MEMTEST DOPADL BEZ CHYB
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015
Ran by PC (administrator) on PC-PC on 12-01-2015 15:24:02
Running from C:\Users\PC\Desktop
Loaded Profile: PC (Available profiles: PC)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Advanced Micro Devices) C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AVAST Software) D:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(BitTorrent Inc.) C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [CmPCIaudio] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => D:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\Run: [GoogleChromeAutoLaunch_73B90D4D0D4A45E4E1249D0D8EDB5EB0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => D:\Microsoft Office 2013\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => D:\Microsoft Office 2013\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => D:\Microsoft Office 2013\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3788455234-4125237215-3820227731-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> D:\Microsoft Office 2013\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Microsoft Office 2013\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> D:\Microsoft Office 2013\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Microsoft Office 2013\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3788455234-4125237215-3820227731-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3788455234-4125237215-3820227731-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-13]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSearchURL: Default -> http://www.google.com/search?q={searchTerms}
CHR DefaultSuggestURL: Default ->
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-23]
CHR Extension: (Dokumenty Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-23]
CHR Extension: (Disk Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-23]
CHR Extension: (WOT) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-07-22]
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-23]
CHR Extension: (Adblock Plus) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-23]
CHR Extension: (Steam inventory helper) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2014-11-10]
CHR Extension: (Vyhledávání Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-23]
CHR Extension: (Lounge Assistant) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\enjonnlehciedbcidabdglnnihcncbml [2015-01-04]
CHR Extension: (Tabulky Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-23]
CHR Extension: (Деревянный хром) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmngljdjkkpkpkgkbdgepfbcjomclban [2015-01-04]
CHR Extension: (Twitch Now) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2014-12-15]
CHR Extension: (Peněženka Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-23]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-13]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [116224 2014-11-20] (Advanced Micro Devices) [File not signed]
R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-13] (AVAST Software)
R2 avast! Firewall; D:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-13] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2015-01-03] ()
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe [56648 2014-12-15] (Google Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-19] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-21] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [294600 2014-11-21] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-13] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-13] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-13] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-13] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-13] ()
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2014-05-06] (C-Media Inc)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-30] (Disc Soft Ltd)
S3 KbFilter_Kb_FlexDef3x; C:\Windows\System32\DRIVERS\KbFilter_FlexDef3x.sys [22016 2012-10-16] (Siliten)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [38912 2014-10-30] (SteelSeries ApS)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-12 15:24 - 2015-01-12 15:24 - 00016595 _____ () C:\Users\PC\Desktop\FRST.txt
