Additional scan result of Farbar Recovery Scan Tool (x64) Version:03-10-2015 Ran by MARKO (2015-10-04 17:54:49) Running from C:\Users\MARKO\Downloads Windows 7 Ultimate Service Pack 1 (X64) (2013-09-04 10:47:24) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-704505325-1926296974-3857051907-500 - Administrator - Disabled) Guest (S-1-5-21-704505325-1926296974-3857051907-501 - Limited - Disabled) MARKO (S-1-5-21-704505325-1926296974-3857051907-1000 - Administrator - Enabled) => C:\Users\MARKO ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: COMODO Antivirus (Enabled - Up to date) {F25D0092-CDBE-B303-ADB7-88DE8CDECCF5} AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Enabled) {CA6681B7-87D1-B25B-86E8-21EB720D8B8E} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\uTorrent) (Version: 3.4.2.39586 - BitTorrent Inc.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.16.0 - Mirillis) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Croatian (HKLM-x32\...\{AC76BA86-7AD7-1050-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\{0099B484-C24C-4D5F-8167-B0F6DF196E72}) (Version: 12.0.3.133 - Adobe Systems, Inc) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.) AIDA64 Extreme Edition v3.00 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.00 - FinalWire Ltd.) AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AMD OverDrive (HKLM-x32\...\{2F51311F-8A4B-4D17-9CB8-AAEACBBA9A92}) (Version: 3.2.0.0386 - Advanced Micro Devices, Inc.) AnyMedia Player 3.4.6 (HKLM-x32\...\{1959CCD2-1227-4de4-97E7-04F29D526762}_is1) (Version: 3.4.6 - cyan soft ltd) AnyTV v5.15.0 Premium Full (HKLM-x32\...\AnyTV v5.15.0 Premium Full) (Version: Full - S.P.D.) Application Profiles (HKLM-x32\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.) Astroburn Pro (HKLM-x32\...\Astroburn Pro) (Version: 3.1.0.0190 - DT Soft Ltd) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) Audials (HKLM-x32\...\{785E309A-737D-422E-9520-369C6938D42E}) (Version: 10.2.30900.0 - Audials AG) AVS Audio Converter 7 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.1.528 - Online Media Technologies Ltd.) AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.1.487 - Online Media Technologies Ltd.) AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.) AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.) AVS Disc Creator 5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.1.1.523 - Online Media Technologies Ltd.) AVS Document Converter 2.2.7 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.2.7.222 - Online Media Technologies Ltd.) AVS DVD Authoring (HKLM-x32\...\AVS DVD Authoring_is1) (Version: - Online Media Technologies Ltd.) AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.) AVS Image Converter 3.0.1.269 (HKLM-x32\...\AVS Image Converter_is1) (Version: 3.0.1.269 - Online Media Technologies Ltd.) AVS Media Player 4.2.1.103 (HKLM-x32\...\AVS Media Player_is1) (Version: 4.2.1.103 - Online Media Technologies Ltd.) AVS Photo Editor (HKLM-x32\...\AVS Photo Editor_is1) (Version: 2.1.1.133 - Online Media Technologies Ltd.) AVS Registry Cleaner 2.2.3.237 (HKLM-x32\...\AVS Registry Cleaner_is1) (Version: 2.2.3.237 - Online Media Technologies Ltd.) AVS Ringtone Maker version 1.6 (HKLM-x32\...\AVS Ringtone Maker 1.6_is1) (Version: 1.6.1.140 - Online Media Technologies Ltd.) AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.) AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.4.1.540 - Online Media Technologies Ltd.) AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.4.1.240 - Online Media Technologies Ltd.) AVS Video Recorder 2.4 (HKLM-x32\...\AVS Video Recorder_is1) (Version: - Online Media Technologies Ltd.) AVS Video ReMaker 4.2.1.152 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 4.2.1.152 - Online Media Technologies Ltd.) AVS4YOU Software Navigator 1.3 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.) Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.0.397 - Bandisoft.com) Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com) Bass Audio Decoder (remove only) (HKLM-x32\...\Bass Audio Decoder) (Version: - ) Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.65.1074 - AB Team, d.o.o.) BurnAware Professional 6.4 (HKLM-x32\...\BurnAware Professional_is1) (Version: - Burnaware) CD Audio Reader Filter (remove only) (HKLM-x32\...\CD Audio Reader Filter) (Version: - ) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4255 - CDBurnerXP) Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine) ChrisPC JTV Player 3.80 (HKLM-x32\...\{82A82BAB-1CA8-49CF-8B1C-49FA8F6F0D47}_is1) (Version: - Chris P.C. srl) Comica 1.11 (HKLM-x32\...