Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11.03.2018
Ran by tfhfh (11-03-2018 19:30:07)
Running from C:\Users\tfhfh\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2017-06-25 14:02:45)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

tfhfh (S-1-5-21-2751068646-1959373384-1878528673-1000 - Administrator - Enabled) => C:\Users\tfhfh
Администратор (S-1-5-21-2751068646-1959373384-1878528673-500 - Administrator - Disabled)
Гость (S-1-5-21-2751068646-1959373384-1878528673-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Cezurity Cube (Enabled - Up to date) {7EB292A4-9472-CC63-3673-E3D907D5C1A3}
AS: Cezurity Cube (Enabled - Up to date) {C5D37340-B248-C3ED-0CC3-D8AB7C528B1E}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2751068646-1959373384-1878528673-1000\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.126 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{9AA86E9E-8334-577D-276A-D23AC1D6AE1F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{9CD05713-DE99-0815-CBDE-0EDD9492A8A1}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{7E358C03-EFA6-7320-AFF9-4A46779F0F73}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{4EF3DAFF-9E01-6176-46EE-FF85C047292B}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{87270358-D7F7-3F50-B9A7-21A1737861AB}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{8BE505EA-0E13-F7FF-CA65-96317B3ECED0}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{BD191FEC-1C49-80DD-C770-96DC951EFF1A}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{473DA642-7A4C-3495-0F6F-9BB33DFF2CFE}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{8B7FC493-D2E2-68B7-C1D2-FB35B7B20217}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{D39901A2-2A32-C3DA-5E23-0503E39133FA}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{8D992E22-9CFE-CF66-1833-BBB659920157}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{E8310F02-08C0-7996-BEBD-AF0A1D36C062}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{113BD61F-47B0-6C6F-566E-F2D386616B93}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{16B171DA-5537-ED74-FA9A-E65ABBD8B626}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{84A297D1-C257-D175-5A6D-A38C6343836F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{52CF46D8-37B8-F9AF-0721-2A25245FA279}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{49527978-30CC-EEB6-82CA-573399CD7D4D}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{31F2AB92-96CF-25E6-C7BF-D84926513204}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{EF0FCB54-D070-7EF2-13F1-AC661B21850F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A5A1C83C-7A8F-C688-401F-89BC7B277C68}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{6A4D8D1E-E293-0B92-CBF1-BA133FB2ED0D}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Cezurity Antivirus (HKLM-x32\...\{f8f0559f-49ab-4556-8573-368b0539cc35}) (Version: 1.8.22193.57866 - Cezurity)
Cezurity Antivirus v1.8 (HKLM\...\{08E3C4AB-2639-4673-8E61-3872D03288C6}) (Version: 1.8.22193.57866 - Cezurity) Hidden
FINAL FANTASY XV v.Build 1130815 (HKLM-x32\...\FINAL FANTASY XV_is1) (Version:  - )
GPU Boost Driver (HKLM-x32\...\{B8887E02-C910-4498-A7C0-186ABFDCD110}) (Version: 1.00.00 - ASUS)
Guns Gore and Cannoli 2 v.1.0.1 (HKLM-x32\...\Guns Gore and Cannoli 2_is1) (Version:  - )
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Mozilla Firefox 58.0.2 (x64 ru) (HKLM\...\Mozilla Firefox 58.0.2 (x64 ru)) (Version: 58.0.2 - Mozilla)
RaidCall (HKLM-x32\...\RaidCall) (Version: 8.2.0-1.0.3231.155 - raidcall.com.ru)
Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0005 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6037 - Realtek Semiconductor Corp.)
Skype, версия 8.12 (HKLM-x32\...\Skype_is1) (Version: 8.12 - Skype Technologies S.A.)
Sniper Ghost Warrior 3 v.1.8 (HKLM-x32\...\Sniper Ghost Warrior 3_is1) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 42.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.)
WinRAR 5.40 (64-разрядная) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-09-22] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {24CFC9B4-D2DC-4290-A87D-79364E8E1C4E} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {5B441048-9039-49CA-A751-EF48C699D339} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-09-22] (Advanced Micro Devices, Inc.)
Task: {7517686B-F1D5-4F24-B7E6-8D34F1FE27D2} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {C2F46786-C48D-4D64-92D6-6613C1681CFD} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {C3449E17-A888-4357-A190-9C3F0D3175D9} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\tfhfh\Desktop\Выбор языка Sniper Ghost Warrior 3.lnk -> D:\Sniper Ghost Warrior 3\win_x64\Language Selector.exe () <==== Cyrillic

