Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-12-2015 Ran by [removed] (2016-01-05 19:29:55) Running from C:\Users\[removed]\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2011-12-29 19:13:37) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-491009870-2190124883-2673386763-500 - Administrator - Disabled) => C:\Users\Administrator Guest (S-1-5-21-491009870-2190124883-2673386763-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-491009870-2190124883-2673386763-1003 - Limited - Enabled) walter (S-1-5-21-491009870-2190124883-2673386763-1000 - Administrator - Enabled) => C:\Users\walter ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AV: Emsisoft Anti-Malware (Enabled - Up to date) {9C1B43E7-A69A-E012-4F20-AD6C27446402} AS: Emsisoft Anti-Malware (Enabled - Up to date) {277AA203-80A0-EF9C-7590-961E5CC32EBF} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.11 - GIGABYTE) 3TB+Unlock B11.0411.1 (HKLM-x32\...\{E36C13C4-C802-4A57-8B7C-3D9DF80F3E95}) (Version: 1.00.0001 - GIGABYTE) Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Photoshop CS3 (HKLM-x32\...\Adobe_719d6f144d0c086a0dfa7ff76bb9ac1) (Version: 10.0 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version: - Alien Skin) AMD Catalyst Install Manager (HKLM\...\{0BD776F3-057D-4C11-020C-4FA9B13D04F9}) (Version: 3.0.855.0 - Advanced Micro Devices, Inc.) AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.) Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) AutoGreen B10.1021.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B10.1021.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Avast Free Antivirus (HKLM-x32\...\avast) (Version: 11.1.2245 - AVAST Software) Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Content (x32 Version: 1.00.0000 - Your Company Name) Hidden Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{B865FDD4-E96E-4166-BB69-6E8C207E3E29}) (Version: 17.0.0.491 - Corel Corporation) Corel Graphics - Windows Shell Extension (x32 Version: 17.0.491 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 64 Bit (Version: 17.0.491 - Corel Corporation) Hidden Corel Painter 11 - ICA (x32 Version: 11.0 - Corel Corporation) Hidden Corel Painter 11 - IPM (x32 Version: 011 - Corel Corporation) Hidden Corel Painter 11 (HKLM-x32\...\_{5B51BB5F-4E7C-4275-A653-E98534E9C1D2}) (Version: - Corel Corporation) Corel Painter 11 (x32 Version: 11.0 - Corel Corporation) Hidden Corel Painter 12 (HKLM\...\_{08A8CCEA-36DC-4634-AAAA-79463D644C0E}) (Version: 12.0.0.502 - Corel Corporation) Corel Painter 13 - IPM (Version: 13.1 - Corel Corporation) Hidden Corel Painter 13 - IPM (Version: 14.0 - Corel Corporation) Hidden Corel Painter 13 - IPM Content (Version: 13.1 - Corel Corporation) Hidden Corel Painter 13 - IPM Content (Version: 14.0 - Corel Corporation) Hidden Corel Painter 2015 (HKLM\...\_{DDB3F5F0-2583-426C-A652-8404AFF3A4D0}) (Version: 14.0.0.728 - Corel Corporation) Corel Painter X3 (HKLM\...\_{EF449371-6B69-49C8-B789-76A0B0E3446B}) (Version: 13.0.1.920 - Corel Corporation) Corel Shell Extension - 64Bit (Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Capture (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Content (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Draw (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Filters (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - FontNav (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics SUite X4 - ICA (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - IPM (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang EN (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - PP (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - VBA (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 (x32 Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 (x32 Version: 15.3 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Capture (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Common (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Connect (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Custom Data (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Draw (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - EN (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Filters (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - FontNav (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - IPM Content (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - IPM T (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - PHOTO-PAINT (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Photozoom Plugin (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Redist (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Setup Files (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - VBA (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - VideoBrowser (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 - Writing Tools (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X7 (HKLM-x32\...