Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015 Ran by Tomek (2015-11-01 19:51:21) Running from C:\Users\Tomek\Downloads\do wirusów\FRST64 Windows 7 Ultimate Service Pack 1 (X64) (2015-03-05 00:39:59) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-168588485-3458256194-3685778785-500 - Administrator - Disabled) => C:\Users\Administrator CECAF3292D2643FC9B8F (S-1-5-21-168588485-3458256194-3685778785-1002 - Limited - Enabled) Guest (S-1-5-21-168588485-3458256194-3685778785-501 - Limited - Disabled) Tomek (S-1-5-21-168588485-3458256194-3685778785-1000 - Administrator - Enabled) => C:\Users\Tomek ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated) Aktualizacje NVIDIA 2.5.15.46 (Version: 2.5.15.46 - NVIDIA Corporation) Hidden Alternative Look for Triss (HKLM-x32\...\Alternative Look for Triss_is1) (Version: 1.0.0.0 - GOG.com) Alternative Look for Yennefer (HKLM-x32\...\Alternative Look for Yennefer_is1) (Version: 1.0.0.0 - GOG.com) Armikrog (HKLM-x32\...\1433157800_is1) (Version: 2.0.0.1 - GOG.com) ArrayCalc (HKLM-x32\...\{DAF98A04-DB78-45A6-9438-D5BB1322916A}) (Version: 7.8.4 - d&b audiotechnik GmbH) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach) Assassins Creed Unity Update v1.5 (HKLM-x32\...\QXNzYXNzaW5zQ3JlZWRVbml0eQ==_is1) (Version: 1 - ) Avid Effects (HKLM-x32\...\{A86F1158-A7F7-4E8C-98E3-88F4996E85EB}) (Version: 10.3 - Avid Technology, Inc.) Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 10.3 - Avid Technology, Inc.) Avid Pro Tools (HKLM-x32\...\{8E60BB71-7EF3-42ED-9F10-AA041F25841A}) (Version: 10.3 - Avid Technology, Inc.) Ballad Heroes - Neutral Gwent Card Set (HKLM-x32\...\Ballad Heroes - Neutral Gwent Card Set_is1) (Version: 1.0.0.0 - GOG.com) Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com) Blue Cat's FreqAnalyst RTAS 2.1 (HKLM-x32\...\{CDAB30B0-FB95-4F62-BA5D-F62218373824}) (Version: 2.1 - Blue Cat Audio) Blue Cat's FreqAnalyst VST 2.1 (HKLM-x32\...\{44D94F3A-D38C-48DF-AEF7-4CD8B078F30F}) (Version: 2.1 - Blue Cat Audio) Bosch DNS-SD Service V2.60.1200 (HKLM-x32\...\{E7FE0532-4410-471D-8579-58AA946AEE8E}) (Version: 2.60.1200 - Bosch Security Systems) Brother MFL-Pro Suite DCP-J152W (HKLM-x32\...\{B742757A-7658-4E09-A51A-085CF0F7F4D3}) (Version: 1.0.0.0 - Brother Industries, Ltd.) Camera Recorder (HKLM-x32\...\{3BDDA587-7CDE-430C-90A4-E2C4E48D3AE9}) (Version: 1.0.909.0801 - Camera Recorder) CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform) Celemony Melodyne version 2.1 (HKLM\...\Celemony Melodyne_is1) (Version: - Copyright (C) 2001-2012 Celemony Software GmbH) ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl) Custom Shop version 1.4.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.4.0 - IK Multimedia) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd) Dante Controller (HKLM-x32\...\{39075CF1-4B75-46BC-B254-AF7418A12519}) (Version: 3.2.11 - Audinate) Data Recovery Pro (HKLM-x32\...\{B1C2398C-6FAB-46D1-806C-5942F0829994}) (Version: 2.1.0.0 - ParetoLogic, Inc.) doPDF (Version: 8.2.929 - Softland) Hidden doPDF 8 (HKLM-x32\...\{1922fb50-7bb8-4221-8187-60436f4e3f87}) (Version: 8.2.929 - Softland) Dragon Gaming Center (HKLM-x32\...\InstallShield_{965B16C7-0778-4C45-B7D1-83A59E6FBBCB}) (Version: 1.0.1403.0501 - Micro-Star International Co., Ltd.) Dragon Gaming Center (x32 Version: 1.0.1403.0501 - Micro-Star International Co., Ltd.) Hidden Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD) Elite Crossbow Set (HKLM-x32\...\Elite Crossbow Set_is1) (Version: 1.0.0.0 - GOG.com) ESET NOD32 Antivirus (HKLM\...\{60853F5E-E6F5-4A34-BBCD-C09D49BB5E64}) (Version: 9.0.318.0 - ESET, spol. s r.o.) ETDWare PS/2-X64 11.13.7.5_WHQL (HKLM\...\Elantech) (Version: 11.13.7.5 - ELAN Microelectronic Corp.) Far Cry 4 (HKLM-x32\...\Far Cry 4_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) FiiO USB DAC E07K (HKLM\...\{5C2D82D2-72D8-4A81-AF4E-502B0827EF5A}) (Version: 1.0.25 - FiiO) foobar2000 v1.3.8 (HKLM-x32\...\foobar2000) (Version: 1.3.8 - Peter Pawlowski) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Fre(a)koscope (HKLM-x32\...\Fre(a)koscope_is1) (Version: 0.8 beta - Mdsp @ Smartelectronix) GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.32.000 - Runtime Software) Hitman Absolution (HKLM-x32\...