTFS Drive d: () (Fixed) (Total:465.16 GB) (Free:248.19 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: BC920B95) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=466.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS) ==================== End Of Log ============================