Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-03-2015 01 Ran by faf at 2015-03-06 15:42:12 Running from C:\ Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 18 Wheels of Steel: Extreme Trucker (HKLM-x32\...\18 Wheels of Steel - Extreme Trucker/PL-Polish_is1) (Version: - City Interactive) 18 Wheels of Steel: Pedal to the Metal (HKLM-x32\...\18 Wheels of Steel - Pedal to the Metal/PL-Polish_is1) (Version: - City Interactive) ABC z Reksiem (HKLM-x32\...\{B37A722C-08C4-4E83-BA7B-E5B186F0B894}) (Version: 1.0.0 - AidemMedia) Adobe Acrobat 5.0 CE (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.1.0.1 - Aerosoft) Agrar Symulator 2011 Złota Edycja (HKLM-x32\...\{67C8CE24-8B36-4314-832B-0EB258767866}) (Version: 1.0.0 - Techland) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}) (Version: 1.5.17.25482 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden Angry Birds Breakfast 1 (HKLM-x32\...\{DE5BE262-C5E7-49B2-A673-56A3E2522F06}) (Version: 1.0.16 - Rovio Entertainment Ltd.) Application Verifier x64 External Package (Version: 8.59.29722 - Microsoft) Hidden ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0019 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.33 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0007 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS) ASUS USB2.0 UVC VGA WebCam (HKLM\...\ASUS USB2.0 UVC VGA WebCam) (Version: 5.8.53120.202 - Sonix) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.19 - asus) Atak na zamek (HKLM-x32\...\{DEDD4955-2517-48B1-87E6-0FBC0161D551}) (Version: - ) ATI AVIVO64 Codecs (Version: 10.12.0.00122 - ATI Technologies Inc.) Hidden ATI Catalyst Install Manager (HKLM\...\{D0528577-31BF-2ABC-D7FC-E443EBF8B40A}) (Version: 3.0.758.0 - ATI Technologies, Inc.) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0001 - ASUS) Battle Nations (HKLM-x32\...\Steam App 251670) (Version: - Z2) Battlestations: Pacific (HKLM-x32\...\{BBAB6D5D-1DD4-4D46-B5D9-121DCAB17DEC}) (Version: 1.00.0000 - Nazwa firmy) Bolek i Lolek - j. angielski dla dzieci cz.1 (HKLM-x32\...\{63608909-EE21-4CFE-89E7-B098A54AD837}) (Version: 1.0.0 - AidemMedia) Bolek i Lolek - Zwariowana Olimpiada (HKLM-x32\...\{FEC6E546-0DA2-49A1-AFED-D52ECD3EEFD6}) (Version: 1.0.0 - AidemMedia) Bridge! (HKLM-x32\...\{22EDD164-65D5-41DD-961E-08C7CDA4D471}) (Version: 1.16 - aerosoft) Bujdy na resorach (HKLM-x32\...\{D3134B42-9761-4186-9051-08D531E1CB25}) (Version: 1.00.0000 - Disney Interactive Studios) CamStudio Lossless Codec (HKLM-x32\...\camcodec) (Version: - ) Castle Attack 2 v1.00 (HKLM-x32\...\Castle Attack 2) (Version: - ) ccc-core-static (x32 Version: 2010.0122.858.16002 - ATI) Hidden Code of Honor 2 (HKLM-x32\...\Code of Honor 2/PL-Polish_is1) (Version: - City Interactive) Codename Panzers Cold War (HKLM\...\Codename Panzers Cold War_is1) (Version: - ) Conspiracy : Weapons of mass destruction (HKLM-x32\...\{5B648419-8FA0-467B-9D04-53320BDE7AB3}) (Version: 1.00.0000 - Oxygen) Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation) ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS) Crash Time 5 – Undercover (HKLM-x32\...\Crash Time 5 – Undercover 1.0.0) (Version: 1.0.0 - Techland) Crash Time 5 – Undercover (x32 Version: 1.0.0 - Techland) Hidden Crash Time II (HKLM-x32\...\Crash Time II/PL-Polish_is1) (Version: - City Interactive) Crash Time III (HKLM-x32\...\Crash Time III/PL-Polish_is1) (Version: - City Interactive) DRIV3R (HKLM-x32\...\{01DBF423-E27B-45DA-B7F3-F9D4DB39B1C9}) (Version: 1.00.000 - Atari) Driver: Parallel Lines (HKLM-x32\...\{31CB0D80-1866-462A-9455-88614410971F}) (Version: 1.00.0000 - Ubisoft) Enigma: Rising Tide (HKLM-x32\...\Enigma: Rising Tide) (Version: - ) EnigmaSAPI (HKLM-x32\...\{94DB450B-7A9C-4496-BE2C-52F3D237FDFE}) (Version: 1.0.0.0 - TesserAction Games) ESR (HKLM-x32\...\ESR/PL-Polish_is1) (Version: - City Interactive) ETDWare PS/2-x64 7.0.5.10_WHQL (HKLM\...