\{95030349-3623-4920-89BF-8BEC5EF311C5}_is1) (Version: 1.0433.1 - Square Enix) HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.10.250 - SurfRight B.V.) IK Multimedia Authorization Manager version 1.0.9 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.9 - IK Multimedia) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{0EC7F9CC-4741-45AE-9F55-6E9343F726F5}) (Version: 1.1.0.36960 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1405.3) (HKLM\...\{302600C1-6BDF-4FD1-1312-148929CC1385}) (Version: 17.0.1312.0414 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.3.34 - Intel Corporation) IRIS-Net V2.9.1 (HKLM-x32\...\IRIS-Net) (Version: V2.9.1 - EVI Audio GmbH) iZotope Ozone 6 Advanced (HKLM-x32\...\iZotope Ozone 6 Advanced_is1) (Version: 6.00 - iZotope, Inc.) JRiver Media Center 20 (HKLM-x32\...\Media Center 20) (Version: 20 - J. River, Inc.) Lexicon PSP 42 (HKLM-x32\...\Lexicon PSP 42) (Version: 1.6.2 - PSPaudioware.com) License Support (HKLM-x32\...\InstallShield_{3165EA9B-36CC-499B-96FF-36FC30E10EF4}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) License Support (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Hidden MacDrive 8 (HKLM\...\{8F6D780C-53B8-4385-98BC-62F78F9E4C38}) (Version: 8.0.5.31 - Mediafour Corporation) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) MAPP Online Pro - Standalone (HKLM-x32\...\{1F3372CF-D89E-4E74-A4D7-DB6C71440D61}) (Version: 4.4.0 - Meyer Sound Laboratories, Inc.) Melodyne 3.1 (x32 Version: 3.1.0200 - Celemony Software GmbH) Hidden Meyer Sound Compass 2.4.1 (HKLM-x32\...\{79B499B2-B976-4345-A70D-D16A7738DA1A}) (Version: 2.4.1 - Meyer Sound) Microsoft .NET Framework 4.5.3 (HKLM\...\{9F6EA3D4-B2FA-3120-8DF8-07396231AFB4}) (Version: 4.5.53315 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Minimal ADB and Fastboot version 1.3.1 (HKLM-x32\...\{26AC9666-A2C6-4D33-8370-A50F50F277C4}_is1) (Version: 1.3.1 - Sam Rodberg) Mozilla Firefox 41.0.2 (x86 pl) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 pl)) (Version: 41.0.2 - Mozilla) MyFreeCodec (HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\MyFreeCodec) (Version: - ) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 80s Drummer (HKLM-x32\...\Native Instruments Abbey Road 80s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road Modern Drummer (HKLM-x32\...\Native Instruments Abbey Road Modern Drummer) (Version: - Native Instruments) Native Instruments Abbey Road Vintage Drummer (HKLM-x32\...\Native Instruments Abbey Road Vintage Drummer) (Version: - Native Instruments) Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: - Native Instruments) Native Instruments Action Strings (HKLM-x32\...\Native Instruments Action Strings) (Version: - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: - Native Instruments) Native Instruments Balinese Gamelan (HKLM-x32\...\Native Instruments Balinese Gamelan) (Version: - Native Instruments) Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.0.2.2254 - Native Instruments) Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.0.0.002 - Native Instruments) Native Instruments Berlin Concert Grand (HKLM-x32\...\Native Instruments Berlin Concert Grand) (Version: - Native Instruments) Native Instruments Damage (HKLM-x32\...\Native Instruments Damage) (Version: - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments) Native Instruments Enhanced EQ (HKLM-x32\...\Native Instruments Enhanced EQ) (Version: - Native Instruments) Native Instruments Evolve Mutations (HKLM-x32\...\Native Instruments Evolve Mutations) (Version: - Native Instruments) Native Instruments Evolve Mutations 2 (HKLM-x32\...\Native Instruments Evolve Mutations 2) (Version: - Native Instruments) Native Instruments Evolve R2 (HKLM-x32\...\Native Instruments Evolve R2) (Version: - Native Instruments) Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: - Native Instruments) Native Instruments George Duke Soul Treasures (HKLM-x32\...\Native Instruments George Duke Soul Treasures) (Version: - Native Instruments) Native Instruments Komplete 9 Ultimate (HKLM-x32\...\Native Instruments Komplete 9 Ultimate) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.2.1.6382 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: - Native Instruments) Native Instruments Maschine Drum Selection (HKLM-x32\...