\_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}) (Version: 17.0.0.491 - Corel Corporation) CorelDRAW Graphics Suite X7 (x32 Version: 17.0 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X4 (HKLM-x32\...\_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version: - Corel Corporation) CorelDRAW(R) Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.2.0.686 - Corel Corporation) CPUID HWMonitor 1.18 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.7 - Dolby Laboratories Inc) EASEUS Partition Master 9.1.0 Home Edition (HKLM-x32\...\EASEUS Partition Master Home Edition_is1) (Version: - EASEUS) EaseUS Todo Backup Free 3.5 (HKLM-x32\...\EaseUS Todo Backup Free 3.5_is1) (Version: 3.5.0.1 - CHENGDU YIWO Tech Development Co., Ltd) Easy Tune 6 B11.1209.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B11.1209.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.7.143.923 - Foxit Software Inc.) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden HydraVision (x32 Version: 4.2.210.0 - Advanced Micro Devices, Inc.) Hidden IconHandler 32 bit (x32 Version: 2.0 - Corel Corporation) Hidden IconHandler 64 bit (Version: 2.0 - Corel Corporation) Hidden Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle) K-Lite Codec Pack 8.1.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.1.0 - ) Langauge (x32 Version: 1.00.0000 - Your Company Name) Hidden Lernout & Hauspie TruVoice American English TTS Engine (HKLM-x32\...\tv_enua) (Version: - ) Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation) Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla) MPC-HC 1.6.4.6052 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.6.4.6052 - MPC-HC Team) ON_OFF Charge B11.0110.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden Painter 12 - Content (Version: 12.0.0 - Corel Corporation) Hidden Painter 12 - Core (Version: 12.0.0 - Corel Corporation) Hidden Painter 12 - Corex64 (Version: 12.0.0 - Corel Corporation) Hidden Painter 12 - EN (Version: 12.0.0 - Corel Corporation) Hidden Painter 12 - IPM (Version: 12.0 - Corel Corporation) Hidden Painter 12 - Setup Files (Version: 12.0 - Corel Corporation) Hidden Painter 13 - Contentx64 (Version: 13.0 - Corel Corporation) Hidden Painter 13 - Core (Version: 13.0 - Corel Corporation) Hidden Painter 13 - Corex64 (Version: 13.0 - Corel Corporation) Hidden Painter 13 - EN (Version: 13.0 - Corel Corporation) Hidden Painter 13 - Setup Files (Version: 13.1 - Corel Corporation) Hidden Painter 2015 - Contentx64 (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - Core (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - Corex64 (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - CT (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - DE (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - EN (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - FR (Version: 14.0 - Corel Corporation) Hidden Painter 2015 - Setup Files (Version: 14.0 - Corel Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.31.3 - Ralink) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek) Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6409 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6433 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.00.0165 - REALTEK Semiconductor Corp.) Revo Uninstaller Pro 2.5.7 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 2.5.7 - VS Revo Group, Ltd.) Speakonia (HKLM-x32\...\Speakonia_is1) (Version: 1.0.3.5 - CFS-Technologies) Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.5 - Safer-Networking Ltd.) Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.1.0 - Topaz Labs, LLC) Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC) Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC) Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.1.0 - Topaz Labs, LLC) Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC) Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.1.0 - Topaz Labs, LLC) Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.2.0 - Topaz Labs, LLC) Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC) Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC) Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC) Topaz ReMask 4 (HKLM-x32\...\Topaz ReMask 4) (Version: 4.0.0 - Topaz Labs, LLC) Topaz ReStyle (HKLM-x32\...