\Elantech) (Version: 7.0.5.10 - ELAN Microelectronics Corp.) Far Cry (HKLM-x32\...\FarCry_is1) (Version: - Cenega Poland Sp. z o. o.) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.5 - ASUS) FlatOut (HKLM-x32\...\{8D264CE2-4261-4ECC-95FD-263286A9F8E8}_is1) (Version: 1 - Techland) FlatOut 2 (HKLM-x32\...\{4148B05E-FF62-4FD0-9FD4-689048F7A611}_is1) (Version: 2 - Techland) FlightGear v2.12.1 (HKLM\...\FlightGear_is1) (Version: - The FlightGear Team) Frontline: Fields of Thunder - demo (HKLM-x32\...\{DF847BEB-C08B-4E5B-8069-DDC025A38A28}) (Version: 1.00 - CDV) GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - ) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Gore - Ultimate soldier (HKLM-x32\...\Gore - Ultimate soldier) (Version: - ) GPGNet (HKLM-x32\...\{C194D333-B84A-4BB7-B35E-060732D98DC4}) (Version: 1.0.0 - Gas Powered Games) Gregion 3.1 (HKLM-x32\...\Gregion 3.1) (Version: - Gregion) Gregion 3.1 (x32 Version: 3.1 - Gregion) Hidden GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games) GTR 2 (HKLM-x32\...\{061B823E-CE21-44DB-B9A2-4B106DBEA53B}) (Version: 1.1.0.0 - SimBin) Heroes Over Europe (HKLM-x32\...\{0101386E-6E51-4544-A66E-26FA06FF1776}) (Version: 1.02 - Ubisoft) Hitman - Krwawa Forsa (HKLM-x32\...\{4ABCCAA5-468D-4668-9C19-78F0D775F4C9}) (Version: 1.00.0000 - Eidos) Hotelowe Imperium (HKLM-x32\...\{87A8C9C6-4B93-4E40-ADBD-01FFD0996D9B}_is1) (Version: - nowe-media.eu) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6259.0 - IDT) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) InterActual Player (HKLM-x32\...\InterActual Player) (Version: - ) Jet Storm: Modern Dogfights (HKLM-x32\...\jet_storm_pl) (Version: - ) K_Series_ScreenSaver_EN (HKLM-x32\...\K_Series_ScreenSaver_EN) (Version: - ) Kajko i Kokosz - Cudowny Lek v. 1.017 (HKLM-x32\...\Kajko2PL_is1) (Version: - Mirage Interactive) Kits Configuration Installer (x32 Version: 8.59.25584 - Microsoft) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden LEGO® Batman™ 2: DC Super Heroes DEMO (HKLM-x32\...\{C2A58219-DA75-4A46-B3C9-B24EA13F07C5}) (Version: 1.0.0.0 - Warner Bros. Interactive Entertainment) LEGO® Star Wars™: The Complete Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts) LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden LEGO®Star Wars™ III The Clone Wars™ (HKLM-x32\...\{208432AC-ED50-4FAE-A37F-5AA83ACF3066}) (Version: 1.00.0000 - LucasArts) Liczę z Reksiem (HKLM-x32\...\{1EB6FAD0-53BC-4A6C-B4AD-4D667D3CE3C2}) (Version: 1.0.0 - AidemMedia) Lowrider Extreme (HKLM-x32\...\{109D28DA-E555-4896-BF22-E312F764562C}_is1) (Version: - Play sp. z o. o.) Manager polaczen (HKLM-x32\...\{23D624DA-73E3-4633-A34F-01413EFB2E3D}) (Version: 4.1.102 - OrangeBusinessServices) Marine Park Empire 1 (HKLM-x32\...\{15B61D9A-2CE3-4BBD-9008-DB6090120184}_is1) (Version: - techland) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}) (Version: 2.0.675.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{FD052FB9-FE90-4438-B355-15EDC89D8FB1}) (Version: 2.0.673.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Mozilla Firefox 35.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 pl)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) My Program version 1.5 (HKLM-x32\...\My Program_is1) (Version: 1.5 - ) Najemnicy (HKLM-x32\...\Armed Forces Corp/PL-Polish_is1) (Version: - City Interactive) Need for Speed(TM) Hot Pursuit (HKLM-x32\...\{83A606F5-BF6F-42ED-9F33-B9F74297CDED}) (Version: 1.0.0.0 - Electronic Arts) Need for Speed™ Most Wanted (HKLM-x32\...\{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}) (Version: - ) Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1599 - Electronic Arts) Next Car Game Free Technology Demo (HKLM-x32\...\Next Car Game Free Technology Demo) (Version: - Bugbear Entertainment) NVIDIA GAME System Software 2.8.1 (HKLM-x32\...\{4F0C7CCF-5666-474B-B02E-AC514A95EC93}) (Version: 2.8.1 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation) NWZ-E360 WALKMAN Guide (HKLM-x32\...