2015-01-12 15:23 - 2015-01-12 15:24 - 00000000 ____D () C:\FRST
2015-01-12 14:19 - 2015-01-12 14:20 - 02124288 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2015-01-12 06:46 - 2015-01-12 06:46 - 00015201 _____ () C:\Users\PC\Downloads\MemTest.zip
2015-01-08 18:19 - 2015-01-08 18:52 - 00000000 ____D () C:\Users\PC\AppData\Local\SteelSeries Engine 3 Client
2015-01-08 18:17 - 2015-01-08 18:19 - 00009500 _____ () C:\Windows\DPINST.LOG
2015-01-07 16:14 - 2015-01-12 15:23 - 00005181 _____ () C:\Windows\setupact.log
2015-01-07 16:14 - 2015-01-07 16:14 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-06 17:22 - 2015-01-06 19:46 - 00000000 ____D () C:\Users\PC\Desktop\Documents\dominik
2015-01-06 16:58 - 2015-01-06 17:15 - 00000512 _____ () C:\Users\PC\Desktop\MBR.dat
2015-01-04 10:46 - 2015-01-04 10:46 - 00000000 ____D () C:\Users\PC\Desktop\backups
2015-01-02 23:21 - 2015-01-07 16:12 - 00000000 ____D () C:\Users\PC\AppData\Local\CrashDumps
2015-01-02 18:04 - 2015-01-02 18:04 - 00000000 __SHD () C:\Users\PC\AppData\Local\EmieUserList
2015-01-02 18:04 - 2015-01-02 18:04 - 00000000 __SHD () C:\Users\PC\AppData\Local\EmieSiteList
2015-01-02 18:04 - 2015-01-02 17:41 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-01-02 17:42 - 2015-01-02 18:39 - 00007184 _____ () C:\zoek-results.log
2015-01-02 16:23 - 2015-01-02 16:23 - 01295360 _____ () C:\Users\PC\Desktop\zoek.exe
2015-01-01 13:33 - 2015-01-01 13:33 - 00000628 _____ () C:\Users\PC\Desktop\JRT.txt
2014-12-31 13:49 - 2014-12-31 13:50 - 18423384 _____ () C:\Users\PC\Desktop\RogueKillerX64.exe
2014-12-31 13:49 - 2014-12-31 13:49 - 01707939 _____ (Thisisu) C:\Users\PC\Desktop\JRT.exe
2014-12-30 16:42 - 2014-12-30 16:42 - 02173952 _____ () C:\Users\PC\Desktop\adwcleaner_4.106.exe
2014-12-30 16:41 - 2014-12-30 16:41 - 00448512 _____ (OldTimer Tools) C:\Users\PC\Desktop\TFC.exe
2014-12-30 16:41 - 2014-12-30 16:41 - 00050688 _____ (Atribune.org) C:\Users\PC\Desktop\ATF-Cleaner.exe
2014-12-30 02:45 - 2015-01-06 19:31 - 00009322 _____ () C:\Users\PC\Desktop\hijackthis.log
2014-12-30 02:45 - 2014-12-30 02:45 - 00388608 _____ (Trend Micro Inc.) C:\Users\PC\Desktop\hijackthis.exe
2014-12-30 01:05 - 2014-12-30 01:05 - 00000219 _____ () C:\Users\PC\Desktop\Counter-Strike Global Offensive.url
2014-12-30 01:03 - 2014-12-30 01:03 - 00000000 ____D () C:\Users\PC\Desktop\cfg
2014-12-28 23:54 - 2014-12-28 23:55 - 58227312 _____ () C:\Users\PC\Downloads\SteelSeriesEngine_3.3.1Setup.exe
2014-12-27 23:34 - 2014-12-27 23:34 - 00002024 _____ () C:\Users\PC\Desktop\AMD Catalyst Control Center.lnk
2014-12-22 11:54 - 2014-12-22 12:03 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-12-22 11:53 - 2014-12-22 11:53 - 00053392 _____ () C:\Windows\SysWOW64\CCCInstall_201412221153285243.log
2014-12-22 11:53 - 2014-12-22 11:53 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-12-22 11:51 - 2014-12-22 11:51 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-12-19 18:39 - 2014-12-28 01:02 - 00109056 ___SH () C:\Users\PC\Desktop\Documents\Thumbs.db
2014-12-19 18:39 - 2014-12-19 18:39 - 00000951 _____ () C:\Users\PC\Desktop\VTFEdit.lnk
2014-12-19 18:37 - 2014-12-19 18:50 - 00000000 ____D () C:\Users\PC\Desktop\Documents\VIOLETA
2014-12-19 15:42 - 2014-12-19 15:43 - 00000000 ____D () C:\Program Files (x86)\VTFEdit
2014-12-19 12:57 - 2014-12-19 12:57 - 00000000 ____D () C:\Users\PC\AppData\Local\EA Games
2014-12-19 11:53 - 2014-12-19 11:54 - 00000000 ____D () C:\Users\PC\Desktop\Documents\FIFA World
2014-12-19 05:46 - 2014-12-19 05:46 - 00000777 _____ () C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
2014-12-19 05:30 - 2014-12-19 05:30 - 00000745 _____ () C:\Users\Public\Desktop\The Godfather II.lnk
2014-12-19 05:11 - 2015-01-06 21:07 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-12-19 05:11 - 2014-12-19 05:11 - 00000983 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-12-19 01:30 - 2014-12-19 01:30 - 00000000 ____D () C:\Users\PC\AppData\Local\Downloaded Installations