\Native Instruments Maschine Drum Selection) (Version: - Native Instruments) Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: - Native Instruments) Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: - Native Instruments) Native Instruments New York Concert Grand (HKLM-x32\...\Native Instruments New York Concert Grand) (Version: - Native Instruments) Native Instruments Passive EQ (HKLM-x32\...\Native Instruments Passive EQ) (Version: - Native Instruments) Native Instruments Razor (HKLM-x32\...\Native Instruments Razor) (Version: - Native Instruments) Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.0.0.312 - Native Instruments) Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.0.0.312 - Native Instruments) Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: - Native Instruments) Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: - Native Instruments) Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: - Native Instruments) Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments) Native Instruments Scarbee Jay-Bass (HKLM-x32\...\Native Instruments Scarbee Jay-Bass) (Version: - Native Instruments) Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: - Native Instruments) Native Instruments Scarbee MM-Bass Amped (HKLM-x32\...\Native Instruments Scarbee MM-Bass Amped) (Version: - Native Instruments) Native Instruments Scarbee Pre-Bass (HKLM-x32\...\Native Instruments Scarbee Pre-Bass) (Version: - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments) Native Instruments Scarbee Rickenbacker Bass (HKLM-x32\...\Native Instruments Scarbee Rickenbacker Bass) (Version: - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.4.0.1093 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments) Native Instruments Session Strings Pro (HKLM-x32\...\Native Instruments Session Strings Pro) (Version: - Native Instruments) Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version: - Native Instruments) Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.0.1.330 - Native Instruments) Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.0.1.330 - Native Instruments) Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.0.1.330 - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments) Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: - Native Instruments) Native Instruments The Giant (HKLM-x32\...\Native Instruments The Giant) (Version: - Native Instruments) Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: - Native Instruments) Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: - Native Instruments) Native Instruments Upright Piano (HKLM-x32\...\Native Instruments Upright Piano) (Version: - Native Instruments) Native Instruments Vari Comp (HKLM-x32\...\Native Instruments Vari Comp) (Version: - Native Instruments) Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: - Native Instruments) Native Instruments VC 2A FX (HKLM-x32\...\Native Instruments VC 2A FX) (Version: - Native Instruments) Native Instruments VC 76 FX (HKLM-x32\...\Native Instruments VC 76 FX) (Version: - Native Instruments) Native Instruments Vienna Concert Grand (HKLM-x32\...\Native Instruments Vienna Concert Grand) (Version: - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: - Native Instruments) Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: - Native Instruments) New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com) New Quest - Fool's Gold (HKLM-x32\...\New Quest - Fool's Gold_is1) (Version: 1.0.0.0 - GOG.com) New Quest - Scavenger Hunt - Wolf School Gear (HKLM-x32\...\New Quest - Scavenger Hunt: Wolf School Gear_is1) (Version: 1.0.0.0 - GOG.com) New Quest - Where the Cat and Wolf Play... (HKLM-x32\...\New Quest - Where the Cat and Wolf Play..._is1) (Version: 1.0.0.0 - GOG.com) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.60.14 - Black Tree Gaming) Nilfgaardian Armor Set (HKLM-x32\...\Nilfgaardian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) novaPDF 8 add-in for Microsoft Office (x64) (HKLM\...\{17E7C163-EB00-4829-B5FC-F5FB92D22163}) (Version: 8.2.929 - Softland) novaPDF 8 add-in for Microsoft Office (x86) (HKLM-x32\...\{C4327631-0186-4EFF-A504-D468CB087D01}) (Version: 8.2.929 - Softland) novaPDF 8 Printer Driver (HKLM\...\{48CFCB4B-0488-4711-B54E-E8E3F5929166}) (Version: 8.2.929 - Softland) NVIDIA GeForce Experience 2.5.15.