\{653A0F15-C146-46E8-8309-92A97ACEBEF6}) (Version: 2.1.0.14010 - Sony Corporation) Odlotowa Farma 3 (HKLM-x32\...\{B118FE95-CB81-4C61-8523-EB9B01AE4067}_is1) (Version: - nowe-media.eu) Open It! (HKLM-x32\...\OpenIt Open It!) (Version: 1.1.1 - OpenIt) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.) Pacific Liberation Force 1.0 (HKLM-x32\...\Pacific Liberation Force) (Version: 1.0 - Team6 game studios) Pacific Storm (HKLM-x32\...\{7B33A30A-FE01-4BA1-858F-ACB80EABBD25}_is1) (Version: - ) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) Panzer Elite Action – Dunes of War Singleplayer Demo (HKLM-x32\...\{BD56B185-A07D-4B90-B786-84A9E0095283}) (Version: 1.44.07 - JoWooD) PDF Creator (HKLM\...\PDF Creator) (Version: - ) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.5 - Frank Heindörfer, Philip Chinery) Project IGI2 - Covert Strike (HKLM-x32\...\{AF9DF4B7-5BDE-42F5-94EF-53311B55566B}) (Version: 1.2 - ) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) RTL Winter Sports 2009 (HKLM-x32\...\RTL Winter Sports 2009/PL-Polish_is1) (Version: - City Interactive) Sąsiedzi z Piekła Rodem 1 i 2 (HKLM-x32\...\{6AAF923E-077E-4543-BA1C-42A75BB03677}) (Version: 1.0 - ) Scooby-Doo!(TM) Pierwsze Strachy DEMO (HKLM-x32\...\{FE226068-F15B-40AE-BEC1-472BBB39DFD7}) (Version: 1.00 - WB Games) SDK Debuggers (x32 Version: 8.59.29746 - Microsoft Corporation) Hidden Ship Simulator 2008 Demo (HKLM-x32\...\ShipSim2008Demo) (Version: - ) Ship Simulator Extremes Demo (HKLM-x32\...\ShipSimExtremesDemo) (Version: - ) Sid Meier's Civilization V (HKLM-x32\...\steam app 8930) (Version: - 2K Games, Inc.) Sid Meier's Railroad Tycoon (HKLM-x32\...\Sid Meier's Railroad Tycoon) (Version: 1.0 - 2K Games) SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Sniper: Ghost Warrior (HKLM-x32\...\Sniper - Ghost Warrior/PL-Polish_is1) (Version: - City Interactive) Star Gunner (HKLM-x32\...\StarGunner_is1) (Version: 1.0 - Media Contact LLC) Star Rage (HKLM-x32\...\StarRage_is1) (Version: 1.0 - Media Contact LLC) Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts) Starmageddon 2 (HKLM-x32\...\Project Freedom/PL-Polish_is1) (Version: - City Interactive) Starship Troopers (HKLM-x32\...\{6FF64EF3-1940-4DE3-BFB8-CA7CF29F6AC2}) (Version: 1.00.000 - ) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Stronghold 2 Deluxe (HKLM-x32\...\{417FE195-C31B-4A41-A057-E7404188B32E}) (Version: 1.00.000 - ) Supreme Commander - W obliczu wroga (HKLM-x32\...\{31D95937-B237-405D-920C-A3EF4E482395}) (Version: 1.00.0000 - Gas Powered Games) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Symulator Autobusu (HKLM-x32\...\Symulator Autobusu) (Version: 1 - Techland) Symulator Czołgu (HKLM-x32\...\{5DB8E8EE-07F4-419D-8A76-3365D54B6695}_is1) (Version: 2 - Techland) Symulator Misji na Marsa (HKLM-x32\...\{648CF280-9CB7-4F70-A159-EF38ED674BF9}_is1) (Version: 1.0 - Techland) Symulator Pojazdów Specjalnych (HKLM-x32\...\{8590B5B5-14E5-433C-90EA-07B448F220FF}_is1) (Version: 1.46 - Techland) Symulator Robót Górniczych (HKLM-x32\...\{22E726C2-DFEF-4B9E-BA74-4B01F9C3357F}_is1) (Version: 1105 - Techland) Symulator stoczni 2013 (HKLM-x32\...\{86B76274-C300-4969-8268-2F51E4F9E8E3}_is1) (Version: 1.0 - astragon Software GmbH) Symulator Śmieciarki (HKLM-x32\...\Symulator Śmieciarki) (Version: - Techland) Symulator transportu rzecznego (HKLM-x32\...\{9F2DE2C2-3AD1-4EAF-86F4-F5913AB2AE38}_is1) (Version: 1.22 - astragon) Symulator wyburzania budynków (HKLM-x32\...\Symulator wyburzania budynków/PL-Polish_is1) (Version: - City Interactive) Szkoła podstawowa klasa 4 - Wczoraj i dziś (HKLM-x32\...\Szkoła podstawowa klasa 4 - Wczoraj i dziś) (Version: - ) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) TerraWars Demo (HKLM-x32\...\{CEE71479-228F-4B3B-B635-4EE15F54ECB0}) (Version: 0.06.0726 - Ladyluck Digital Media) The Sims™ 2 (HKLM-x32\...