\{C343E19D-1162-4B5D-8550-408699E03C28}_is1) (Version: 1.11 - Joseph Cox) Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 43.3.3.185 - Comodo) COMODO Internet Security Premium (HKLM\...\{5969857A-B3B6-4CB8-8AC0-240E1A099246}) (Version: 6.2.23257.2860 - COMODO Security Solutions Inc.) Consolas Font Family (HKLM-x32\...\{6AE22174-4FFA-4572-B692-31F0C386ED38}) (Version: 1.00.0000 - Microsoft Corporation) COWON Media Center - jetAudio Plus VX (HKLM-x32\...\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}) (Version: 8.0.17 - COWON) Curse Client (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd) DCoder Image Source (remove only) (HKLM-x32\...\DCoder Image Source) (Version: - ) DivXLand Media Subtitler (HKLM-x32\...\DivXLand Media Subtitler) (Version: - ) DScaler 5 Mpeg Decoders (HKLM-x32\...\DScaler 5 Mpeg Decoders_is1) (Version: - ) DVD Audio Extractor 7.1.2 (HKLM-x32\...\DVD Audio Extractor_is1) (Version: - Computer Application Studio) Extreme Picture Finder 3.20.1 (HKLM-x32\...\Extreme Picture Finder_is1) (Version: 3.20.1 - Extreme Internet Software) EZ CD Audio Converter (32-bit) (HKLM-x32\...\EZ CD Audio Converter (32-bit)) (Version: 1.2.2 - Poikosoft) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) FFMPEG Core Files (remove only) (HKLM-x32\...\FFMPEG Core Files) (Version: - ) FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version: - ) FormatFactory 3.1.2 (HKLM-x32\...\FormatFactory) (Version: 3.1.2 - Free Time) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group) Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.15.0 - Futuremark Corporation) Galactic Civilizations III (HKLM-x32\...\Galactic Civilizations III_is1) (Version: - ) GameSave Manager v3 (HKLM-x32\...\GameSaveManager_v3) (Version: 3.1.355.0 - InsaneMatt) GetDiz (HKLM-x32\...\GetDiz) (Version: 4.8 - Outertech) GOM Audio (HKLM-x32\...\GomAudio) (Version: 2.0.2.0287 - Gretech Corporation) GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.53.5169 - Gretech Corporation) Google Chrome (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.) Internet TV 8.1 (HKLM-x32\...\Internet TV_is1) (Version: - MMToolz, Inc.) IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) JDownloader 0.9 (HKLM-x32\...\jdownloader09) (Version: 0.9 - AppWork GmbH) KotSub 1.1.0 (HKLM-x32\...\KotSub) (Version: 1.1.0 - SURGAWANA konsult.) LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) LibreOffice 4.1 Help Pack (Croatian) (HKLM-x32\...\{2C452BA2-1D66-46F5-8693-018B36C7F8D9}) (Version: 4.1.1.2 - The Document Foundation) Light Image Resizer 4.4.4.0 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.4.4.0 - ObviousIdea) Lightshot-5.3.0.0 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.3.0.0 - Skillbrains) Machete 4.0 (HKLM-x32\...\{5E305628-4161-4234-B718-D13623DE66C1}) (Version: 4.0.22 - MacheteSoft) MadVR (remove only) (HKLM-x32\...\MadVR) (Version: - ) Malwarebytes Anti-Exploit version 1.07.1.1015 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.07.1.1015 - Malwarebytes) MathType 6 (HKLM-x32\...\DSMT6) (Version: 6.9 - Design Science, Inc.) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft) Microsoft Office Language Pack 2010 - Croatian/Hrvatski (HKLM-x32\...\Office14.OMUI.hr-hr) (Version: 14.0.4763.1021 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office Proofing Tools Kit Compilation 2010 (HKLM-x32\...\Office14.PROOFKIT) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Project 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003B-0000-0000-0000000FF1CE}_Office14.PRJPRO_{8A8F117F-8EDB-440D-B679-F08909D729F7}) (Version: - Microsoft) Microsoft Project Professional 2010 (HKLM-x32\...\Office14.PRJPRO) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation) Microsoft Visio 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-0057-0000-0000-0000000FF1CE}_Office14.VISIO_{01D8AE4B-A04D-47E5-81BF-E3F98B81B8C3}) (Version: - Microsoft) Microsoft Visio Premium 2010 (HKLM-x32\...\Office14.VISIO) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Mozilla Firefox 41.0.1 (x86 hr) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 hr)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) Mozilla Thunderbird 17.0.8 (x86 hr) (HKLM-x32\...\Mozilla Thunderbird 17.0.8 (x86 hr)) (Version: 17.0.8 - Mozilla) NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation) NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.19.0 - NEC Electronics Corporation) Hidden NeoDownloader v.2.9.4 (HKLM-x32\...\{E76CDDCE-EFC0-4FE5-9972-9489CE49AA55}_is1) (Version: 2.9.4 - Neowise Software) NVIDIA PhysX (HKLM-x32\...\{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}) (Version: 9.13.0725 - NVIDIA Corporation) OMC ModPack Client verzija 1.1.11.6 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.1.11.6 - Odem Mortis) Open eBook Reader (HKLM-x32\...