2014-12-19 01:24 - 2014-12-19 01:24 - 00003024 _____ () C:\Windows\System32\Tasks\{52405E5C-6F78-4FA9-AB1E-ADB7EA8E46E6}
2014-12-18 07:43 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 07:43 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-13 18:36 - 2014-12-15 14:29 - 00000000 ___RD () C:\Users\PC\Dropbox
2014-12-13 18:29 - 2014-12-15 14:30 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Dropbox
2014-12-13 18:29 - 2014-12-13 18:29 - 00000000 ____D () C:\Users\PC\AppData\Roaming\AVAST Software
2014-12-13 18:26 - 2015-01-10 21:29 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-13 18:26 - 2014-12-13 18:26 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-13 18:26 - 2014-12-13 18:25 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-13 18:26 - 2014-12-13 18:25 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-12-13 18:25 - 2014-12-13 18:25 - 00449936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-12-13 18:25 - 2014-12-13 18:25 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-12 15:23 - 2014-05-16 21:53 - 00000000 ____D () C:\Users\PC\AppData\Roaming\uTorrent
2015-01-12 14:19 - 2014-06-07 10:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-12 12:56 - 2014-08-16 14:32 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-12 09:29 - 2014-11-14 12:38 - 00004932 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-PC-PC PC-PC
2015-01-12 09:05 - 2014-08-13 21:32 - 00000000 ____D () C:\Users\PC\AppData\Roaming\vlc
2015-01-12 06:55 - 2014-11-23 02:00 - 00000000 ____D () C:\Users\PC\AppData\Local\Adobe
2015-01-12 06:50 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-12 06:50 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-12 06:48 - 2014-06-23 13:21 - 01581498 _____ () C:\Windows\WindowsUpdate.log
2015-01-12 06:47 - 2014-05-16 20:02 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Skype
2015-01-12 06:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-11 23:58 - 2014-06-29 12:07 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2015-01-11 19:30 - 2014-08-10 16:20 - 00000000 ____D () C:\Users\PC\AppData\Roaming\TS3Client
2015-01-11 14:23 - 2014-11-10 17:26 - 00845824 ___SH () C:\Users\PC\Desktop\Thumbs.db
2015-01-09 16:57 - 2014-11-29 21:08 - 00000000 ____D () C:\Users\PC\Desktop\Documents\Euro Truck Simulator 2
2015-01-08 18:19 - 2014-10-07 12:55 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2015-01-07 18:35 - 2009-07-14 16:18 - 00672122 _____ () C:\Windows\system32\perfh005.dat
2015-01-07 18:35 - 2009-07-14 16:18 - 00142810 _____ () C:\Windows\system32\perfc005.dat
2015-01-07 18:35 - 2009-07-14 06:13 - 01593258 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-07 15:58 - 2014-11-23 13:45 - 00000000 ____D () C:\Windows\erdnt
2015-01-06 19:13 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-06 16:38 - 2014-05-06 12:42 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-06 04:36 - 2014-05-06 12:45 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-04 10:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-03 05:48 - 2014-05-18 20:20 - 00000132 _____ () C:\Users\PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-01-02 20:21 - 2014-10-11 18:12 - 00000829 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2015-01-02 18:00 - 2014-11-23 12:46 - 00000000 ____D () C:\zoek_backup
2015-01-02 16:24 - 2014-11-22 19:14 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-12-31 13:52 - 2014-11-22 12:57 - 00000000 ____D () C:\AdwCleaner
2014-12-29 22:11 - 2014-05-30 02:45 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DAEMON Tools Lite
2014-12-24 00:03 - 2014-08-04 23:46 - 00007595 _____ () C:\Users\PC\AppData\Local\Resmon.ResmonCfg
2014-12-23 13:43 - 2014-10-12 10:06 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-22 12:15 - 2014-06-21 06:01 - 00000000 ____D () C:\Users\PC\Desktop\Documents\DayZ
2014-12-22 12:05 - 2014-08-04 21:37 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Raptr
2014-12-22 11:53 - 2014-08-04 21:33 - 00000000 ____D () C:\Program Files\AMD
2014-12-22 11:47 - 2014-06-29 12:02 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-12-22 11:47 - 2014-06-29 12:02 - 00000000 ____D () C:\AMD