==================== Loaded Modules (Whitelisted) ==============


==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2751068646-1959373384-1878528673-1000\...\cezurity.com -> hxxps://vk-local-server.cezurity.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2018-02-25 12:51 - 000000833 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2751068646-1959373384-1878528673-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\tfhfh\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.11 - 192.168.2.14
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
mpsdrv => Firewall Service is not running.
MpsSvc => Firewall Service is not running.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: GalaxyClientService => 3
MSCONFIG\Services: GalaxyCommunication => 3
MSCONFIG\Services: mracsvc => 3
MSCONFIG\Services: SoundBoosterService => 3
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{46A28A31-3E3B-4BD7-A4CE-E3BC87D94194}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3A581B5B-4E41-48F1-9C1A-19AC3299DCBF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{92A63A87-29FC-4335-9623-F769A0A4AEAF}] => (Allow) LPort=47224
FirewallRules: [{1F85E47E-313F-4758-857A-8FE50205D676}] => (Allow) C:\Users\tfhfh\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{22471BFC-4CB1-4DE2-AC50-E9D996EF7B0D}] => (Allow) C:\Users\tfhfh\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{56E5C399-CBE6-44B2-96A7-2AC4CCAE28BD}] => (Allow) %APPDATA%\uTorrent\uTorrent.exe
FirewallRules: [{EFD6A4B8-F4A2-4CA3-83C7-C0B016882F3B}] => (Allow) %APPDATA%\uTorrent\uTorrent.exe
FirewallRules: [{2AC94EDD-4C9F-455C-A549-A7114FF8B4B1}] => (Allow) %APPDATA%\uTorrent\uTorrent.exe
FirewallRules: [{1520E1BF-DB41-4007-9C24-4D6B0122E567}] => (Allow) %APPDATA%\uTorrent\uTorrent.exe
FirewallRules: [{88BDECCB-3A5E-4123-B6B3-65E3E4A00ADB}] => (Allow) %APPDATA%\uTorrent\uTorrent.exe
FirewallRules: [{F61261CF-8A55-4255-945C-6A75DC73E732}] => (Allow) C:\Program Files\Cezurity\Antivirus\cube_svc.exe
FirewallRules: [{1C48766B-FA8C-43A6-9CBA-38A60DE1F959}] => (Allow) C:\Program Files\Cezurity\Antivirus\cube.exe

==================== Restore Points =========================

24-02-2018 21:54:38 Установщик модулей Windows
24-02-2018 22:42:52 Установщик модулей Windows
24-02-2018 23:29:30 Установщик модулей Windows
25-02-2018 13:33:44 Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008
25-02-2018 13:34:05 Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008
25-02-2018 13:34:23 Центр обновления Windows
25-02-2018 13:37:09 Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008
04-03-2018 19:18:31 Запланированная контрольная точка

==================== Faulty Device Manager Devices =============

Name: Адаптер Microsoft ISATAP
Description: Адаптер Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Teredo Tunneling Pseudo-Interface
Description: Туннельный адаптер Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (03/10/2018 09:23:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 40.

Error: (03/10/2018 09:23:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 70.

Error: (03/10/2018 09:23:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 70.

Error: (03/10/2018 09:14:23 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 40.

Error: (03/10/2018 09:14:23 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 70.

Error: (03/10/2018 09:14:22 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Получено следующее предупреждение о неустранимой ошибке: 70.

Error: (03/09/2018 11:55:26 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Служба "Прослушиватель домашней группы" завершена из-за внутренней ошибки %%-2147023143 = В системе отображения конечных точек не осталось доступных конечных точек..


CodeIntegrity:
===================================

Date: 2017-12-20 17:20:18.243
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\Rar$EXa0.716\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-12-20 17:20:18.212
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\Rar$EXa0.716\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-12-20 12:32:38.854
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\Rar$EXa0.103\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-12-20 12:32:38.838
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\Rar$EXa0.103\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-12-16 23:52:04.886
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\7ZipSfx.000\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-12-16 23:52:04.870
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\tfhfh\AppData\Local\Temp\7ZipSfx.000\kerneld.x64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-10-09 23:44:17.689
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-10-09 23:44:17.673
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5 CPU 760 @ 2.80GHz
Percentage of memory in use: 15%
Total physical RAM: 12254.05 MB
Available physical RAM: 10309.6 MB
Total Virtual: 14428.25 MB
Available Virtual: 12280.63 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:117.09 GB) (Free:89.36 GB) NTFS
Drive d: () (Fixed) (Total:348.57 GB) (Free:94.04 GB) NTFS

\\?\Volume{f8dd6b5f-59ad-11e7-9167-806e6f6e6963}\ (Зарезервировано системой) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: C7DAEE36)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=117.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=348.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================