\{6266EB5F-944B-48D0-A26C-2AEF8482D6DA}) (Version: 1.0.0 - ArriviSoft) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenSource AVI Splitter (remove only) (HKLM-x32\...\OpenSource AVI Splitter) (Version: - ) OpenSource DTS/AC3/DD+ Source Filter (remove only) (HKLM-x32\...\OpenSource DTS/AC3/DD+ Source Filter) (Version: - ) OpenSubDownloader 2.0.18 (HKLM-x32\...\OpenSubDownloader) (Version: 2.0.18 - Libor Nenadál) P2PFilter 3.0.5 (HKLM-x32\...\P2PFilter) (Version: 3.0.5 - SopCast.com) Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC) Paper v0.4 (HKLM-x32\...\Paper) (Version: "0.4.1" - ) PhotoLine 17.5.5.0 (HKLM\...\PhotoLine_is1) (Version: 17.5.5.0 - Computerinsel GmbH) PopChar 6.1 (HKLM\...\ergonis PopChar_is1) (Version: 6.1 - Ergonis Software) PrivDog (HKLM\...\{C01D249F-23DA-45B1-A5FF-12ECD647D5C6}) (Version: 3.0.108.0 - PrivDog.com) PrivDog 2 Legacy Browser Plug-ins (HKLM-x32\...\PrivDog) (Version: 2.2.0.14 - privdog.com) RarmaRadio 2.69 (HKLM-x32\...\RarmaRadio_is1) (Version: - RaimerSoft) Readon TV Movie Radio Player 7.6.0.0 (HKLM-x32\...\{80074966-5231-428D-9AE7-B7D5D2DC3246}) (Version: 7.6.0 - Readon Technology) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6043 - Realtek Semiconductor Corp.) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Splash PRO EX (HKLM-x32\...\{CE7051A6-42D2-4C52-94BA-83A7BDB7AD19}) (Version: 1.11.0 - Mirillis) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Sublight (HKLM\...\Sublight_is1) (Version: 4.0.0 - Sublight Labs) Subtitle Edit 3.3.8 (HKLM-x32\...\SubtitleEdit_is1) (Version: 3.3.8.2047 - Nikse) Subtitle Workshop 6.0a (HKLM-x32\...\SubtitleWorkshop) (Version: - ) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TapinRadio 1.58.2 (HKLM-x32\...\TapinRadio_is1) (Version: - Raimersoft) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer) Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com) TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.3020.7 - TuneUp Software) TuneUp Utilities 2013 (x32 Version: 13.0.3020.7 - TuneUp Software) Hidden TuneUp Utilities Language Pack (en-US) (x32 Version: 13.0.3020.7 - TuneUp Software) Hidden TweakNow PowerPack (HKLM-x32\...\TweakNow PowerPack_is1) (Version: 4.2.9 - TweakNow.com) Universal Extractor 1.6.1 (HKLM-x32\...\Universal Extractor_is1) (Version: 1.6.1 - Jared Breland) Viber (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\Viber) (Version: 5.2.0.2546 - Viber Media Inc) VideoMach (HKLM-x32\...\VideoMach) (Version: - ) VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN) Webcam (HKLM-x32\...\{ED1674F5-5165-49BF-B546-AE5343111540}) (Version: 1.0.3.6 - ETRON) WhereIsIt? 2010 (HKLM-x32\...\whereisit-wii_is1) (Version: 2010 - Robert Galle) Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc) Winamp Detector Plug-in (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Windows 7 Manager (HKLM\...\{92A8D72E-784B-4F09-AC0E-A9E0C1F64D2C}) (Version: 4.3.1 - Yamicsoft) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warships (HKU\S-1-5-21-704505325-1926296974-3857051907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) Xbox Controller User Interface (XCUI) (HKLM-x32\...\{7BD4515F-4780-405E-A1B1-B4554CBB6AC0}) (Version: 1.5.0 - Randall Crock) XnView 1.99.5 (HKLM-x32\...\XnView_is1) (Version: 1.99.5 - Gougelet Pierre-e) YACReader 6.5.3 (HKLM-x32\...\YACReader_is1) (Version: - ) Zoom Player (remove only) (HKLM-x32\...\ZoomPlayer) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-704505325-1926296974-3857051907-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-704505325-1926296974-3857051907-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\MARKO\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-704505325-1926296974-3857051907-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\MARKO\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.) ==================== Restore Points ========================= 04-10-2015 16:58:18 JRT Pre-Junkware Removal 04-10-2015 17:13:24 JRT Pre-Junkware Removal ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2013-09-06 03:05 - 00001224 ____A C:\Windows\system32\Drivers\etc\hosts 0.0.0.0 astroburn.com 0.0.0.0 disc-soft.com 0.0.0.0 secure.disc-soft.com 127.0.0.1 registeraudials.com 127.0.0.1 registeraudials.com 127.0.0.1 audials.com 127.0.0.1 188.40.53.196 127.0.0.1 www.inwx.de 127.0.0.1 lists.rs-audials.com 127.0.0.1 www.ns1.metakauf.de 127.0.0.1 securestore.audials.com 127.0.0.1 www.audials.com&oplayout 127.0.0.1 secure.element5.com 127.0.0.1 shop.audials.com ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0A2F90A3-D2C6-425E-BE62-21CB3C5E583B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22] (Adobe