2014-12-21 11:08 - 2014-07-01 06:56 - 00347464 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-12-21 11:08 - 2014-06-18 17:39 - 00347464 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-12-21 11:08 - 2014-06-18 17:39 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-21 11:00 - 2014-06-18 17:44 - 00000000 ____D () C:\Users\PC\AppData\Local\PunkBuster
2014-12-21 11:00 - 2014-06-18 17:39 - 00281288 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-12-20 13:06 - 2014-11-22 12:51 - 00116432 _____ () C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-20 13:03 - 2009-07-14 05:45 - 05061832 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-20 01:13 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-12-20 01:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-12-19 18:37 - 2014-12-07 16:32 - 00000000 ____D () C:\Users\PC\Desktop\Documents\lll
2014-12-19 18:36 - 2014-05-22 14:58 - 00000132 _____ () C:\Users\PC\AppData\Roaming\Adobe Formát Targa CS6 – předvolby
2014-12-19 12:52 - 2014-10-04 08:36 - 00000000 ____D () C:\Users\PC\Desktop\Documents\EA Games
2014-12-19 11:52 - 2014-05-31 06:01 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-12-13 18:36 - 2014-05-06 11:52 - 00000000 ____D () C:\Users\PC
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-04 22:38
==================== End Of Log ============================
Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-01-2015
Ran by PC at 2015-01-12 15:24:59
Running from C:\Users\PC\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
ACP Application (Version: 2.15.10.0003 - Advanced Micro Devices, Inc.) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avast Premier (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version: - )
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 6.2.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.1 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
DiRT 3 (HKLM-x32\...\Steam App 44320) (Version: - Codemasters Racing Studio)
EA SPORTS™ FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.3.0.58666 - Electronic Arts, Inc.)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
Euro Truck Simulator 2 Multiplayer 0.1.1 R2 Alpha (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.1 R2 Alpha - ETS2MP Team)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
HeavyLoad V3.2 (HKLM-x32\...\HeavyLoad_is1) (Version: 3.2 - JAM Software)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version: - IO Interactive)
Chrome Remote Desktop Host (HKLM-x32\...\{6FC79C95-F54F-4515-8012-01F33D894492}) (Version: 40.0.2214.44 - Google Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Mafia II (HKLM-x32\...\Steam App 50130) (Version: - 2K Czech)
Malwarebytes Anti-Malware verze 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Need for Speed™ ProStreet (HKLM-x32\...\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}) (Version: 1.0.1.0 - Electronic Arts)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0100-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
SteelSeries Engine 3.3.1 (HKLM\...\SteelSeries Engine 3) (Version: 3.3.1 - SteelSeries ApS)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Godfather II (HKLM-x32\...\The Godfather II_is1) (Version: - )
Unity Web Player (HKU\S-1-5-21-3788455234-4125237215-3820227731-1000\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A7500970-FE98-11E1-B560-F04DA23A5C58}) (Version: 12.0.367 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VTFEdit 1.2.5 (HKLM-x32\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
07-01-2015 15:58:42 ComboFix created restore point
10-01-2015 04:52:11 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-01-06 19:12 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FF049A5-9035-45BC-B140-1C4F36393E13} - System32\Tasks\{546BFB29-6BC3-467A-806D-DE504005255C} => pcalua.exe -a C:\Users\PC\AppData\Roaming\Seznam.cz\szninstall.exe -c -X
Task: {416A7A5B-CB09-48CE-9448-44D3B5EEB370} - System32\Tasks\{22A988F5-6D1C-4204-9E6F-33D12B7EAC7B} => pcalua.exe -a "E:\Install Pack\Setup.exe"