\{2C82E097-694E-44ea-A947-2750679469CF}) (Version: - Electronic Arts) ToCA Race Driver 2 (HKLM-x32\...\{3B8D7840-BBED-11D8-88E4-0004769F25D1}) (Version: 1.2 - ) Tom Clancy's EndWar (HKLM-x32\...\{7C3D8108-8D99-427F-A1C2-D8E0D25A469C}) (Version: 1.00.0000 - Ubisoft) Tom Clancy's Rainbow Six (HKLM-x32\...\Tom Clancy's Rainbow Six) (Version: - ) Tom Clancy's Splinter Cell Chaos Theory (HKLM-x32\...\{7271AAA4-467B-4BD9-9D86-8965E563E788}) (Version: 1.0.5 - Ubisoft) Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{621B43DA-82F8-486B-A2F8-08C8E81D7AC2}_is1) (Version: 1.02 - Ubisoft) Transformers(TM) - The Game (x32 Version: 1.00.0000 - Activision) Hidden TRS2006 (HKLM-x32\...\{96166C8A-8F66-484F-94DC-323665A2DE56}) (Version: 2.6.3092 - Auran) Tuber (HKLM-x32\...\Tuber_is1) (Version: - ) Turniej Robotów (HKLM-x32\...\Turniej Robotów_is1) (Version: - ) Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.0f3 - Unity Technologies ApS) Universe Sandbox (HKLM-x32\...\Universe Sandbox) (Version: - ) Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton) Wesoła Szkoła 2 (HKLM-x32\...\Wesoła Szkoła 2_is1) (Version: - Next Generation Interactive) Wesoła Szkoła 3 (HKLM-x32\...\Wesoła Szkoła 3_is1) (Version: - Next Generation Interactive) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) Windows Software Development Kit (HKLM-x32\...\{363a2c1e-637f-45ce-933b-5a5463efd945}) (Version: 8.59.29750 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.29.0 - ASUS) Wings of Honour - Battles of the Red Baron (HKLM-x32\...\woh2_pl) (Version: - ) WinRAR 4.11 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.15 - ASUS) World of Guns: Gun Disassembly (HKLM-x32\...\Steam App 262410) (Version: - Noble Empire Corp.) WPT Redistributables (x32 Version: 8.59.29750 - Microsoft) Hidden WPTx64 (x32 Version: 8.59.29722 - Microsoft) Hidden XIII (HKLM-x32\...\InstallShield_{EEF5BD4A-F430-44C5-A7A2-40A9701C7716}) (Version: 1.00.0000 - Cenega) XIII (x32 Version: 1.00.0000 - Cenega) Hidden Załoga G (HKLM-x32\...\{DE5ECBF6-8A4A-4855-98D0-D6576145EBFF}) (Version: 1.00.0000 - Disney Interactive Studios) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 06-03-2015 01:09:03 Removed Java 7 Update 60 06-03-2015 04:43:43 Removed Java(TM) 6 Update 32 06-03-2015 15:11:22 Windows Update 06-03-2015 15:12:14 Removed Java(TM) 6 Update 32 06-03-2015 15:13:07 Removed Java 8 Update 25 (64-bit) 06-03-2015 15:26:53 Restore Point Created by FRST ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {272A6173-5BD2-4062-A521-DAC984305363} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated) Task: {6E693582-6149-4A6E-8940-BD1EEB46C219} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] () Task: {73D7DCF5-D274-462C-A8A2-8E8DD501F331} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] () Task: {E607FAF1-16FD-4487-8744-1D6442BA7B20} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-18] (ASUS) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============== 2013-09-01 17:37 - 2011-10-04 21:43 - 00087552 _____ () C:\Windows\System32\custmon64i.dll 2011-09-14 15:37 - 2005-03-11 23:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll 2012-06-06 16:17 - 2012-06-06 16:17 - 00173008 _____ () C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe 2012-01-07 20:11 - 2014-04-26 11:59 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2009-11-24 21:45 - 2009-11-24 21:45 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe 2010-01-05 01:43 - 2010-01-05 01:43 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2012-06-06 16:17 - 2012-06-06 16:17 - 03363808 _____ () C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BusinessEverywhere.exe 2012-06-06 16:17 - 2012-06-06 16:17 - 01359824 _____ () C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\SMSNotifier.exe 2012-06-06 16:13 - 2012-06-06 16:13 - 00093184 _____ () C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\GIS.dll 2012-06-06 16:13 - 2012-06-06 16:13 - 00182784 _____ () C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\ProxyDetection.dll 2011-09-14 15:37 - 2007-11-28 17:59 - 03702784 _____ () C:\Program Files (x86)\PDFCreator\GS8.61\gs8.61\Bin\gsdll32.