Systems Incorporated) Task: {0C818936-56DD-4336-A15C-754BD88FFAA2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000Core => C:\Users\MARKO\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {1FF44E72-7070-4687-9AF1-0CD4589B73D2} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-15] (Adobe Systems Incorporated) Task: {30FF6C86-C387-4A55-938A-927FDB269635} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-10-03] (COMODO) Task: {3456D229-98C4-4CFA-9586-5A795A0852C9} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-10-03] (COMODO) Task: {34A00E08-3200-4CB4-A948-EBC89F7EB071} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000UA => C:\Users\MARKO\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {5965BBDB-0875-47D1-BE9C-72EF2185D833} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-10-03] (COMODO) Task: {6491B0B2-F8F3-4771-BEB0-6B5CA689B235} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-09-05] () Task: {64A792FD-B423-49D3-BE75-766241792A8B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-09] (Oracle Corporation) Task: {6AF3F703-16FA-429A-B5BB-62DBF73EEAD0} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000Core => C:\Users\MARKO\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-24] (Facebook Inc.) Task: {84E9F583-1EDA-4083-89E1-9AFA4AC4492E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-15] (Adobe Systems Incorporated) Task: {9E122F9B-AB47-4005-9ADA-2F3B490630E9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000UA => C:\Users\MARKO\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-24] (Facebook Inc.) Task: {A1AC9C81-592C-4674-8962-231E5D02EE28} - System32\Tasks\Google Updater and Installer => C:\Users\MARKO\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {A64AD9C5-AF32-4230-99B4-49F1EB7036B4} - System32\Tasks\Raidcall_EN => C:\Program Files (x86)\RaidCall\raidcall.exe Task: {AD97229A-30BC-4264-A5DB-7062D65CB663} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-10-03] (COMODO) Task: {B2525E91-720F-4F4E-87A1-08C0868DBBF6} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-10-03] (COMODO) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000Core.job => C:\Users\MARKO\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000UA.job => C:\Users\MARKO\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000Core.job => C:\Users\MARKO\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-704505325-1926296974-3857051907-1000UA.job => C:\Users\MARKO\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2011-03-17 00:07 - 2011-03-17 00:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2013-10-17 15:27 - 2015-05-17 21:20 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows\system32\amdmantle64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\amdmmcl6.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\amdpcom64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiapfxx.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\aticalcl64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aticaldd64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aticalrt64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aticfx64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atidemgy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atidxx64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\atig6pxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atig6txx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiglpxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atimpc64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atio6axx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atitmm64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiu9p64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiumd64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiumd6a.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atiuxp64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\clinfo.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\coinst_14.50.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DelayAPO.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mantle64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mantleaxl64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OpenVideo64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OVDecode64.