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.46 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Sterownik graficzny 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{85b9d34f-7397-4e39-8600-07942ef6ca04}) (Version: 17.0.5 - Intel Corporation) Outlast (HKLM-x32\...\Outlast_is1) (Version: - ) Panel sterowania NVIDIA 358.50 (Version: 358.50 - NVIDIA Corporation) Hidden Paragon Partition Manager™ 15 Professional -nSane- (HKLM\...\{A35001F0-F1E4-11DD-A38B-005056C00008}) (Version: 90.00.0003 - Paragon Software) PSP 2Meters (HKLM-x32\...\PSP 2Meters) (Version: 2.1.0 - PSPaudioware.com) PSP 608 MultiDelay (HKLM-x32\...\PSP 608 MultiDelay) (Version: 1.6.1 - PSPaudioware.com) PSP 85 (HKLM-x32\...\PSP 85) (Version: 1.1.1 - PSPaudioware.com) PSP ClassicQ (HKLM-x32\...\PSP ClassicQ) (Version: 1.8.0 - PSPaudioware.com) PSP ConsoleQ (HKLM-x32\...\PSP ConsoleQ) (Version: 1.8.0 - PSPaudioware.com) PSP EasyVerb (HKLM-x32\...\PSP EasyVerb) (Version: 1.7.0 - PSPaudioware.com) PSP Echo (HKLM-x32\...\PSP Echo) (Version: 1.0.1 - PSPaudioware.com) PSP MasterComp (HKLM-x32\...\PSP MasterComp) (Version: 1.7.1 - PSPaudioware.com) PSP MixPack2 (HKLM-x32\...\PSP MixPack2) (Version: 2.1.0 - PSPaudioware.com) PSP N2O (HKLM-x32\...\PSP N2O) (Version: 1.0.1 - PSPaudioware.com) PSP NobleQ (HKLM-x32\...\PSP NobleQ) (Version: 1.7.0 - PSPaudioware.com) PSP oldTimer (HKLM-x32\...\PSP oldTimer) (Version: 2.0.0 - PSPaudioware.com) PSP PianoVerb2 (HKLM-x32\...\PSP PianoVerb2) (Version: 2.0.0 - PSPaudioware.com) PSP RetroQ (HKLM-x32\...\PSP RetroQ) (Version: 1.8.0 - PSPaudioware.com) PSP SpringBox (HKLM-x32\...\PSP SpringBox) (Version: 1.0.0 - PSPaudioware.com) PSP StereoPack (HKLM-x32\...\PSP StereoPack) (Version: 1.9.8 - PSPaudioware.com) PSP VintageWarmer2 (HKLM-x32\...\PSP VintageWarmer2) (Version: 2.5.2 - PSPaudioware.com) PSP X-Dither (HKLM-x32\...\PSP X-Dither) (Version: 1.0.0 - PSPaudioware.com) PSP Xenon (HKLM-x32\...\PSP Xenon) (Version: 1.3.2 - PSPaudioware.com) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.1.41.1283 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer E220x Drivers (Version: 1.1.41.1283 - Qualcomm Atheros) Hidden Qualcomm Atheros Network Manager (Version: 1.1.41.1283 - Qualcomm Atheros) Hidden Qualcomm Atheros Performance Suite (HKLM-x32\...\{68DD86DD-8E02-4921-926B-B358D51EAF3A}) (Version: 1.1.41.1283 - Qualcomm Atheros) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21249 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7349 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform) SCM (HKLM\...\{F5D84549-523F-438F-8ACC-0944E30EF78C}) (Version: 13.014.09014 - Application) Seven Phases Spectrum Analyzer (HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\Seven Phases Spectrum Analyzer) (Version: - ) ShadowExplorer 0.9 (HKLM-x32\...\ShadowExplorer_is1) (Version: 0.9.462.0 - ShadowExplorer.com) SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.15.46 - NVIDIA Corporation) Hidden Skellige Armor Set (HKLM-x32\...\Skellige Armor Set_is1) (Version: 1.0.0.0 - GOG.com) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.103 - Skype Technologies S.A.) Slate Digital FG-X Mastering Processor VST RTAS v1.1.2 (HKLM-x32\...\Slate Digital FG-X Mastering Processor_is1) (Version: - ) Softube Acoustic Feedback VST RTAS v1.0.7 (HKLM-x32\...\Softube Acoustic Feedback VST RTAS_is1) (Version: - ) Softube Bass Amp Room VST RTAS v1.0.2 (HKLM-x32\...\Softube Bass Amp Room VST RTAS_is1) (Version: - ) Softube FET Compressor VST RTAS v1.0.3 (HKLM-x32\...\Softube FET Compressor VST RTAS_is1) (Version: - ) Softube Metal Amp Room VST RTAS v1.1.5 (HKLM-x32\...\Softube Metal Amp Room VST RTAS_is1) (Version: - ) Softube Passive-Active Pack VST RTAS v1.0.2 (HKLM-x32\...\Softube Passive-Active Pack VST RTAS_is1) (Version: - ) Softube Spring Reverb VST RTAS v1.0.4 (HKLM-x32\...\Softube Spring Reverb VST RTAS_is1) (Version: - ) Softube Trident A-Range VST RTAS v1.0.2 (HKLM-x32\...\Softube Trident A-Range VST RTAS_is1) (Version: - ) Softube Tube Delay VST RTAS v1.0.5 (HKLM-x32\...\Softube Tube Delay VST RTAS_is1) (Version: - ) Softube Tube-Tech CL 1B VST RTAS v1.0.3 (HKLM-x32\...\Softube Tube-Tech CL 1B VST RTAS_is1) (Version: - ) Softube Vintage Amp Room VST RTAS v1.0.8 (HKLM-x32\...\Softube Vintage Amp Room VST RTAS_is1) (Version: - ) SoundToys Native Effects V4 (HKLM-x32\...\SoundToys Native Effects V4_is1) (Version: - SoundToys Inc) SpyHunter (HKLM-x32\...