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-554914868-1295861038-1199024560-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\faf\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 213.134.128.19 - 213.134.128.20 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-554914868-1295861038-1199024560-500 - Administrator - Enabled) faf (S-1-5-21-554914868-1295861038-1199024560-1004 - Administrator - Enabled) => %SystemDrive%\Users\faf Gość (S-1-5-21-554914868-1295861038-1199024560-501 - Limited - Enabled) ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (03/06/2015 03:40:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:39:32 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:39:32 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:36:56 PM) (Source: MsiInstaller) (EventID: 11706) (User: as-Komputer) Description: Product: ASUS FancyStart -- Error 1706. An installation package for the product ASUS FancyStart cannot be found. Try the installation again using a valid copy of the installation package 'FancyStart.msi'. Error: (03/06/2015 03:36:07 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:35:26 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:35:26 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:26:53 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury ConvertStringSidToSid(S-1-5-21-554914868-1295861038-1199024560-501.bak). hr = 0x80070539, Struktura identyfikatora zabezpieczenia jest nieprawidłowa. . Operacja: Zdarzenie OnIdentify Zbieranie danych modułu zapisującego Kontekst: Kontekst wykonywania: Shadow Copy Optimization Writer Identyfikator klasy modułu zapisującego: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Nazwa modułu zapisującego: Shadow Copy Optimization Writer Identyfikator wystąpienia modułu zapisującego: {ad96da6c-30a5-44db-8f7e-30c63cab3011} Error: (03/06/2015 03:26:53 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury ConvertStringSidToSid(S-1-5-21-554914868-1295861038-1199024560-501.bak). hr = 0x80070539, Struktura identyfikatora zabezpieczenia jest nieprawidłowa. . Operacja: Zdarzenie OnIdentify Zbieranie danych modułu zapisującego Kontekst: Kontekst wykonywania: Shadow Copy Optimization Writer Identyfikator klasy modułu zapisującego: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Nazwa modułu zapisującego: Shadow Copy Optimization Writer Identyfikator wystąpienia modułu zapisującego: {ad96da6c-30a5-44db-8f7e-30c63cab3011} Error: (03/06/2015 03:26:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować pliku rejestru klas. SZCZEGÓŁY — Nie można odnaleźć określonego pliku. System errors: ============= Error: (03/06/2015 03:31:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi hzunyanhtn64 z powodu następującego błędu: %%3 Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) Management & Security Application User Notification Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa BEWConfigSrv niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa DefaultTabUpdate niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Intel(R) Management and Security Application Local Management Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa hzunyanhtn64 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 300000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa MaintainerSvc3.63.6844702 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa PnkBstrA niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/06/2015 03:26:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Microsoft Office Sessions: ========================= Error: (03/06/2015 03:40:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:39:32 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:39:32 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:36:56 PM) (Source: MsiInstaller) (EventID: 11706) (User: as-Komputer) Description: Product: ASUS FancyStart -- Error 1706. An installation package for the product ASUS FancyStart cannot be found. Try the installation again using a valid copy of the installation package 'FancyStart.msi'.