Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015 Ran by Ja at 2015-06-16 06:11:59 Running from C:\Users\Ja\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-143067275-3816198268-3330578952-500 - Administrator - Disabled) Guest (S-1-5-21-143067275-3816198268-3330578952-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-143067275-3816198268-3330578952-1002 - Limited - Enabled) Ja (S-1-5-21-143067275-3816198268-3330578952-1000 - Administrator - Enabled) => C:\Users\Ja ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D} AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated) Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.) Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.2 - Adobe Systems Incorporated) Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated) Aktualizacje NVIDIA 2.4.5.44 (Version: 2.4.5.44 - NVIDIA Corporation) Hidden ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.) ASRock XFast RAM v3.0.2 (HKLM\...\ASRock XFast RAM_is1) (Version: - ASRock Inc.) A-Tuning v2.0.51.1 (HKLM-x32\...\A-Tuning_is1) (Version: 2.0.51.1 - ) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) Ballad Heroes - Neutral Gwent Card Set (HKLM-x32\...\Ballad Heroes - Neutral Gwent Card Set_is1) (Version: 1.0.0.0 - GOG.com) BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth) Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com) Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender) Cannon Fodder (HKLM-x32\...\1207658745_is1) (Version: 2.1.0.4 - GOG.com) CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform) Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine) Consolas Font Family (HKLM-x32\...\{6AE22174-4FFA-4572-B692-31F0C386ED38}) (Version: 1.00.0000 - Microsoft Corporation) Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform) DFX Audio Enhancer 11.306 (HKLM-x32\...\DFX Audio Enhancer 11.306) (Version: - ) Elite Crossbow Set (HKLM-x32\...\Elite Crossbow Set_is1) (Version: 1.0.0.0 - GOG.com) Elite: Dangerous (HKLM-x32\...\Steam App 359320) (Version: - Frontier Developments) foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski) Fraps (HKLM-x32\...\Fraps) (Version: - ) Galactic Civilizations III (HKLM-x32\...\Steam App 226860) (Version: - Stardock Entertainment) Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Homeworld Remastered Collection (HKLM-x32\...\Steam App 244160) (Version: - Gearbox Software) HP Deskjet 2510 series — podstawowe oprogramowanie urządzenia (HKLM\...\{F0DD70C6-B53F-42B5-8A67-62863E6E5EEF}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 2510 series Setup Guide (HKLM-x32\...\{216C7F38-4BBC-4E9A-8392-C9FA21B54386}) (Version: 27.0.0 - Hewlett Packard) HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.1.0.001 - HTC Corporation) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation) Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{0EC7F9CC-4741-45AE-9F55-6E9343F726F5}) (Version: 1.1.0.36960 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation) Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.41.8096 - Intel(R) Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel) IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) KeePass Password Safe 2.29 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.29 - Dominik Reichl) K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - ) Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com) New Quest - Fool's Gold (HKLM-x32\...\New Quest - Fool's Gold_is1) (Version: 1.0.0.0 - GOG.com) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.1 - Black Tree Gaming) Nilfgaardian Armor Set (HKLM-x32\...\Nilfgaardian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team) NVIDIA GeForce Experience 2.4.5.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.44 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA Sterownik graficzny 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Panel sterowania NVIDIA 353.06 (Version: 353.06 - NVIDIA Corporation) Hidden PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.) Receiver (HKLM-x32\...\Steam App 234190) (Version: - Wolfire Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.0 - Rockstar Games) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.) SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.44 - NVIDIA Corporation) Hidden Slopeys ED BPC (HKLM-x32\...\Slopeys ED BPC) (Version: 4.2.2.0 - Slopey) Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version: - Rebellion) Spotify (HKU\S-1-5-21-143067275-3816198268-3330578952-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB) Standard Mouse Driver (HKLM-x32\...\{6C4453CD-123A-40FB-8227-E23AF8748C5A}) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Superfrog (HKLM-x32\...\1207658989_is1) (Version: 2.1.0.9 - GOG.com) Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.6.0 - GOG.com) Transmission-Qt (HKLM\...\Transmission-Qt) (Version: 2.84 - Transmission) Unity Web Player (HKU\S-1-5-21-143067275-3816198268-3330578952-1000\...\UnityWebPlayer) (Version: 5.0.0f4 - Unity Technologies ApS) VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) Wolfenstein The New Order ver. 1.0.0.2 (HKLM-x32\...