Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016
Ran by Zaknapheyn (01-09-2016 15:44:18)
Running from D:\Downloads\программы
Windows 10 Pro Version 1511 (X64) (2016-07-19 11:28:44)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

DefaultAccount (S-1-5-21-593939576-3630449801-883800457-503 - Limited - Disabled)
Zaknapheyn (S-1-5-21-593939576-3630449801-883800457-1000 - Administrator - Enabled) => C:\Users\Zaknapheyn
Администратор (S-1-5-21-593939576-3630449801-883800457-500 - Administrator - Disabled)
Гость (S-1-5-21-593939576-3630449801-883800457-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.)
Adobe Flash Player 22 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
Auslogics BoostSpeed 7 (HKLM-x32\...\{7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1) (Version: 7.9.0.0 - Auslogics Labs Pty Ltd)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.0 - Bethesda Softworks)
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0192 - Disc Soft Ltd)
Deus Ex Human Revolution (HKLM-x32\...\Deus Ex Human Revolution_is1) (Version: 1.0 - GUGUCHA)
Fallout Shelter (HKLM-x32\...\Fallout Shelter) (Version:  - Bethesda Softworks)
Fallout4 v.1.6.9.0.1 (HKLM-x32\...\Fallout4_is1) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gyazo 3.2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
How to Survive 2 Build 22.08.2016 (HKLM-x32\...\How to Survive 2 Build 22.08.2016_is1) (Version: Build 22.08.2016 - VseTop.Com)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Into the Stars (HKLM-x32\...\1455787562_is1) (Version: 2.0.0.2 - GOG.com)
K-Lite Mega Codec Pack 9.9.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.9.0 - )
Malwarebytes Anti-Malware, версия 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Master of Orion (HKLM-x32\...\Master of Orion_is1) (Version:  - )
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Аудиодрайвер HD 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA Графический драйвер 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA Драйвер 3D Vision 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.54 - NVIDIA Corporation)
NVIDIA Драйвер контроллера 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Star Citizen Launcher (HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.64630 - TeamViewer)
The Elder Scrolls Legends (HKLM-x32\...\The Elder Scrolls Legends) (Version:  - Bethesda Softworks)
The Witcher 3 Wild Hunt v.1.21.0 (HKLM-x32\...\The Witcher 3 Wild Hunt_is1) (Version:  - )
TortoiseSVN 1.9.4.27285 (64 bit) (HKLM\...\{62C19AB2-8485-4E18-A9D3-EFA612B8AE74}) (Version: 1.9.27285 - TortoiseSVN)
Unity Web Player (HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Viber (HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\Viber) (Version: 4.4.0.134678 - Viber Media Inc)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Wasteland 2: Director's Cut (HKLM-x32\...\Wasteland 2: Director's Cut_is1) (Version:  - )
WinRAR 5.20 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.4 - win.rar GmbH)
Обновления NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Панель управления NVIDIA 372.54 (Version: 372.54 - NVIDIA Corporation) Hidden
Помощник по обновлению до Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17332 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-593939576-3630449801-883800457-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Zaknapheyn\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0143A589-DEF7-4774-A81F-F4CF35B36192} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> No File <==== ATTENTION
Task: {04238010-0EDD-40FA-92FC-7D79F40BB9EE} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> No File <==== ATTENTION
Task: {09C72C24-EF3C-4E43-804B-DD293D09C4CE} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"
Task: {11671417-9157-456A-A6FF-94A7DACCA647} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {13118573-7E84-4A76-9C4F-687DE05A2259} - \Microsoft\Windows\SideShow\SystemDataProviders -> No File <==== ATTENTION
Task: {1349F0B8-C872-4D76-B1FA-AC4F63FCB83C} - \Microsoft\Windows\MobilePC\HotStart -> No File <==== ATTENTION
Task: {1D571331-0720-4E40-B934-8FFE2B18292F} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {23C0C2F1-9903-4363-B449-0DFB6D28DAE3} - \Furtionckseck Reports -> No File <==== ATTENTION
Task: {28531155-49F3-441A-995E-DEEC1ED744BF} - \MailRuUpdater -> No File <==== ATTENTION