\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}) (Version: 4.1.11 - Enigma Software Group USA, LLC) SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.8.450.22786 - SteelSeries) Steinberg Cubase 5 (HKLM-x32\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.0 - Steinberg Media Technologies GmbH) Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) The Evil Within (HKLM-x32\...\VGhlRXZpbFdpdGhpbg==_is1) (Version: 1 - ) The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.6.0.85 - KMP Media co., Ltd) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3: Wild Hunt - Alternative Look for Ciri (HKLM-x32\...\Alternative Look for Ciri_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3: Wild Hunt - New Finisher Animations (HKLM-x32\...\New Finisher Animations_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3: Wild Hunt - NEW GAME + (HKLM-x32\...\NEW GAME +_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted (HKLM-x32\...\New Quest - Contract: Skellige's Most Wanted_is1) (Version: 1.0.0.0 - GOG.com) Tom Clancy`s Splinter Cell® Blacklist™ (HKLM-x32\...\Tom Clancy`s Splinter Cell® Blacklist™_is1) (Version: 1.01 - R.G. Revenants) Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.01 - Ubisoft) Tombraider (HKLM-x32\...\Tombraider_is1) (Version: - ) T-RackS CS version 4.5.0 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.5.0 - IK Multimedia) UltraISO wersja V9.6.5 (HKLM-x32\...\UltraISO_is1) (Version: V9.6.5 - ) Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft) UsbFix (HKLM-x32\...\Usbfix) (Version: 8.141 - El Desaparecido - www.usbfix.net - www.sosvirus.net) Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Voxengo Sound Delay (HKLM\...\Voxengo Sound Delay_is1) (Version: 1.6 - Voxengo) WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) Waves Complete V9r8 (HKLM-x32\...\{91000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.1.8 - Waves) WD Drive Utilities (HKLM-x32\...\{15CFD985-9719-4AD1-8E6E-AB238B5BD5E7}) (Version: 1.1.0.51 - Western Digital Technologies, Inc.) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-168588485-3458256194-3685778785-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-168588485-3458256194-3685778785-1000_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\wmdrmnet.dll => No File <==== ATTENTION ==================== Restore Points ========================= 01-11-2015 18:08:57 ComboFix created restore point ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2015-11-01 18:12 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {02CDD2A5-0700-4E74-A1B4-744A81028D36} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd) Task: {59AC561D-3004-4BAC-A74B-E55A1CC41836} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {66F87CC6-F20F-496E-953A-0FF89D542811} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-18] (Adobe Systems Incorporated) Task: {C7A056FB-E094-4ACE-812E-C7F230F44AAE} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe [2011-05-27] (Enigma Software Group USA, LLC.) Task: {CDDD43B8-2322-4068-9BFB-25897942682B} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) Task: {D9195C73-23BD-46AA-8FE0-429EBA726E40} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) Task: {DFA6C4FD-A162-4071-96CA-160CC4EE33A4} - System32\Tasks\doPDF Update => C:\Program Files\Softland\novaPDF 8\Driver\UpdateApplication.exe [2015-02-27] () Task: {F32E0B3E-18C1-42DC-81CB-ED88E3AAFC6D} - System32\Tasks\MSI_Dragon Gaming Center => C:\Program Files (x86)\MSI\Dragon Gaming Center\mDispatch.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Windows\system32\rundll32.exeGC:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll Task: C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe Task: C:\Windows\Tasks\ParetoLogic Update Version3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe ==================== Loaded Modules (Whitelisted) ============== 2015-08-02 18:31 - 2015-10-03 06:06 - 00011896 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2015-10-14 15:06 - 2015-10-03 03:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-02-27 11:49 - 2015-02-27 11:49 - 00137368 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll 2015-02-27 11:49 - 2015-02-27 11:49 - 00034592 _____ () C:\Program Files\Softland\novaPDF 8\Server\CryptUtil.dll 2015-02-27 11:49 - 2015-02-27 11:49 - 00026912 _____ () C:\Program