\{55055055-10AE-00BA-96F5-98DD6F3006AC}_is1) (Version: 1.0.0.2 - Bethesda Game Studios) XFast LAN v9.05 (HKLM\...\XFast LAN) (Version: 9.05 - cFos Software GmbH, Bonn) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 14-06-2015 09:42:21 Scheduled Checkpoint 15-06-2015 11:39:03 Punkt przywracania stworzony przez HitmanPro 15-06-2015 11:39:55 Punkt przywracania stworzony przez HitmanPro ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0000805C-E898-4C8D-B8F7-2C71D60AF811} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {07FB9914-2DFA-4514-8B4E-8F6FE37993EA} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation) Task: {315564C1-2FB5-4228-861F-DFBC3A9EB17E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {48F42F8D-5233-444A-A4C3-DEBC2C22F466} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd) Task: {4EF17DF8-4850-4DC7-98E3-77346576E386} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation) Task: {4F88E2D7-F7A3-4F8A-B97E-FE0717117B46} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-09] (Google Inc.) Task: {7750305B-29FD-4F03-8BC8-19E274D515E5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks Task: {825A54FD-3F39-4D07-884B-B5EE07F04ADB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-09] (Google Inc.) Task: {83B4623D-B47F-44CF-A21B-15C88977155A} - System32\Tasks\{6AF100EF-77D6-47BF-9A1C-17477933E461} => pcalua.exe -a C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe -c /uninstall Task: {877F1A52-2FF9-421E-8059-8E7CCFE2E0B2} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation) Task: {9E271E53-1BEB-4096-ADB5-5D0F57F0DA8A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {A73E4198-F879-4E30-BDCB-B395B9142BAF} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) Task: {ADF1EE46-022F-4C65-B71F-162B18101FAD} - System32\Tasks\{8B9F6AA9-1F48-42C4-8E55-985C0F2AAE99} => pcalua.exe -a "C:\Users\Ja\Downloads\dxwebsetup (3).exe" -d C:\Users\Ja\Downloads Task: {D7C562AE-304E-4903-8D9C-0E23B0A5820D} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) Task: {F00B2FCA-B204-4F97-ACC9-38552BD0F9DB} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation) Task: {FE257376-A689-4069-A922-8E1EA442A8F4} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-01-18] () Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-03-22 15:09 - 2014-08-27 17:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll 2015-03-22 15:08 - 2013-09-03 15:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll 2015-03-22 15:09 - 2014-12-17 15:34 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui 2015-03-22 15:09 - 2012-10-29 15:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll 2015-05-06 16:22 - 2015-05-06 16:22 - 00790368 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_005\ashttpbr.mdl 2015-05-06 16:22 - 2015-05-06 16:22 - 00711064 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_005\ashttpdsp.mdl 2015-05-06 16:22 - 2015-05-06 16:22 - 02683520 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_005\ashttpph.mdl 2015-05-06 16:22 - 2015-05-06 16:22 - 01326504 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_005\ashttprbl.mdl 2015-01-09 23:00 - 2015-05-28 06:15 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-01-09 22:44 - 2013-05-28 18:58 - 00454656 _____ () C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe 2015-04-13 16:50 - 2012-12-07 17:26 - 00167424 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2015-06-14 17:28 - 2014-07-29 16:20 - 00479232 _____ () C:\Programy\Modecom GMX1\Monitor.EXE 2012-10-01 21:37 - 2012-10-01 21:37 - 06522480 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2015-03-31 12:35 - 2015-06-03 23:06 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-06-14 17:28 - 2014-07-18 15:12 - 00045056 _____ () C:\Programy\Modecom GMX1\lan.dll 2015-06-14 17:28 - 2012-06-06 10:55 - 00061440 _____ () C:\Programy\Modecom GMX1\hiddriver.dll 2015-06-10 01:28 - 2015-06-05 20:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll 2015-06-10 01:28 - 2015-06-05 20:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll 2015-01-09 22:38 - 2013-09-03 17:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-06-10 01:28 - 2015-06-05 20:22 - 15003464 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Ja\Desktop\13e48xtt.exe:BDU AlternateDataStreams: C:\Users\Ja\Desktop\FRST64.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\13e48xtt.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\adwcleaner.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\adwcleaner_4.206.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\audacity-win-2.1.0.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\BootkitRemoval_x64.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\GPU-Z.0.8.2.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\HitmanPro_x64.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\KeePass-2.29-Setup.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\mbar-1.09.1.1004.