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\amdmantle32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\amdmmcl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\amdocl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\amdpcom32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiadlxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\aticalcl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\aticaldd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\aticalrt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\aticfx32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atidxx32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atigktxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiglpxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atimpc32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atioglxx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiu9pag.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiumdag.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiumdva.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atiuxpag.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mantle32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mantleaxl32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OpenVideo.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OVDecode.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} AlternateDataStreams: C:\Windows\system32\Drivers\amdacpksd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\AtihdW76.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\atikmpag.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\browserMon.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\htcnprot.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_bus.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_cm.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_cmnt.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_mdfl.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_mdm.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_wh.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ss_whnt.sys:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Desktop\212379-furious.seven.2015.extended.720p.bluray.x264sparks.zip:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Desktop\GPUShark-0.9.4.1.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Desktop\GPUShark-0.9.4.1.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\061007_valuev_hmed_10p.hmedium.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11030387_10206468025723123_956342331_o(1).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11030387_10206468025723123_956342331_o(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11030387_10206468025723123_956342331_o.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11030387_10206468025723123_956342331_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11068225_10206468025083107_1735228300_o(1).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11068225_10206468025083107_1735228300_o(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11068225_10206468025083107_1735228300_o.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11068225_10206468025083107_1735228300_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11103955_10205430903524050_1098604122_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n(1).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n(2).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n(2).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11116120_10206468018802950_1721097251_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11129454_10205430904244068_1111571555_n.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11129454_10205430904244068_1111571555_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o(1).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o(2).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o(2).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11144502_10206468020122983_967023327_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11148136_10206468023163059_73087845_o(1).jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11148136_10206468023163059_73087845_o(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11148136_10206468023163059_73087845_o.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11148136_10206468023163059_73087845_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11659157_10207150269498791_1524202941_o.jpg:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\11659157_10207150269498791_1524202941_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11781825_932132753498964_5360566800115705655_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11781863_677966129005893_7561335516528567574_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11796445_677965965672576_1447695330584980903_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11822369_681258878676618_8613277980097998194_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\11828680_681258562009983_5805050209707176710_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\12002891_494712734022366_2090428991934542666_n.png:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\12047163_703269969808842_7473331374564582355_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\AdwCleaner.