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (03/06/2015 03:36:07 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:35:26 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:35:26 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. Error: (03/06/2015 03:26:53 PM) (Source: VSS) (EventID: 8193) (User: ) Description: ConvertStringSidToSid(S-1-5-21-554914868-1295861038-1199024560-501.bak)0x80070539, Struktura identyfikatora zabezpieczenia jest nieprawidłowa. Operacja: Zdarzenie OnIdentify Zbieranie danych modułu zapisującego Kontekst: Kontekst wykonywania: Shadow Copy Optimization Writer Identyfikator klasy modułu zapisującego: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Nazwa modułu zapisującego: Shadow Copy Optimization Writer Identyfikator wystąpienia modułu zapisującego: {ad96da6c-30a5-44db-8f7e-30c63cab3011} Error: (03/06/2015 03:26:53 PM) (Source: VSS) (EventID: 8193) (User: ) Description: ConvertStringSidToSid(S-1-5-21-554914868-1295861038-1199024560-501.bak)0x80070539, Struktura identyfikatora zabezpieczenia jest nieprawidłowa. Operacja: Zdarzenie OnIdentify Zbieranie danych modułu zapisującego Kontekst: Kontekst wykonywania: Shadow Copy Optimization Writer Identyfikator klasy modułu zapisującego: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Nazwa modułu zapisującego: Shadow Copy Optimization Writer Identyfikator wystąpienia modułu zapisującego: {ad96da6c-30a5-44db-8f7e-30c63cab3011} Error: (03/06/2015 03:26:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT) Description: Nie można odnaleźć określonego pliku. CodeIntegrity Errors: =================================== Date: 2012-07-26 13:15:57.380 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:57.365 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:57.209 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\{9B94B~1\atiicdxx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:57.178 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\{9B94B~1\atiicdxx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:45.285 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:45.253 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:45.207 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\{9B94B~1\atiicdxx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-07-26 13:15:45.191 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\{9B94B~1\atiicdxx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2011-09-10 18:10:22.775 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2011-09-10 18:10:22.728 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\as\AppData\Local\Temp\ATICDSDr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz Percentage of memory in use: 50% Total physical RAM: 2988.54 MB Available physical RAM: 1483.6 MB Total Pagefile: 5975.27 MB Available Pagefile: 4469.82 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:149.04 GB) (Free:35.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (DATA) (Fixed) (Total:434.43 GB) (Free:89.83 GB) NTFS Drive f: () (Removable) (Total:7.31 GB) (Free:5.35 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: BD852079) Partition 1: (Not Active) - (Size=12.7 GB) - (Type=1C) Partition 2: (Active) - (Size=149 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=434.4 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 7.3 GB) (Disk ID: 12DAD062) Partition 1: (Active) - (Size=7.3 GB) - (Type=0C) ==================== End Of Log ============================