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\Niepotwierdzony 162605.crdownload:BDU AlternateDataStreams: C:\Users\Ja\Downloads\Niepotwierdzony 662942.crdownload:BDU AlternateDataStreams: C:\Users\Ja\Downloads\Niepotwierdzony 866989.crdownload:BDU AlternateDataStreams: C:\Users\Ja\Downloads\setup.exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\SPTDinst-v187-x64 (3).exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\tdsskiller (1).exe:BDU AlternateDataStreams: C:\Users\Ja\Downloads\tdsskiller.exe:BDU ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-143067275-3816198268-3330578952-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ja\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp DNS Servers: 192.168.0.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: Ds3Service => 2 MSCONFIG\startupfolder: C:^Users^Ja^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Powiadomienia monitorowania tuszu - HP Deskjet 2510 series.lnk => C:\Windows\pss\Powiadomienia monitorowania tuszu - HP Deskjet 2510 series.lnk.Startup MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: DFX => C:\Program Files (x86)\DFX\DFX.exe -startup MSCONFIG\startupreg: MurGee.com Auto Clicker => C:\Programy\Auto Clicker\AutoClicker.exe :silent MSCONFIG\startupreg: PeerBlock => C:\Program Files\PeerBlock\peerblock.exe MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: Spotify => "C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent MSCONFIG\startupreg: XFast LAN => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{D0EB90AE-5895-4750-9405-AFD05AF45515}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{ABD9DD84-4819-4D34-A654-865A68E6F92C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{D79E71F7-1792-4DE9-A398-6FED1C5D09E8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{8B226907-A3F2-4EBE-9A70-3855FE922DD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{93C4E13A-3FB9-4867-964D-8592312145C7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{512E6BF5-1A35-431E-A0AB-541AA7DD2CD6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{B7A3C21F-262D-4762-A294-B7E16E056BE4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{0B3D2162-1A96-4B9E-B7C5-639E2C69603B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{DFA96B0F-3D72-412F-9262-BB9FDB3D0630}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{D5059663-351F-4F5E-8B6D-B291DD819216}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{65350459-3AF9-4436-9E2D-046CC378141E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe FirewallRules: [{48FC5C02-9AB2-42C8-A8C8-3161C6A20731}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe FirewallRules: [{ADD3CA21-DCBE-42C3-AB9E-EBC4EBCA3D18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe FirewallRules: [{657F7800-A9B9-47AB-9389-02C44E860610}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe FirewallRules: [TCP Query User{C0F6E291-C0F9-4150-B0A5-A24450AECA50}C:\programy\transmission\transmission-qt.exe] => (Allow) C:\programy\transmission\transmission-qt.exe FirewallRules: [UDP Query User{7FFE2C07-20EE-480B-B087-9545BA92DCA0}C:\programy\transmission\transmission-qt.exe] => (Allow) C:\programy\transmission\transmission-qt.exe FirewallRules: [TCP Query User{1CB97F1F-079F-4E76-8A8B-7D3E7FD364E9}C:\games\wolfenstein the new order\wolfneworder_x64.exe] => (Allow) C:\games\wolfenstein the new order\wolfneworder_x64.exe FirewallRules: [UDP Query User{3C9A1D92-1000-4364-AF41-E0ACF9013468}C:\games\wolfenstein the new order\wolfneworder_x64.exe] => (Allow) C:\games\wolfenstein the new order\wolfneworder_x64.exe FirewallRules: [{73F157FC-A1AF-426E-BFF6-EE505B8EB03B}] => (Allow) C:\Program Files\HP\HP Deskjet 2510 series\Bin\USBSetup.exe FirewallRules: [TCP Query User{E9721DE8-838D-4EE8-9134-E04EAEFB4155}C:\users\ja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{C17168B7-D0AB-4318-ABE2-B979A0566CA4}C:\users\ja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ja\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{5591F248-0AB6-432D-8A31-41D8C7824479}C:\users\ja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{32667551-76AA-49E9-A9FE-7691E443D037}C:\users\ja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ja\appdata\roaming\spotify\spotify.exe FirewallRules: [{9C5E50EA-1994-4C1E-9965-97FE3BEE89FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{1C4BAF8A-C928-4E67-B3B9-8DB1CCCC69F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{6F9E91C9-0A38-4A16-B9C5-B03F86CE04DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe FirewallRules: [{CEF93CFA-8E7D-47E0-85DC-B71BD6A7FA2B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe FirewallRules: [{B43134A5-AB3E-41F1-82A2-FE8EA6D39E5D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Galactic Civilizations III\GalCiv3.exe FirewallRules: [{5A3BD051-6F24-412B-9EA3-0EC044A541F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Galactic Civilizations III\GalCiv3.exe FirewallRules: [{378BBBE5-2845-46BA-B392-E6CDA6B27C51}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe FirewallRules: [{A61C9428-9AE2-444D-B3DD-A83C99FEECA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe FirewallRules: [{9EC0BF2D-5FEE-4737-A1C3-581618FA4FD4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{D90AE048-28AF-4BB5-A160-C46D84C9DF76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{C364E9EB-320D-4C7A-BE80-89DD48FC937D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/16/2015 05:38:17 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 07:29:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 02:37:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:56:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:56:07 AM) (Source: ESENT) (EventID: 455) (User: ) Description: taskhost (3832) WebCacheLocal: Wystąpił błąd -1811 podczas otwierania pliku dziennika C:\Users\Ja\AppData\Local\Microsoft\Windows\WebCache\V0100020.log. Error: (06/15/2015 11:43:25 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury RegSetValueExW(0x000002f0,SYSTEM\CurrentControlSet\Services\VSS\Diag\VssvcPublisher,0,REG_BINARY,0000000002DEEF80.72). hr = 0x80070005, Access is denied. . Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury RegSetValueExW(0x000002e8,(null),0,REG_BINARY,00000000023CE2D0.72). hr = 0x80070005, Access is denied. . Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {35337273-4133-4414-960b-e2a2f0ea1587} Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury RegSetValueExW(0x00000200,(null),0,REG_BINARY,0000000002B6EB80.72). hr = 0x80070005, Access is denied. . Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer Writer Instance ID: {149c6543-bc01-47a7-ac38-7fde833c1bfc} Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury RegSetValueExW(0x00000798,(null),0,REG_BINARY,0000000002A8DF40.72). hr = 0x80070005, Access is denied. . Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} Writer Name: WMI Writer Writer Instance ID: {9b4f9645-a831-4986-962b-a4f4ffb8af7c} System errors: ============= Error: (06/15/2015 11:55:26 AM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x00000050 (0xfffff8a00cd3c000, 0x0000000000000000, 0xfffff80003088443, 0x0000000000000000)C:\Windows\MEMORY.DMP061515-14383-01 Error: (06/15/2015 11:55:24 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 11:53:29 na ‎2015-‎06-‎15 było nieoczekiwane. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) Dynamic Application Loader Host Interface Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) ME Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) Rapid Storage Technology niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Media Player Network Sharing Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Software Protection niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (06/13/2015 00:55:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Modules Installer niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (06/13/2015 00:55:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Internet Pass-Through Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 1000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Microsoft Office: ========================= Error: (06/16/2015 05:38:17 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 07:29:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 02:37:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:56:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:56:07 AM) (Source: ESENT) (EventID: 455) (User: ) Description: taskhost3832WebCacheLocal: C:\Users\Ja\AppData\Local\Microsoft\Windows\WebCache\V0100020.log-1811 Error: (06/15/2015 11:43:25 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: RegSetValueExW(0x000002f0,SYSTEM\CurrentControlSet\Services\VSS\Diag\VssvcPublisher,0,REG_BINARY,0000000002DEEF80.72)0x80070005, Access is denied. Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: RegSetValueExW(0x000002e8,(null),0,REG_BINARY,00000000023CE2D0.72)0x80070005, Access is denied. Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {35337273-4133-4414-960b-e2a2f0ea1587} Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: RegSetValueExW(0x00000200,(null),0,REG_BINARY,0000000002B6EB80.72)0x80070005, Access is denied. Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer Writer Instance ID: {149c6543-bc01-47a7-ac38-7fde833c1bfc} Error: (06/15/2015 11:40:08 AM) (Source: VSS) (EventID: 8193) (User: ) Description: RegSetValueExW(0x00000798,(null),0,REG_BINARY,0000000002A8DF40.72)0x80070005, Access is denied. Operation: BackupShutdown Event Context: Execution Context: Writer Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} Writer Name: WMI Writer Writer Instance ID: {9b4f9645-a831-4986-962b-a4f4ffb8af7c} ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz Percentage of memory in use: 39% Total physical RAM: 8111.07 MB Available physical RAM: 4915.73 MB Total Pagefile: 16220.35 MB Available Pagefile: 12566.49 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:197.25 GB) NTFS Drive e: (SAMSUNG) (Fixed) (Total:931.51 GB) (Free:634.08 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 038E4294) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: A6C5F255) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of log ============================