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\AdwCleaner.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\aNK9ZVv_700b.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\aOm4Owy_460s_v1.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\apB5XDB_700b_v1.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\aZN8q96_460sv.mp4:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\aZN8q96_460sv.mp4:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\azV1ygx_700b_v1.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\epic_photos_that_are_truly_fascinating_640_23.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\etses.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\faysvcyx.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\Ferid Velagić-Dvomatično pčelarstvo.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\FreeAlarmClockSetup.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\FreeAlarmClockSetup.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\FRST.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\FRST.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\FRST64.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\FRST64.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\Gives-their-heart-completely.2-640x627.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\I-will-always-love-you.2.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\images(1).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\images(1).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\images.pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\images.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\joker.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\JRT(1).exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\JRT(1).exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\JRT.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\JRT.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\jxpiinstall.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\jxpiinstall.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\K-Lite_Codec_Pack_1140_Full(1).exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\K-Lite_Codec_Pack_1140_Full(1).exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\large.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\mbae-setup-1.07.1.1015.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\mbae-setup-1.07.1.1015.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\Never-forget-this.5-640x777.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica(1).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica(1).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica(2).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica(2).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica.pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\PBZ-kartica.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\RMDrake2.png:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\RMDrake4.png:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\RMDrake5.png:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\RMDrake8.png:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0001(1).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0001(1).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0001.pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0001.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0002(1).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0002(1).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0002.pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0002.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0003(1).pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0003(1).pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0003.pdf:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\scan0003.pdf:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\Tanja Savic - Za moje dobro - (Audio 2010).mp3.part:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\witcher.