Task: {2C911045-DEB9-4A18-B20C-EB105135D928} - \Microsoft\Windows\Media Center\ehDRMInit -> No File <==== ATTENTION
Task: {2CB3B93C-89E5-470B-9659-C2090F3FBBC0} - \Microsoft\Windows\Media Center\RecordingRestart -> No File <==== ATTENTION
Task: {3A77E7E9-D7C1-417A-AFAE-34A3E83FA164} - \Microsoft\Windows\Media Center\PBDADiscovery -> No File <==== ATTENTION
Task: {475F9589-2A02-4B01-B2E2-D884CB5304AD} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-13] ()
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> No File <==== ATTENTION
Task: {4BE89EAD-14B1-4499-833D-ED766063471F} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> No File <==== ATTENTION
Task: {52A3FC4D-EDEF-4200-8359-D2E996F5771E} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_209_pepper.exe [2016-08-17] (Adobe Systems Incorporated)
Task: {5897424C-C534-453C-84BD-B5A44E0C9038} - \Driver Booster SkipUAC (Zaknapheyn) -> No File <==== ATTENTION
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> No File <==== ATTENTION
Task: {5C2C3855-BA55-474D-87BB-D5496B6FE840} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> No File <==== ATTENTION
Task: {650748A2-F00B-4E66-ADF1-28334E3FEF4D} - \Microsoft\Windows\SideShow\SessionAgent -> No File <==== ATTENTION
Task: {72404843-4D85-4D94-A5F8-CA4C6112F1A1} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> No File <==== ATTENTION
Task: {72D587C1-EA82-428A-A5F2-793353739C30} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> No File <==== ATTENTION
Task: {7644A30A-AC1A-4F8D-928B-C5A92FA3F61C} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-13] ()
Task: {7B99F79F-942C-4BCA-9105-54F58F930E35} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-18] (Google Inc.)
Task: {81455061-D24D-46B9-A584-34ECE54ECA4D} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> No File <==== ATTENTION
Task: {96A59AB0-E4FD-410A-9B4D-C3B354C40CC5} - \Microsoft\Windows\Media Center\OCURDiscovery -> No File <==== ATTENTION
Task: {9AB9AB01-C826-4B73-8E95-D7B20B89C42D} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> No File <==== ATTENTION
Task: {9AF08C94-9493-439E-BC31-B093A187A26A} - System32\Tasks\Microsoft\Windows\Multimedia\Manager => C:\Users\Zaknapheyn\AppData\Roaming\Adobe\Manager.exe
Task: {A482E944-14EB-4AA1-8489-E7E813FE5EA6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-17] (Adobe Systems Incorporated)
Task: {AEF278B6-DEBC-4518-9684-3FC298E6B6CE} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {B0E0C666-D9C4-4BB1-959F-2C6002C9463B} - \Microsoft\Windows\Wininet\PerfChecker -> No File <==== ATTENTION
Task: {B45BBC67-FE49-424F-ABFE-69B32BBE0DB2} - \Microsoft\Windows\Media Center\OCURActivate -> No File <==== ATTENTION
Task: {B60E7D49-3DCD-41A7-ADD0-1B8ED1B51E77} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {BAA1B82D-49D5-4590-BD4E-DAFC51EE250C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-18] (Google Inc.)
Task: {BB6A7F18-0779-430E-9957-3420C346980F} - \Microsoft\Windows\SideShow\AutoWake -> No File <==== ATTENTION
Task: {BBBF76E3-CDC5-4F44-82B7-6FC2852A28DA} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> No File <==== ATTENTION
Task: {C49A4E04-4CF6-4194-93E8-9BF3F2AB8857} - \Microsoft\Windows\Media Center\mcupdate -> No File <==== ATTENTION
Task: {C4FE5B92-F137-4BA8-B746-B13AB7297967} - System32\Tasks\{D23383EF-4DE9-4939-87F8-7B8CE8E368E4} => launchwinapp.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=6.22.64.107&amp;LastError=404
Task: {CC48BAFD-8164-4E52-951C-8FDDFC0B02C5} - \Microsoft\Windows\Media Center\RegisterSearch -> No File <==== ATTENTION
Task: {D2B9E87B-595A-41BE-A657-AF7FAC68CADC} - \Microsoft\Windows\SideShow\GadgetManager -> No File <==== ATTENTION
Task: {D4FB5241-9F89-498E-9FCB-2E17FC1B733B} - \Microsoft\Windows\Media Center\StartRecording -> No File <==== ATTENTION
Task: {EE42E1A2-BDFF-4A62-AF86-7639EC2E6E69} - \Microsoft\Windows\Media Center\InstallPlayReady -> No File <==== ATTENTION
Task: {EF713DD3-77BF-4D15-A2DD-AF27E6E476CB} - \Microsoft\Windows\Media Center\UpdateRecordPath -> No File <==== ATTENTION
Task: {F5C2A17A-13EE-48D3-87B8-E202C6D829AC} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Zaknapheyn logon => D:\Program Files\Auslogics\BoostSpeed\BoostSpeed.exe [2015-05-21] (Auslogics)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_209_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION

ShortcutWithArgument: C:\Users\Zaknapheyn\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\ZAKNAP~1\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://navsmart.info
ShortcutWithArgument: C:\Users\Zaknapheyn\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://navsmart.info
ShortcutWithArgument: C:\Users\Zaknapheyn\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\f42507a5493c1e9c\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=perpckplewerpydolerck
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\ZAKNAP~1\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://navsmart.info
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\ZAKNAP~1\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://navsmart.info

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 10:18 - 2015-10-30 10:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-19 01:41 - 2016-08-11 15:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-08-29 23:28 - 2016-08-29 23:28 - 00346624 _____ () C:\Program Files (x86)\Ghostery Storage Server\ghstore.exe
2016-07-19 16:16 - 2016-06-14 23:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-07-20 16:04 - 2016-07-01 07:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-07-19 15:23 - 2016-07-19 15:24 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-07-20 16:04 - 2016-07-01 07:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-04-24 16:07 - 2016-04-24 16:07 - 00094672 _____ () D:\Program Files\TortoiseSVN\bin\libsasl.dll
2016-07-19 14:32 - 2016-07-19 14:32 - 00959168 _____ () C:\Users\Zaknapheyn\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-08-31 23:32 - 2016-08-31 23:32 - 00560768 ____N () C:\Program Files (x86)\KuaiZip\X64\KZipShell.dll
2016-04-27 08:14 - 2016-04-27 08:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-20 16:06 - 2016-07-01 06:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-20 16:04 - 2016-07-01 06:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-20 16:04 - 2016-07-01 06:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-20 16:04 - 2016-07-01 06:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-20 16:04 - 2016-07-01 06:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-07-19 15:23 - 2016-07-19 15:24 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-07-19 15:23 - 2016-07-19 15:24 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-07-19 16:16 - 2016-06-14 23:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-07-19 14:32 - 2016-07-19 14:32 - 00679624 _____ () C:\Users\Zaknapheyn\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-08-05 12:06 - 2016-08-03 03:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-05 12:06 - 2016-08-03 03:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\WINDOWS\SysWOW64\CSVer.dll:com.dropbox.attributes [168]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2016-08-31 23:28 - 00001212 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 na1r.services.adobe.com 
127.0.0.1 hlrcv.stage.adobe.com 
127.0.0.1 lmlicenses.wip4.adobe.com 
127.0.0.1 lm.licenses.adobe.com 
127.0.0.1 activate.adobe.com 
127.0.0.1 practivate.adobe.com 
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-593939576-3630449801-883800457-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "WINCOM05R"
HKLM\...\StartupApproved\Run32: => "StereoLinksInstall"
HKLM\...\StartupApproved\Run32: => "AdAnti"
HKLM\...\StartupApproved\Run32: => "app"
HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\StartupApproved\Run: => "Viber"
