Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-12-2014 Ran by Jesse Pinkman at 2014-12-06 17:09:48 Running from E:\Documents and Settings\Jesse Pinkman\My Documents\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Arcabit (Disabled - Up to date) {430EE792-8EF9-4D8A-B486-78BBF686F0E1} FW: Arcabit Firewall (Disabled) {B640009B-6FF6-4CA7-9CE8-7DA160B95A5B} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD) Arcabit (HKLM\...\Arcabit) (Version: 2014 - Arcabit) Euro Truck Simulator 2 v1.5.2.1s with Going East DLC (HKLM\...\Euro Truck Simulator 2 v1.5.2.1s with Going East DLC1.5.2.1s) (Version: 1.5.2.1s - Friends in War) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5856 - NVIDIA Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation) NVIDIA PhysX (HKLM\...\{B4F3A360-E1E2-479D-ADE7-9BE3B07F4539}) (Version: 9.10.0223 - NVIDIA Corporation) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5953 - Realtek Semiconductor Corp.) SafePCRepair (HKLM\...\Mindspark SafePCRepair) (Version: 1.0.8056.14 - Mindspark Interactive Network) <==== ATTENTION WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 28-11-2014 15:56:11 Restore Operation 01-12-2014 18:56:01 Installed Microsoft Visual C++ 2005 Redistributable 01-12-2014 18:56:20 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2014-07-11 20:25 - 2014-07-11 20:25 - 00000768 ____A E:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 mpa.one.microsoft.com ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Loaded Modules (whitelisted) ============= 2014-07-11 20:25 - 2014-07-11 20:25 - 00059904 _____ () E:\WINDOWS\system32\devenum.dll 2014-07-11 20:25 - 2014-07-11 20:26 - 00014336 _____ () E:\WINDOWS\system32\msdmo.dll 2014-11-26 10:03 - 2014-11-25 07:39 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll 2014-11-26 10:03 - 2014-11-25 07:39 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll 2014-11-26 10:03 - 2014-11-25 07:39 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\PepperFlash\pepflashplayer.dll 2014-12-01 19:56 - 2014-12-06 15:15 - 00303176 _____ () E:\Program Files\Arcabit\arcavir\arcascan\ScanEngineCon.exe ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"="" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: ctfmon.exe => E:\WINDOWS\system32\CTFMON.EXE MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup MSCONFIG\startupreg: NvMediaCenter => RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit MSCONFIG\startupreg: RTHDCPL => RTHDCPL.EXE ========================= Accounts: ========================== Administrator (S-1-5-21-436374069-2147134463-682003330-500 - Administrator - Enabled) Guest (S-1-5-21-436374069-2147134463-682003330-501 - Limited - Disabled) HelpAssistant (S-1-5-21-436374069-2147134463-682003330-1000 - Limited - Disabled) Jesse Pinkman (S-1-5-21-436374069-2147134463-682003330-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Jesse Pinkman SUPPORT_388945a0 (S-1-5-21-436374069-2147134463-682003330-1002 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= Name: Network Controller Description: Network Controller Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318} Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (12/06/2014 03:28:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application arcamainsv.exe, version 1.0.5441.25858, faulting module ns.dll, version 2014.0.0.255, fault address 0x0001a47f. Processing media-specific event for [arcamainsv.exe!ws!] Error: (12/06/2014 03:21:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application arcamainsv.exe, version 1.0.5441.25858, faulting module ns.dll, version 2014.0.0.255, fault address 0x0001a47f. Processing media-specific event for [arcamainsv.exe!ws!] Error: (07/18/2014 09:27:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application eurotrucks2.exe, version 1.5.2.47212, faulting module eurotrucks2.exe, version 1.5.2.47212, fault address 0x00453de0. Processing media-specific event for [eurotrucks2.exe!ws!] Error: (07/18/2014 09:24:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application eurotrucks2.exe, version 1.5.2.47212, faulting module eurotrucks2.exe, version 1.5.2.47212, fault address 0x00453e1a. Processing media-specific event for [eurotrucks2.exe!ws!] Error: (07/18/2014 09:22:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application eurotrucks2.exe, version 1.5.2.47212, faulting module eurotrucks2.exe, version 1.5.2.47212, fault address 0x00453e62. Processing media-specific event for [eurotrucks2.exe!ws!] System errors: ============= Error: (12/06/2014 03:56:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Arcabit Config Service service terminated unexpectedly. It has done this 3 time(s). Error: (12/06/2014 03:56:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Arcabit Control service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (12/06/2014 03:56:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Arcabit Control service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (12/06/2014 03:56:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Arcabit Config Service service terminated unexpectedly. It has done this 2 time(s). Error: (12/06/2014 03:56:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Arcabit Main Service service terminated unexpectedly. It has done this 3 time(s). Error: (12/06/2014 03:56:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Arcabit Control service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (12/06/2014 03:56:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Arcabit Backup Service service terminated unexpectedly. It has done this 1 time(s). Error: (12/06/2014 03:56:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Arcabit Config Service service terminated unexpectedly. It has done this 1 time(s). Error: (12/06/2014 03:56:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Arcabit Control service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (12/06/2014 03:46:50 PM) (Source: 0) (EventID: 8003) (User: ) Description: \Device\LanmanDatagramReceiverMICHA¥-LAPTOPNetBT_Tcpip_{A8988C62-9D4A- Microsoft Office Sessions: ========================= Error: (12/06/2014 03:28:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: arcamainsv.exe1.0.5441.25858ns.dll2014.0.0.2550001a47f Error: (12/06/2014 03:21:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: arcamainsv.exe1.0.5441.25858ns.dll2014.0.0.2550001a47f Error: (07/18/2014 09:27:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: eurotrucks2.exe1.5.2.47212eurotrucks2.exe1.5.2.4721200453de0 Error: (07/18/2014 09:24:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: eurotrucks2.exe1.5.2.47212eurotrucks2.exe1.5.2.4721200453e1a Error: (07/18/2014 09:22:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: eurotrucks2.exe1.5.2.47212eurotrucks2.exe1.5.2.4721200453e62 ==================== Memory info =========================== Processor: AMD Phenom(tm) II X2 550 Processor Percentage of memory in use: 29% Total physical RAM: 3327.17 MB Available physical RAM: 2334.32 MB Total Pagefile: 5211.27 MB Available Pagefile: 4028.18 MB Total Virtual: 2047.88 MB Available Virtual: 1945.9 MB ==================== Drives ================================ Drive c: (Win 7 + bzdety) (Fixed) (Total:480.42 GB) (Free:126.36 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive e: (Win XP) (Fixed) (Total:30 GB) (Free:21.22 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive f: (Wojny MAGAZYNOWE) (Fixed) (Total:391.09 GB) (Free:185.29 GB) NTFS Drive g: (Win 8.1) (Fixed) (Total:30 GB) (Free:10.61 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 07173150) Partition 1: (Active) - (Size=480.4 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=391.1 GB) - (Type=OF Extended) Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=30 GB) - (Type=07 NTFS) ==================== End Of Log ============================