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\ygyxdg.jpg:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\YTDSetup.exe:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\YTDSetup.exe:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\[kat.cr]k.lite.codec.pack.update.10.1.4.build.20131106.06.11.2013(1).torrent:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\[kat.cr]k.lite.codec.pack.update.10.1.4.build.20131106.06.11.2013(1).torrent:$CmdZnID AlternateDataStreams: C:\Users\MARKO\Downloads\[kat.cr]k.lite.codec.pack.update.10.1.4.build.20131106.06.11.2013.torrent:$CmdTcID AlternateDataStreams: C:\Users\MARKO\Downloads\[kat.cr]k.lite.codec.pack.update.10.1.4.build.20131106.06.11.2013.torrent:$CmdZnID AlternateDataStreams: C:\Users\MARKO\AppData\Roaming\inst.exe:$CmdTcID ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-704505325-1926296974-3857051907-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\MARKO\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 85.114.32.7 - 85.114.32.8 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{E575DBF6-56E1-4F87-9893-663A14E2E786}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [UDP Query User{AA0A3C0F-6287-4FE8-B7C6-558365CF6128}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [{BCB2783E-02AD-4B57-A3DA-2E7658C59202}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{41BB8117-7BF1-4A7A-AD69-37ADCE9BB148}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{A32152F0-5506-4EC6-B95B-05E378F987E4}] => (Allow) C:\Users\MARKO\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{26E8BEDB-56AB-45B1-B4AB-BD1235809BF5}] => (Allow) C:\Users\MARKO\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{E933B0F5-47E8-477B-B266-34B64D21BDF6}] => (Allow) C:\Program Files (x86)\Audials\Audials 10\Audials.exe FirewallRules: [{42C8082E-F0FB-4A33-9513-5610340AD9B7}] => (Allow) LPort=12972 FirewallRules: [{200B835E-5DF1-435E-81F9-B349CDAC21B8}] => (Allow) LPort=14714 FirewallRules: [{DBEEA1C9-FB31-4BA3-9D4A-DD8F3E0E043E}] => (Allow) LPort=31931 FirewallRules: [{5CB41221-B4CD-405B-B569-71A9CBFE87FB}] => (Allow) C:\Users\MARKO\AppData\Roaming\PPStream\ppsupdate.exe FirewallRules: [{D4160C92-7948-4CC6-BF3A-00961FFF15BB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe FirewallRules: [{A9B111B3-DAE7-4A8A-B198-BEEDEB7E7AB6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe FirewallRules: [{DA67E60F-706C-4992-A8B0-EDC3D86C70BB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe FirewallRules: [{E1990CDA-968A-4B93-894F-0CABDCA1D9A3}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe FirewallRules: [{7568F49F-1276-4F44-9CF8-91A362F6AD6B}] => (Allow) C:\Users\MARKO\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{78BA7537-E357-4B04-A0E5-6756A6F6162D}] => (Allow) C:\Users\MARKO\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{5146792D-5723-441C-BA7B-9837B54C9BA1}] => (Allow) LPort=80 FirewallRules: [{6D033E91-E258-42C7-887B-73F869ACC0B5}] => (Allow) LPort=443 FirewallRules: [{BE1E283A-19D7-48DD-9CF7-20E9BD3E00C2}] => (Allow) LPort=20010 FirewallRules: [{3B72988E-B0AD-407A-9E2F-A1FB4C5BCE31}] => (Allow) LPort=3478 FirewallRules: [{B5FDB07F-FDE9-478C-AB63-BF778820E7E9}] => (Allow) LPort=7850 FirewallRules: [{FAC46314-4AA8-45BA-B692-FFCF2B7A331C}] => (Allow) LPort=7852 FirewallRules: [{27E0FA92-F3F4-4831-BF96-AE4D47222BEF}] => (Allow) LPort=7853 FirewallRules: [{FD10DAD6-30D2-4055-9DEF-B27D11772CAB}] => (Allow) LPort=27022 FirewallRules: [{CE4EF9D5-8DA6-4086-BFEA-03C8EC8F908B}] => (Allow) LPort=6881 FirewallRules: [{DBBA7B42-4EC8-407A-9D4A-DC2AB09485F9}] => (Allow) LPort=33333 FirewallRules: [{FBD005DD-5A9B-475F-BAAF-7D142412AAAF}] => (Allow) LPort=20443 FirewallRules: [{75E39017-5B4B-4B6B-982B-17A44D92D488}] => (Allow) LPort=8090 FirewallRules: [{24BDBEDD-9C56-43B6-905F-03C190C3FE00}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{424D13E6-7DED-4A1A-BDF3-90605F82C9AB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{AC204456-0188-4D59-9B76-693C5E888121}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{BA8FD09D-3376-4146-B2F9-7A65046227B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{ED18609D-BCBE-461D-9BD2-92E6BE00C9CB}] => (Allow) C:\Users\MARKO\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{41219F5C-9ADB-4627-9DB5-D5942EB98D4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2DD0BABC-CA16-4155-9D83-0B9F1C4EDB4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6E05B460-7125-4D78-8DF5-9DBE2966C9C3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{9188FC3E-ACA2-4E6D-958D-1B9C0AA573F4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{367055E0-0F3B-4DC9-8055-DE71A67E6125}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{2C1AA97A-2FA7-4708-8166-A3A4C6692441}] => (Allow) C:\Program Files (x86)\OMC ModPack Client\OMC ModPack Client.exe FirewallRules: [{CF981079-716B-45AC-A24D-3D9DCC083BC0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C2003FEE-AF01-4BEA-BBC8-5365C3B0F00E}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{E132FF0A-7FF9-451D-BA16-B9AD5FF80296}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{67A1B91E-36F7-4159-9E4D-2E76A380447B}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\ClientLauncherG.cdx