HKU\S-1-5-21-593939576-3630449801-883800457-1000\...\StartupApproved\Run: => "svchost0"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{826DD339-23E4-448C-9E6C-30CC022D3F25}] => (Allow) D:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A8BCD4FA-E947-462C-9C5B-F1786E2FAC67}] => (Allow) C:\Users\Zaknapheyn\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4598027F-B579-4361-BFD6-C3565F48C0C4}] => (Allow) C:\Users\Zaknapheyn\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D2369002-62EB-4AC6-B2F5-81B812E7BD5C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5B1BB04E-0706-4583-9998-5571D1727901}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{42A774C5-6FC7-4C39-841E-54B6226E24DA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8717244E-3B3E-48DA-8D3D-71A8E277A997}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7C79ED27-6CB9-4015-A248-9617AF0D5562}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{925C59E7-81C7-4CEE-86FB-98606EC3C1E2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D419E2A1-1B6A-4EFC-B8B3-7230DD10BABF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{CF0D14DB-9F1B-44CA-93FF-C8C091935775}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{118E1C0C-9EDD-4D28-A60D-750C11D4F65D}D:\games\battle.net\hearthstone\hearthstone.exe] => (Allow) D:\games\battle.net\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{86D78995-5D29-4792-B4AC-D39FDF0197B8}D:\games\battle.net\hearthstone\hearthstone.exe] => (Allow) D:\games\battle.net\hearthstone\hearthstone.exe
FirewallRules: [{78DB18F7-64AB-4153-A4C3-8747A9870CCE}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{99E5A718-74CC-490E-9A5B-B0AC3FEAE8D3}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{BFD425E4-21EE-4758-99C1-50F7ECE89CA3}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{98019490-E410-4976-B005-8B881BB844E6}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{D095A227-12FB-4961-9CFD-F04BE6218659}] => (Allow) D:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{541BA833-77A7-4509-9253-7ADF593C561E}] => (Allow) D:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{5E325DB2-4A31-4109-8EDD-A01DFFC6DC48}] => (Allow) D:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A3C349B8-0EF4-4E18-BC93-1A9651BF863E}] => (Allow) D:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{4D2C1821-9246-4BF1-9321-20657D80255B}D:\games\battle.net\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\games\battle.net\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{A02F5359-AA34-4601-A650-527DFA5D8983}D:\games\battle.net\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\games\battle.net\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{114ABEFE-C587-433C-B836-3A8BC18EA3E5}D:\games\cloud imperium games\patcher\cigpatcher.exe] => (Allow) D:\games\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{F6BE567E-A131-4E7A-9AD1-607551EB4A9E}D:\games\cloud imperium games\patcher\cigpatcher.exe] => (Allow) D:\games\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{8438D081-C175-41B9-8D1A-048CB8AEDBF0}D:\games\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) D:\games\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{CA667DCE-7B5A-4830-A816-D47F5A787C6D}D:\games\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) D:\games\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [TCP Query User{EB94FBCB-F930-4A6B-8392-A95091B0EDA9}D:\games\armor mmo\armormmo.exe] => (Allow) D:\games\armor mmo\armormmo.exe
FirewallRules: [UDP Query User{92A1231D-DF80-4098-96EC-BC022F2170B5}D:\games\armor mmo\armormmo.exe] => (Allow) D:\games\armor mmo\armormmo.exe
FirewallRules: [TCP Query User{FB016EE2-5190-4F52-AF6B-FD5E68CEAD99}D:\games\master of orion\masteroforion.exe] => (Block) D:\games\master of orion\masteroforion.exe
FirewallRules: [UDP Query User{B93CB81C-54D6-45DA-BF7B-925B80417F19}D:\games\master of orion\masteroforion.exe] => (Block) D:\games\master of orion\masteroforion.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2016 01:43:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: backgroundTaskHost.exe, версия: 10.0.10586.0, метка времени: 0x5632d8f0
Имя сбойного модуля: Cortana.BackgroundTask.dll, версия: 0.0.0.0, метка времени: 0x5775e1f6
Код исключения: 0xc0000005
Смещение ошибки: 0x0000000000046ab5
Идентификатор сбойного процесса: 0x1530
Время запуска сбойного приложения: 0x01d2043dada4f181
Путь сбойного приложения: C:\WINDOWS\system32\backgroundTaskHost.exe
Путь сбойного модуля: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
Идентификатор отчета: fcb593bb-9fc8-48cb-94c9-65d9046f8a29
Полное имя сбойного пакета: Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy
Код приложения, связанного со сбойным пакетом: CortanaUI