Task: {4CF6F984-7AB7-405F-B6B9-E6D384EFF462} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {5A51CCD5-5200-4A3D-98D5-3E9EC3749F9E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {7B2694AA-4678-4B9C-9477-6CE951B698E9} - System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-PC-PC PC-PC => D:\Microsoft Office 2013\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {A22965E0-D09B-4253-A11E-7A2D98C90D8C} - System32\Tasks\AdobeAAMUpdater-1.0-PC-PC-PC => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {AADD427A-39D8-49F9-B33C-F0752E94A0BC} - System32\Tasks\{C704224B-C3FA-4A4C-814D-E49033551CE4} => pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe"
Task: {AF7D2F82-3AF1-4228-99DB-9A543E1E9AFD} - \YTAUpdate No Task File <==== ATTENTION
Task: {B79EF5F9-5D55-4BC1-84D8-033CE99E0051} - System32\Tasks\{F98DAFA2-5F83-4B3B-A4E5-BD576A035857} => D:\Hry\The Sims 4\The SIMS 4-Deluxe Edition\Game\Bin\The.Sims.4.Launcher.exe
Task: {B94C938E-433E-44B4-BF4E-9A2B8E633724} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {BD6075F4-4907-4FA5-BE07-8CC4E98051C1} - System32\Tasks\avast! Emergency Update => D:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-13] (AVAST Software)
Task: {D420CA52-0CE4-4910-9CBE-D9B9D7173133} - \SPBIW_UpdateTask_Time_343037333530363533352d3437415a556c2a3223346c41 No Task File <==== ATTENTION
Task: {DF54503D-A46F-4C49-A6EE-A5672BC0AF75} - System32\Tasks\{DE38FD04-1E36-4A81-BE6B-A4C3B54FD3F3} => D:\Hry\The Sims 4\The SIMS 4-Deluxe Edition\Game\Bin\The.Sims.4.Launcher.exe
Task: {EE84D64A-A52B-4112-9245-171244380DA4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {F3BC4E9C-D71F-4231-B7D0-6E84FCDAEDDB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {FB8A38A9-4219-4DAB-8531-7C7CC942041E} - System32\Tasks\{52405E5C-6F78-4FA9-AB1E-ADB7EA8E46E6} => pcalua.exe -a D:\pm_demo.exe -d D:\
==================== Loaded Modules (whitelisted) =============
2014-11-13 22:19 - 2014-11-13 22:19 - 17542656 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
2014-10-14 15:10 - 2014-10-14 15:10 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll
2014-06-18 17:39 - 2014-12-21 11:08 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-11 18:11 - 2015-01-11 18:11 - 02909696 _____ () D:\Program Files\AVAST Software\Avast\defs\15011101\algo.dll
2015-01-12 09:54 - 2015-01-12 09:54 - 02909696 _____ () D:\Program Files\AVAST Software\Avast\defs\15011200\algo.dll
2014-12-13 18:25 - 2014-12-13 18:25 - 38562088 _____ () D:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-10 15:15 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2014-12-10 15:15 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-12-10 15:15 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-10 15:15 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2014-12-10 15:15 - 2014-12-06 02:50 - 14913352 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll
2014-08-22 12:58 - 2014-11-11 19:48 - 01171456 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-22 12:58 - 2014-11-11 19:48 - 00442368 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-22 12:58 - 2014-11-11 19:48 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-06-07 10:10 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-06-07 10:10 - 2014-11-18 21:23 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-22 12:58 - 2014-11-11 19:48 - 00403968 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-22 12:58 - 2014-11-11 19:48 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-06-07 10:13 - 2014-11-18 21:23 - 00690880 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-06-07 10:13 - 2014-11-11 19:48 - 34589888 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-07-23 21:34 - 2014-11-11 19:48 - 00837824 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
========================= Accounts: ==========================
Administrator (S-1-5-21-3788455234-4125237215-3820227731-500 - Administrator - Disabled)
Guest (S-1-5-21-3788455234-4125237215-3820227731-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3788455234-4125237215-3820227731-1002 - Limited - Enabled)
PC (S-1-5-21-3788455234-4125237215-3820227731-1000 - Administrator - Enabled) => C:\Users\PC