FirewallRules: [{D33F1CE5-593E-4949-AA24-83689639E479}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\ClientLauncherG.cdx FirewallRules: [{F3955CF2-B0A8-49AA-AAC6-2CADFBE7E4A1}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\GooG.cdx FirewallRules: [{2C6F420F-C654-4B0D-9BEB-D85F083550DC}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\GooG.cdx FirewallRules: [{B5A8EFA0-889B-4CE2-99CE-C727879BC753}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\InstanceServerG.cdx FirewallRules: [{7D93A1A3-524C-41BC-B9B5-6B441A3F0A38}] => (Allow) C:\VTRoot\HarddiskVolume2\Program Files (x86)\Grey Goo\InstanceServerG.cdx FirewallRules: [{C1CD2EA5-9A97-4609-B6A8-B3AE4EE79F05}] => (Allow) C:\Users\MARKO\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: Standard PS/2 Keyboard Description: Standard PS/2 Keyboard Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard keyboards) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (10/04/2015 05:06:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacija koja je prouzročila pogrešku: plugin-container.exe, verzija: 41.0.1.5750, vremenska oznaka: 0x560b37be Modul koji je prouzročio pogrešku: mozglue.dll, verzija: 41.0.1.5750, vremenska oznaka: 0x560b229d Kôd iznimke: 0x80000003 Pomak pogreške 0x0000ec7f Id postupka: 0x138c Vrijeme pokretanja aplikacije koja je prouzročila pogrešku: 0xplugin-container.exe0 Put aplikacije koja je prouzročila pogrešku: plugin-container.exe1 Put modula koji je prouzročio pogrešku: plugin-container.exe2 Id izvješća: plugin-container.exe3 Error: (10/04/2015 05:02:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisFileRatingChangeCisFileRatingChange//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisStatusChangeCisStatusChange//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisNotificationCisNotification//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM FwAlertFwAlert//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM DfAlertDfAlert//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM AvAlertAvAlert//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisAlertCisAlert//./root/cis Error: (10/03/2015 06:24:58 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisEventCisEvent//./root/cis System errors: ============= Error: (10/04/2015 05:16:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis Malwarebytes Anti-Exploit Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:16:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis Office Software Protection Platform neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:16:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Servis Windows Live ID Sign-in Assistant neočekivano je prekinut. To se dogodilo 1 puta. Za 10000 ms bit će poduzeta sljedeća akcija ispravljanja: Ponovno pokretanje servisa. Error: (10/04/2015 05:16:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis TuneUp Utilities Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:15:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Servis Internet Pass-Through Service neočekivano je prekinut. To se dogodilo 1 puta. Za 1000 ms bit će poduzeta sljedeća akcija ispravljanja: Ponovno pokretanje servisa. Error: (10/04/2015 05:15:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis COMODO Dragon Update Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:15:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis Bonjour Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:15:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis AMD FUEL Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:15:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis Adobe Acrobat Update Service neočekivano je prekinut. To se dogodilo 1 puta. Error: (10/04/2015 05:15:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Servis AMD External Events Utility neočekivano je prekinut. To se dogodilo 1 puta. ==================== Memory info =========================== Processor: AMD Phenom(tm) II X4 955 Processor Percentage of memory in use: 45% Total physical RAM: 4095.24 MB Available physical RAM: 2217.47 MB Total Virtual: 8188.68 MB Available Virtual: 6019.45 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.69 GB) (Free:13.99 GB) NTFS Drive d: () (Fixed) (Total:931.5 GB) (Free:82.79 GB) NTFS ==>[system with boot components (obtained from reading drive)] Drive g: (GeneralsZH1) (CDROM) (Total:0.39 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 550AF467) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 04D804D8) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================