Error: (09/01/2016 11:42:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: NvStreamUserAgent.exe, версия: 7.1.2084.9592, метка времени: 0x57605c64
Имя сбойного модуля: ntdll.dll, версия: 10.0.10586.306, метка времени: 0x571af2eb
Код исключения: 0xc0000005
Смещение ошибки: 0x000000000002e909
Идентификатор сбойного процесса: 0xe1c
Время запуска сбойного приложения: 0x01d2042cba38b9da
Путь сбойного приложения: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
Путь сбойного модуля: C:\WINDOWS\SYSTEM32\ntdll.dll
Идентификатор отчета: 374e7fdd-656b-4953-a436-09b22e314c11
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/01/2016 12:53:27 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Программа chrome.exe версии 52.0.2743.116 прекратила взаимодействие с Windows и была закрыта. Чтобы узнать, имеются ли дополнительные сведения о проблеме, проверьте историю проблемы в разделе "Безопасность и обслуживание" в панели управления.

ИД процесса: 191c

Время запуска: 01d203d1a794079e

Время завершения: 6

Путь приложения: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

ИД отчета: 55557a5e-6fc5-11e6-9603-1c6f658d178c

Полное имя сбойного пакета: 

Код приложения, связанного со сбойным пакетом:

Error: (09/01/2016 12:29:12 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Zaknapheyn-ПК)
Description: Сбой активации приложения Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca. Ошибка: -2144927149. Дополнительные сведения см. в журнале Microsoft-Windows-TWinUI/Operational.

Error: (09/01/2016 12:14:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: SearchUI.exe, версия: 10.0.10586.494, метка времени: 0x5775e69a
Имя сбойного модуля: twinapi.appcore.dll, версия: 10.0.10586.494, метка времени: 0x5775e2d9
Код исключения: 0xc000027b
Смещение ошибки: 0x000000000004b1c9
Идентификатор сбойного процесса: 0x876c
Время запуска сбойного приложения: 0x01d203cb4a45dfef
Путь сбойного приложения: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Путь сбойного модуля: C:\Windows\System32\twinapi.appcore.dll
Идентификатор отчета: 08f14eaa-cdaf-45e6-a724-cf3342600136
Полное имя сбойного пакета: Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy
Код приложения, связанного со сбойным пакетом: CortanaUI

Error: (09/01/2016 12:05:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: Calculator.exe, версия: 10.1608.1608.8003, метка времени: 0x57a91f75
Имя сбойного модуля: CoreUIComponents.dll, версия: 0.0.0.0, метка времени: 0x5775df1f
Код исключения: 0xc0000005
Смещение ошибки: 0x00000000000782c7
Идентификатор сбойного процесса: 0xcf68
Время запуска сбойного приложения: 0x01d20383e3e5269a
Путь сбойного приложения: C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe
Путь сбойного модуля: C:\WINDOWS\system32\CoreUIComponents.dll
Идентификатор отчета: 473b85a1-11aa-49ad-8d11-e618470a3c6f
Полное имя сбойного пакета: Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe
Код приложения, связанного со сбойным пакетом: App