\Topaz ReStyle) (Version: 1.0.0 - Topaz Labs, LLC) Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.1.1 - Topaz Labs, LLC) Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC) Toshiba AutoTask (HKLM-x32\...\Toshiba AutoTask) (Version: - ) TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK) TuneUp Utilities Language Pack (en-GB) (x32 Version: 10.0.3000.100 - TuneUp Software) Hidden TypingMaster Pro (HKLM-x32\...\{98B6FB8A-8638-4037-AD44-CF7D0EEAB875}_is1) (Version: 7.00 - TypingMaster Inc) Update Manager (x32 Version: 4.60 - Corel Corporation) Hidden VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.) WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.) WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.) WinArchiver (HKLM-x32\...\WinArchiver) (Version: 2.2 - WinArchiver Computing, Inc.) WinArchiver Virtual Drive (HKLM-x32\...\WinArchiver Virtual Drive) (Version: 2.8 - WinArchiver Computing, Inc.) Windows 7 Manager (HKLM\...\{1BE194BD-AF0E-4744-B7FF-4C5DC1874EFC}) (Version: 3.0.6 - Yamicsoft) Windows10FirewallControl (x64) 7.0.10.31 (HKLM\...\Windows10FirewallControl_is1) (Version: 7.0.10.31 - Sphinx Software) WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - ) Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {9CFA8771-E295-4980-84F1-0F4FA6EA868F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.) Task: {A15EE58B-715D-4B70-8CC5-F714E8054733} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-15] (AVAST Software) Task: {C43C218F-94C9-4F52-BB86-F85C1FDD7304} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.) Task: {C4FFA243-1FA4-4208-980C-254D81630A3A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-14] (AVAST Software) Task: {CC20452C-2BDF-4079-9615-44CB200B527D} - System32\Tasks\{DA67EB24-E162-4AAB-8B55-A13345AEE61F} => C:\Users\walter\Desktop\Word 2007\WINWORD.EXE Task: {D73C9DB2-AFFB-4D4C-9272-E64AF994DE76} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-04] (Adobe Systems Incorporated) Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {DF13F725-BE1F-497D-BB77-81CACF0DE3B4} - System32\Tasks\{12FDD45C-7656-4959-B83A-32DAB027D780} => C:\Users\walter\Desktop\Word 2007\WINWORD.EXE Task: {E1B49898-8BEB-477C-A914-685FA41B6A23} - System32\Tasks\Safer-Networking\Spybot Anti-Beacon\Refresh Anti-Beacon immunization => C:\Program Files (x86)\Spybot Anti-Beacon\SDAntiBeacon.exe [2015-10-19] (Safer-Networking Ltd.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2012-01-12 06:56 - 2012-01-12 06:56 - 00196608 _____ () C:\Program Files (x86)\WinArchiver Virtual Drive\WAService.exe 2011-11-09 22:09 - 2011-11-09 22:09 - 00211968 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2011-08-07 10:06 - 2011-08-07 10:06 - 00624128 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2011-08-07 10:06 - 2011-08-07 10:06 - 03641344 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2011-11-09 22:09 - 2011-11-09 22:09 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2011-12-29 16:58 - 2006-12-11 02:14 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2011-12-29 13:10 - 2011-09-08 17:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll 2015-12-14 10:16 - 2015-12-14 10:16 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-12-14 10:16 - 2015-12-14 10:16 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-01-05 15:20 - 2016-01-05 15:20 - 02808832 _____ () C:\Program Files\AVAST Software\Avast\defs\16010501\algo.dll 2015-12-14 10:16 - 2015-12-14 10:16 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00051848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll 2011-12-31 11:37 - 2008-11-25 17:18 - 01291264 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2011-12-31 11:37 - 2004-10-05 03:08 - 00055808 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00074376 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSize.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00243336 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00069768 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00064648 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll 2011-12-31 11:37 - 2011-10-21 22:46 - 00088712 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBFireWall.dll 2015-04-23 11:59 - 2009-12-09 20:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll 2015-12-14 10:16 - 2015-12-14 10:16 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-12-30 18:59 - 2015-12-30 18:59 - 17882304 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll 2006-10-26 13:56 - 2006-10-26 13:56 - 00757008 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-491009870-2190124883-2673386763-1000\...\gigabyte.com -> hxxp://www.gigabyte.com IE trusted site: HKU\S-1-5-21-491009870-2190124883-2673386763-500\...