Files\Softland\novaPDF 8\Server\WAFServicePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00504832 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 09315328 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00015872 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00011264 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00011264 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00115200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll 2014-05-16 16:57 - 2014-05-16 16:57 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00034304 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll 2014-05-16 16:57 - 2014-05-16 16:57 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00189440 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00031744 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00159744 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00020992 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00029696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030208 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00023040 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030208 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll 2014-03-04 13:16 - 2014-03-04 13:16 - 00300544 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe 2015-03-31 08:54 - 2015-03-31 08:54 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2015-06-24 12:33 - 2005-04-22 05:36 - 00143360 _____ () C:\Windows\system32\BrSNMP64.dll 2014-12-12 23:25 - 2014-12-12 23:25 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll 2014-04-14 20:41 - 2015-02-12 01:07 - 00020288 _____ () C:\Program Files\CCleaner\branding.dll 2015-10-14 15:52 - 2015-10-04 09:24 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-08-02 18:31 - 2015-10-03 06:06 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2015-06-24 12:33 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2015-03-04 17:16 - 2013-09-16 12:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Tomek\Cookies:YzMimkBrfprtL0iGsicefqX AlternateDataStreams: C:\Users\Tomek\Cookies:Z4aJljLRhQAVynC49QU8 AlternateDataStreams: C:\Users\Tomek\Local Settings:Ku3yuheIzc3tk9nIYYXcmrJm AlternateDataStreams: C:\Users\Tomek\Local Settings:WWME5JBAQyDEdlUnyTZp3 AlternateDataStreams: C:\Users\Tomek\AppData\Local:Ku3yuheIzc3tk9nIYYXcmrJm AlternateDataStreams: C:\Users\Tomek\AppData\Local:WWME5JBAQyDEdlUnyTZp3 AlternateDataStreams: C:\Users\Tomek\AppData\Local\Application Data:Ku3yuheIzc3tk9nIYYXcmrJm AlternateDataStreams: C:\Users\Tomek\AppData\Local\Application Data:WWME5JBAQyDEdlUnyTZp3 AlternateDataStreams: C:\Users\Tomek\AppData\Local\Temporary Internet Files:SMydl9owobBAVjW2m1 AlternateDataStreams: C:\Users\Tomek\AppData\Local\Temporary Internet Files:YONTzQexiI10aytgj6gEXy0GLa ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-168588485-3458256194-3685778785-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.43.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: BrHelp => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN MSCONFIG\startupreg: Getting started with MacDrive 8 => "C:\Program Files\Mediafour\MacDrive 8\MDGetStarted.exe" /auto MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{FE70CE70-3C49-4DD8-B9CE-B497E8DA7B03}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{BA4BC2CA-BAA4-4650-8A3C-66DC24781DAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{CE0C629E-8ED0-4524-BFE6-95106A59FA18}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{8969C919-E6D0-4FB4-8EE7-DE5B7AF09827}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{34E45284-984D-4EC3-AF59-1A679A258904}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{107618E7-8F67-4F03-B5D1-C6C271386F04}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{A6A0E4E9-1459-4CF7-A0D7-751565B4D2C1}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{68C52989-8269-4E9C-8311-34539BFC41A4}] => (Allow) C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{ED0C93D9-DD9F-4816-B854-3EE499670B22}] => (Allow) C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{C374EABE-8E8A-472A-A0CA-E3E6B471BDF2}E:\gry\far cry 4\bin\farcry4.exe] => (Block) E:\gry\far cry 4\bin\farcry4.exe FirewallRules: [UDP Query User{340C6ABF-E6D1-4EDD-A943-F217D12B3292}E:\gry\far cry 4\bin\farcry4.exe] => (Block) E:\gry\far cry 4\bin\farcry4.exe FirewallRules: [TCP Query User{BE86A73B-C007-4D2B-A9B9-E932388C97D1}E:\gry\outlast\outlast\binaries\win64\olgame.exe] => (Allow) E:\gry\outlast\outlast\binaries\win64\olgame.exe FirewallRules: [UDP Query User{A57714C6-2A5E-4DB6-92B5-54AEF4136F6B}E:\gry\outlast\outlast\binaries\win64\olgame.exe] => (Allow) E:\gry\outlast\outlast\binaries\win64\olgame.exe FirewallRules: [TCP Query User{BB8D3F24-E914-49A6-BDE9-1A9E6871E5A4}E:\gry\splinter cell - blacklist\splinter cell blacklist\src\system\blacklist_game.exe] => (Block) E:\gry\splinter cell - blacklist\splinter cell blacklist\src\system\blacklist_game.exe FirewallRules: [UDP Query User{F0329D61-0981-4F79-9C9B-0AAD51F3E353}E:\gry\splinter cell - blacklist\splinter cell blacklist\src\system\blacklist_game.exe] => (Block) E:\gry\splinter cell - blacklist\splinter cell blacklist\src\system\blacklist_game.exe FirewallRules: [TCP Query User{E926459E-EDA6-4444-932B-0B8E18AAE047}C:\program files (x86)\meyer sound\compass\resources\data\virtualgalileodaemon.exe] => (Allow) C:\program files (x86)\meyer sound\compass\resources\data\virtualgalileodaemon.exe FirewallRules: [UDP Query User{5C39217A-05C5-4A8A-A330-9EB8CAA68550}C:\program files (x86)\meyer sound\compass\resources\data\virtualgalileodaemon.exe] => (Allow) C:\program files (x86)\meyer sound\compass\resources\data\virtualgalileodaemon.exe FirewallRules: [{AB7EA34C-AAE1-41BC-AA04-70E4FF7EBCBE}] => (Allow) C:\Program Files (x86)\Bosch\DNS-SD\BoschDNSSDService.exe FirewallRules: [{91DFB783-5C4D-4DDB-B5F4-CA067F3885FD}] => (Allow) LPort=8800 FirewallRules: [TCP Query User{05DFB57C-891E-40B0-97B1-C4790EE1DA0C}C:\programdata\iris-net\v2.9.1\irisnet.exe] => (Allow) C:\programdata\iris-net\v2.9.1\irisnet.exe FirewallRules: [UDP Query User{1FC403F1-F91B-4270-BBF3-66A6AD734AAC}C:\programdata\iris-net\v2.9.1\irisnet.exe] => (Allow) C:\programdata\iris-net\v2.9.1\irisnet.exe FirewallRules: [{0534CF61-B634-486F-8714-EFB363AF3E17}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{B71F63DB-F06D-41A2-89F8-A2B50465F2FB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{70F5D779-C466-4516-B957-680678137FFC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{5A881808-C2F6-462D-A8E0-D0D61B661F5D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{DE00FA22-53E6-412A-819A-BE19E91A5DB4}] => (Allow) LPort=8501 FirewallRules: [{6EEC0156-1E28-478C-8F23-74C632CD1CB0}] => (Allow) LPort=8501 FirewallRules: [{CC264AA0-0CF6-4496-BA6B-7BC9A7179D45}] => (Allow) LPort=54925 FirewallRules: [{C99397DC-30F8-44DC-AD47-DD4AEC59C3CB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{50EF13DE-F8CA-4A57-9EF2-080E6814AE24}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{09456326-F75D-4A4B-99C0-244D768D37E9}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{92B61793-F332-4589-8EA3-77EECEA42CB6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{9D61541F-B686-42E0-BB56-2F3A23BCE3C6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1AE5D9F8-A6D8-44CB-B3BD-810B76512B9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{1CBB5DD3-DC29-4CCC-9153-A9BC89E06142}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D8BA4365-CC9D-411C-8E39-B0024D962143}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{5F66BB19-FEF6-438A-92D4-AC5001102A88}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{F2990E31-F025-4217-9EF0-B4A4E3525916}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/01/2015 06:44:10 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (11/01/2015 06:44:10 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (11/01/2015 06:44:10 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (11/01/2015 06:42:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: OTL.com, wersja: 3.2.69.0, sygnatura czasowa: 0x2a425e19 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18933, sygnatura czasowa: 0x55a69ec4 Kod wyjątku: 0x0eedfade Przesunięcie błędu: 0x0000c42d Identyfikator procesu powodującego błąd: 0xd78 Godzina uruchomienia aplikacji powodującej błąd: 0xOTL.com0 Ścieżka aplikacji powodującej błąd: OTL.com1 Ścieżka modułu powodującego błąd: OTL.com2 Identyfikator raportu: OTL.com3 Error: (11/01/2015 06:04:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/01/2015 06:01:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: OTL.scr, wersja: 3.2.69.0, sygnatura czasowa: 0x2a425e19 