Error: (09/01/2016 12:05:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: SystemSettings.exe, версия: 10.0.10586.11, метка времени: 0x56457cb1
Имя сбойного модуля: CoreUIComponents.dll, версия: 0.0.0.0, метка времени: 0x5775df1f
Код исключения: 0xc0000005
Смещение ошибки: 0x00000000000782c7
Идентификатор сбойного процесса: 0xcd40
Время запуска сбойного приложения: 0x01d20383f098a169
Путь сбойного приложения: C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
Путь сбойного модуля: C:\WINDOWS\system32\CoreUIComponents.dll
Идентификатор отчета: bc309914-0a05-4d88-a5d3-e4d02868e460
Полное имя сбойного пакета: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy
Код приложения, связанного со сбойным пакетом: microsoft.windows.immersivecontrolpanel

Error: (08/31/2016 11:47:41 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows не удалось загрузить расширяемую библиотеку счетчиков rdyboost. Первые четыре байта (DWORD) в разделе данных содержат код ошибки Windows.

Error: (08/31/2016 12:24:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: DBUpdater.exe, версия: 0.0.0.0, метка времени: 0x57c59e45
Имя сбойного модуля: DBUpdater.exe, версия: 0.0.0.0, метка времени: 0x57c59e45
Код исключения: 0xc0000417
Смещение ошибки: 0x0003a649
Идентификатор сбойного процесса: 0x31e8
Время запуска сбойного приложения: 0x01d203696cdf138e
Путь сбойного приложения: C:\Users\ZAKNAP~1\AppData\Local\Temp\DBUpdater.exe
Путь сбойного модуля: C:\Users\ZAKNAP~1\AppData\Local\Temp\DBUpdater.exe
Идентификатор отчета: efcacee4-0117-49ad-9a04-5db6378c3a0b
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (08/30/2016 10:31:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: ArmorMMO.exe, версия: 5.4.0.51563, метка времени: 0x57b8e8c3
Имя сбойного модуля: ArmorMMO.exe, версия: 5.4.0.51563, метка времени: 0x57b8e8c3
Код исключения: 0xc0000005
Смещение ошибки: 0x00350b8f
Идентификатор сбойного процесса: 0xcbfc
Время запуска сбойного приложения: 0x01d202f315a0b12c
Путь сбойного приложения: D:\Games\ARMOR MMO\ArmorMMO.exe
Путь сбойного модуля: D:\Games\ARMOR MMO\ArmorMMO.exe
Идентификатор отчета: 7b790070-b98b-49f8-98b6-33b02fdfcbce
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:


System errors:
=============
Error: (09/01/2016 03:39:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Служба Синхронизация узла_2ab9d была неожиданно завершена. Это произошло 1 раз(а). Следующее корректирующее действие будет предпринято через 10000 мсек: Перезапуск службы.

Error: (09/01/2016 03:38:14 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Диспетчер управления службами пытался выполнить исправляющее действие (Перезапуск службы) после непредвиденного завершения службы Windows Search, но при этом произошла следующая ошибка: 
Одна копия службы уже запущена.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Intel(R) Management and Security Application User Notification Service" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Skype Updater" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Служба Windows Search была неожиданно завершена. Это произошло 1 раз(а). Следующее корректирующее действие будет предпринято через 30000 мсек: Перезапуск службы.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Streamer Network Service" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA GeForce Experience Service" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Network Service" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Ghostery Storage Server" неожиданно прервана. Это произошло (раз): 1.

Error: (09/01/2016 03:37:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Streamer Service" неожиданно прервана. Это произошло (раз): 1.


CodeIntegrity:
===================================
  Date: 2016-08-30 14:12:08.744
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-11 08:55:32.306
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-27 12:26:24.726
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-25 12:17:38.959
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-22 11:52:55.211
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-21 12:12:52.994
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-20 16:11:22.629
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-19 14:32:21.632
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-19 14:30:52.635
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-19 14:15:49.325
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Percentage of memory in use: 11%
Total physical RAM: 20463.49 MB
Available physical RAM: 18064.91 MB
Total Virtual: 40943.49 MB
Available Virtual: 38357.68 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:96.78 GB) (Free:63.5 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:833.86 GB) (Free:244.19 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A4C7A4C7)
Partition 1: (Active) - (Size=96.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=833.9 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================