\gigabyte.com -> hxxp://www.gigabyte.com ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 19:34 - 2016-01-05 16:35 - 00004108 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 0.0.0.0.0 127.0.0.1 m.fr.a2dfp.net 127.0.0.1 mfr.a2dfp.net 127.0.0.1 ad.a8.net 127.0.0.1 asy.a8ww.net 127.0.0.1 static.a-ads.com 127.0.0.1 atlas.aamedia.ro 127.0.0.1 abcstats.com 127.0.0.1 ad4.abradio.cz 127.0.0.1 a.abv.bg 127.0.0.1 adserver.abv.bg 127.0.0.1 adv.abv.bg 127.0.0.1 bimg.abv.bg 127.0.0.1 ca.abv.bg 127.0.0.1 www2.a-counter.kiev.ua 127.0.0.1 track.acclaimnetwork.com 127.0.0.1 accuserveadsystem.com 127.0.0.1 www.accuserveadsystem.com 127.0.0.1 achmedia.com 127.0.0.1 csh.actiondesk.com 127.0.0.1 ads.activepower.net 127.0.0.1 app.activetrail.com There are 84 more lines. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-491009870-2190124883-2673386763-1000\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-491009870-2190124883-2673386763-500\Control Panel\Desktop\\Wallpaper -> C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: [removed] - [removed] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{71E4C1F5-1EF0-48D1-9EB2-C7DA302114B6}] => (Allow) C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe FirewallRules: [{03ECA7B6-A4A7-41A1-A7D2-30C433520D05}] => (Allow) C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe FirewallRules: [{1DC3B9D2-B206-417B-9024-A5A6E22A3B9A}] => (Allow) C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe FirewallRules: [{7B1CC9A0-B977-4B58-80A7-23910BE61460}] => (Allow) C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe FirewallRules: [TCP Query User{86E81DA2-2564-4219-A086-056F13850543}C:\program files (x86)\gigabyte\et6\updexe.exe] => (Allow) C:\program files (x86)\gigabyte\et6\updexe.exe FirewallRules: [UDP Query User{AEC36554-5F4A-4209-84A5-6DFB447CB75E}C:\program files (x86)\gigabyte\et6\updexe.exe] => (Allow) C:\program files (x86)\gigabyte\et6\updexe.exe FirewallRules: [TCP Query User{60A97439-EB2F-4104-A8FD-0CB9C9351B93}C:\program files (x86)\gigabyte\et6\gbtupd.exe] => (Allow) C:\program files (x86)\gigabyte\et6\gbtupd.exe FirewallRules: [UDP Query User{BF6D7C56-F2C7-43C5-A639-3671E93AFCFD}C:\program files (x86)\gigabyte\et6\gbtupd.exe] => (Allow) C:\program files (x86)\gigabyte\et6\gbtupd.exe FirewallRules: [TCP Query User{0C389F72-A787-47CC-AE43-FCDBD646470B}C:\program files (x86)\gigabyte\@bios\updexe.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\updexe.exe FirewallRules: [UDP Query User{8F769100-5C17-49A1-B5DA-A11EA98185D5}C:\program files (x86)\gigabyte\@bios\updexe.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\updexe.exe FirewallRules: [TCP Query User{6EF54375-0573-4424-91E6-485A317A9648}C:\program files (x86)\gigabyte\@bios\gbtupd.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gbtupd.exe FirewallRules: [UDP Query User{11EB7EF0-87B3-4E01-9819-FCA0E3A534F3}C:\program files (x86)\gigabyte\@bios\gbtupd.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gbtupd.exe FirewallRules: [{6E48EB4F-5F53-4127-B92B-50E2F46C8613}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{F630C7AD-5991-4AC6-9AA2-3DB21CCA1495}] => (Allow) C:\Program Files\Windows10FirewallControl\Windows10FirewallService.exe FirewallRules: [{74313264-68CC-432C-BF2A-0A6C7052FB4C}] => (Allow) C:\Program Files\Windows10FirewallControl\Windows10FirewallControl.exe FirewallRules: [{525A0FCE-17F8-4B91-B159-F6A55345117C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E6E1137F-3050-47E2-9021-9109FAA15E4F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5A397E12-D9F9-41B3-9878-F9048360B0CE}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [{5708B442-0DCB-46B4-9C00-2865F9B6CDAF}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [{C2487D9B-F2FA-4E27-8917-D3C6C5E2DBD5}] => (Allow) LPort=1542 FirewallRules: [{1D64B879-AE1B-4928-8C9E-1AC645D40823}] => (Allow) LPort=1542 FirewallRules: [{1BBAEE66-BDC2-4939-87F3-496D37A03EE3}] => (Allow) LPort=53 FirewallRules: [{C77E41A0-4F7C-4012-91C6-5E2EE9A895D8}] => (Allow) C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe FirewallRules: [{6DFE3A80-6AEB-42EF-9E8C-2562C25FC4E8}] => (Allow) C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe FirewallRules: [{F09BCBB4-961D-4F62-B291-1B655BE6492F}] => (Allow) C:\Program Files (x86)\Ralink\Common\RaUI.exe FirewallRules: [{7D7373D0-D0A3-40AB-8892-78837B212495}] => (Allow) C:\Program Files (x86)\Ralink\Common\RaUI.exe FirewallRules: [{546E4385-3FEA-48FD-A922-C9A29EC1B5C4}] => (Block) c:\Program Files (x86)\Corel\CorelDRAW Graphics Suite X7\Programs\CorelDrw.exe FirewallRules: [{5554F542-D52B-4899-8F21-A90FCA924212}] => (Block) c:\Program Files (x86)\Corel\CorelDRAW Graphics Suite X7\Programs\CorelPP.exe FirewallRules: [TCP Query User{7B0CE979-D562-43F7-9BA4-1867888BD25B}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe FirewallRules: [UDP Query User{724630AE-D5C1-45D9-A340-7EBD40B94C46}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe FirewallRules: [{4248CB2D-951A-4988-BAE2-3EAD75D06C64}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A6F9EAF7-42EC-4AC9-BE13-32E688D3D729}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{72CA48DE-8CE0-40AD-99C0-10796BBD1C9B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 12-12-2015 12:36:10 Windows 7 Manager v3.0.6 System-Restore Point 12-12-2015 13:39:58 Windows 7 Manager v3.0.6 System-Restore Point 13-12-2015 08:25:03 Windows Update 14-12-2015 16:18:21 Windows 7 Manager v3.0.6 System-Restore Point 14-12-2015 16:39:46 Windows 7 Manager v3.0.6 System-Restore Point 24-12-2015 17:59:02 Windows Update 24-12-2015 18:45:00 Windows 7 Manager v3.0.6 System-Restore Point 03-01-2016 11:05:27 Scheduled Checkpoint 05-01-2016 09:56:34 Удалено Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS 05-01-2016 16:06:55 JRT Pre-Junkware Removal 05-01-2016 19:17:03 Revo Uninstaller Pro's restore point - µTorrent ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/05/2016 07:17:03 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {1f88fd6f-9c86-4ec0-abb3-dbf89dadb0a4} Error: (01/05/2016 04:30:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/05/2016 03:20:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/05/2016 08:18:38 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/04/2016 07:13:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/04/2016 03:53:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/04/2016 10:16:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/03/2016 10:09:38 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/30/2015 07:02:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Failed auto update retrieval of third-party root certificate from: with error: The specified server cannot perform the requested operation. . Error: (12/30/2015 07:02:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Failed auto update retrieval of third-party root certificate from: with error: This operation returned because the timeout period expired. . System errors: ============= Error: (01/05/2016 04:30:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: aswKbd Error: (01/05/2016 04:30:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The avast! Firewall service failed to start due to the following error: %%2 Error: (01/05/2016 04:27:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\RAIHV.dll Error: (01/05/2016 04:27:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\RAIHV.dll Error: (01/05/2016 04:27:23 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\RAIHV.dll Error: (01/05/2016 04:26:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (01/05/2016 04:26:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Realtek11nCU service terminated unexpectedly. It has done this 1 time(s). Error: (01/05/2016 04:26:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The RalinkRegistryWriter64 service terminated unexpectedly. It has done this 1 time(s). Error: (01/05/2016 04:26:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The RalinkRegistryWriter service terminated unexpectedly. It has done this 1 time(s). Error: (01/05/2016 04:26:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Corel License Validation Service V2 x64, Powered by arvato service terminated unexpectedly. It has done this 1 time(s). ==================== Memory info =========================== Processor: AMD FX(tm)-8120 Eight-Core Processor Percentage of memory in use: 21% Total physical RAM: 16365.24 MB Available physical RAM: 12843.8 MB Total Virtual: 32728.69 MB Available Virtual: 29112.79 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:625.13 GB) (Free:471.44 GB) NTFS Drive d: (New Volume) (Fixed) (Total:306.29 GB) (Free:142.45 GB) NTFS Drive g: (New Volume) (Fixed) (Total:925.38 GB) (Free:922.38 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 45508088) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=625.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=306.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F12A7B7C) Partition 1: (Not Active) - (Size=925.4 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=858.3 GB) - (Type=05) Partition 3: (Not Active) - (Size=79.3 GB) - (Type=82) ==================== End of Addition.txt ============================