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18933, sygnatura czasowa: 0x55a69ec4 Kod wyjątku: 0x0eedfade Przesunięcie błędu: 0x0000c42d Identyfikator procesu powodującego błąd: 0xe6c Godzina uruchomienia aplikacji powodującej błąd: 0xOTL.scr0 Ścieżka aplikacji powodującej błąd: OTL.scr1 Ścieżka modułu powodującego błąd: OTL.scr2 Identyfikator raportu: OTL.scr3 Error: (11/01/2015 06:01:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: OTL.exe, wersja: 3.2.69.0, sygnatura czasowa: 0x2a425e19 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18933, sygnatura czasowa: 0x55a69ec4 Kod wyjątku: 0x0eedfade Przesunięcie błędu: 0x0000c42d Identyfikator procesu powodującego błąd: 0xe04 Godzina uruchomienia aplikacji powodującej błąd: 0xOTL.exe0 Ścieżka aplikacji powodującej błąd: OTL.exe1 Ścieżka modułu powodującego błąd: OTL.exe2 Identyfikator raportu: OTL.exe3 Error: (11/01/2015 06:01:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: OTL.com, wersja: 3.2.69.0, sygnatura czasowa: 0x2a425e19 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18933, sygnatura czasowa: 0x55a69ec4 Kod wyjątku: 0x0eedfade Przesunięcie błędu: 0x0000c42d Identyfikator procesu powodującego błąd: 0x1b10 Godzina uruchomienia aplikacji powodującej błąd: 0xOTL.com0 Ścieżka aplikacji powodującej błąd: OTL.com1 Ścieżka modułu powodującego błąd: OTL.com2 Identyfikator raportu: OTL.com3 Error: (11/01/2015 05:56:40 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/01/2015 05:55:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (11/01/2015 06:12:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (11/01/2015 06:12:33 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Ładowanie sterownika \??\C:\ComboFix\catchme.sys zostało zablokowane z powodu niezgodności z tym systemem. Skontaktuj się z dostawcą oprogramowania w celu uzyskania zgodnej wersji sterownika. Error: (11/01/2015 06:11:00 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (11/01/2015 06:08:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa SpyHunter 4 Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/01/2015 06:04:22 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Nieoczekiwane niepowodzenie. Kod błędu: D@01010004 Error: (11/01/2015 06:04:22 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Nieoczekiwane niepowodzenie. Kod błędu: D@01010004 Error: (11/01/2015 06:04:22 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Nieoczekiwane niepowodzenie. Kod błędu: D@01010004 Error: (11/01/2015 06:03:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\IWMSSvc.dll Error: (11/01/2015 06:03:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\IWMSSvc.dll Error: (11/01/2015 06:03:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\IWMSSvc.dll CodeIntegrity: =================================== Date: 2015-11-01 18:12:33.590 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-11-01 18:12:33.575 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:23.660 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:23.629 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:18.575 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:18.543 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:13.221 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-10-26 14:43:13.206 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz Percentage of memory in use: 40% Total physical RAM: 8112.12 MB Available physical RAM: 4804.68 MB Total Virtual: 16222.44 MB Available Virtual: 12955.75 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.69 GB) (Free:15.54 GB) NTFS Drive d: (Projekty) (Fixed) (Total:609.01 GB) (Free:308.45 GB) NTFS Drive e: (Multimedia) (Fixed) (Total:312.5 GB) (Free:58.91 GB) NTFS Drive f: (DriverCD) (Fixed) (Total:10 GB) (Free:5.07 GB) NTFS Drive i: (Dane) (Fixed) (Total:887.17 GB) (Free:14.34 GB) NTFS Drive j: (MAC) (Fixed) (Total:44.3 GB) (Free:27.29 GB) exFAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00591BDD) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: D8560A13) Partition 1: (Active) - (Size=609 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=312.5 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 27435DB4) Partition 1: (Not Active) - (Size=887.2 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=44.3 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================