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/11/2015 01:15:46 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program memtest.exe verze 4.1.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: d9c
Čas spuštění: 01d02d97ef892cbf
Čas ukončení: 192
Cesta k aplikaci: C:\Users\PC\AppData\Local\Temp\Rar$EXa0.023\memtest.exe
ID hlášení: 81d639c1-998b-11e4-9299-001a92d57ed0
Error: (01/02/2015 11:19:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifaworld.exe, verze: 9.3.0.58666, časové razítko: 0x54893e68
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.18247, časové razítko: 0x521ea8e7
Kód výjimky: 0xc0000005
Posun chyby: 0x0005a30e
ID chybujícího procesu: 0x488
Čas spuštění chybující aplikace: 0xfifaworld.exe0
Cesta k chybující aplikaci: fifaworld.exe1
Cesta k chybujícímu modulu: fifaworld.exe2
ID zprávy: fifaworld.exe3
System errors:
=============
Error: (01/12/2015 08:53:10 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Hlavní prohledávač přijal oznámení serveru od počítače MACHINENAME,
který se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{A253E99B-7020-4076-8484-DBB8CA17CC9C}.
Hlavní prohledávač bude ukončen nebo bude vyvolána volba.
Error: (01/12/2015 06:49:59 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Zasílání zpráv o chybách systému Windows bylo dosaženo časového limitu (30000 ms).
Error: (01/11/2015 11:56:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:57:27, 11.1.2015) bylo neočekávané.
Error: (01/11/2015 09:05:19 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (22:31:37, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 09:51:37 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:50:05, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 09:46:05 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:44:40, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 09:40:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:35:19, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 09:28:19 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:22:51, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 06:32:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:29:15, 10.1.2015) bylo neočekávané.
Error: (01/10/2015 06:29:15 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:27:33, 10.1.2015) bylo neočekávané.
Microsoft Office Sessions:
=========================
Error: (01/11/2015 01:15:46 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: memtest.exe4.1.0.0d9c01d02d97ef892cbf192C:\Users\PC\AppData\Local\Temp\Rar$EXa0.023\memtest.exe81d639c1-998b-11e4-9299-001a92d57ed0
Error: (01/02/2015 11:19:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: fifaworld.exe9.3.0.5866654893e68ntdll.dll6.1.7601.18247521ea8e7c00000050005a30e48801d026da19693de7D:\Hry\OriginLibrary\FIFA World\fifaworld.exeC:\Windows\SysWOW64\ntdll.dll5e846b8c-92cd-11e4-a422-001a92d57ed0
CodeIntegrity Errors:
===================================
Date: 2015-01-06 18:32:41.725
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 18:32:41.672
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 18:32:41.614
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 18:32:41.560
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:34:41.058
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:34:41.004
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:34:40.947
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:34:40.892
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:26:48.875
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-06 16:26:48.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz
Percentage of memory in use: 65%
Total physical RAM: 3071.18 MB
Available physical RAM: 1047.16 MB
Total Pagefile: 6140.54 MB
Available Pagefile: 2958.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:122 GB) (Free:75.09 GB) NTFS
Drive d: () (Fixed) (Total:474.07 GB) (Free:250.99 GB) NTFS
Drive f: (GFCZ) (CDROM) (Total:4.34 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=122 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=474.1 GB) - (Type=07 NTFS)
==================== End Of Log ============================