Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2013 01 Ran by Ryan2011 at 2013-11-12 09:46:53 Running from C:\Users\Ryan2011\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 7.2.8) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ACORD Viewer 6.1 (x32) Adobe AIR (x32 Version: 3.6.0.5970) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Photoshop 7.0 (x32 Version: 7.0) Adobe Reader 9.4.0 (x32 Version: 9.4.0) Amazon MP3 Downloader 1.0.15 (x32 Version: 1.0.15) Amazon Music Importer (x32 Version: 2.0.1) Bing Rewards Client Installer (x32 Version: 16.0.345.0) BufferChm (x32 Version: 140.0.212.000) CCleaner (Version: 3.20) Combined Community Codec Pack 2011-11-11 (x32 Version: 2011.11.11.0) Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000) CutePDF Writer 2.8 D110 (x32 Version: 140.0.142.000) D3DX10 (x32 Version: 15.4.2368.0902) Dell Edoc Viewer (Version: 1.0.0) Desktop Icon Position Saver (64-bit) (x32) Destinations (x32 Version: 140.0.77.000) DeviceDiscovery (x32 Version: 140.0.212.000) Dropbox (HKCU Version: 2.0.22) Express Zip (x32 Version: 2.17) Gametel Configuration Tool 64-bit (Version: 1.2.1.0) Google Chrome (HKCU Version: 30.0.1599.101) Google Update Helper (x32 Version: 1.3.21.165) GPBaseService2 (x32 Version: 140.0.211.000) Grim Dawn (x32) Gunpoint (x32) Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000) Hoyle Casino (x32 Version: 1.0.0) HP Customer Participation Program 14.0 (Version: 14.0) HP Imaging Device Functions 14.0 (Version: 14.0) HP Photo Creations (x32 Version: 1.0.0.2024) HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (Version: 14.0) HP Product Detection (x32 Version: 11.14.0001) HP Smart Web Printing 4.60 (Version: 4.60) HP Solution Center 14.0 (Version: 14.0) HP Update (x32 Version: 5.005.000.002) HPAppStudio (x32 Version: 140.0.95.000) HPDiagnosticAlert (x32 Version: 1.00.0000) HPPhotoGadget (x32 Version: 140.0.524.000) HPProductAssistant (x32 Version: 140.0.212.000) HPSSupply (x32 Version: 140.0.211.000) Informatik (x32) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Graphics Media Accelerator Driver Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014) Java 7 Update 13 (x32 Version: 7.0.130) Java Auto Updater (x32 Version: 2.1.9.0) Java(TM) 6 Update 20 (64-bit) (Version: 6.0.200) Java(TM) 6 Update 31 (x32 Version: 6.0.310) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) Magic Online (x32 Version: 3.00.0000) Magic: The Gathering - Duels of the Planeswalkers (x32) Magic: The Gathering – Tactics (x32) Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300) MarketResearch (x32 Version: 140.0.212.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Default Manager (x32 Version: 2.2.114.0) Microsoft Office Basic Edition 2003 (x32 Version: 11.0.8173.0) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Security Client (Version: 4.3.0219.0) Microsoft Security Essentials (Version: 4.3.219.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106) Mp3tag v2.52 (x32 Version: v2.52) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Network64 (Version: 140.0.212.000) Network64 (Version: 140.0.221.000) Palace of Chance (x32 Version: 12.0.0) Prism Video File Converter (x32) PS_AIO_07_D110_SW_Min (x32 Version: 140.0.142.000) QuickTransfer (x32 Version: 140.0.98.000) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5963) Samsung Kies (x32 Version: 2.3.2.12064_9) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.6.0) Scan (x32 Version: 140.0.77.000) Shop for HP Supplies (Version: 14.0) Sir, You Are Being Hunted (x32) SketchUp 2013 (x32 Version: 13.0.4124) Skype™ 6.0 (x32 Version: 6.0.126) SmartWebPrinting (x32 Version: 140.0.186.000) SolutionCenter (x32 Version: 140.0.211.000) Spybot - Search & Destroy (x32 Version: 1.6.2) Status (x32 Version: 140.0.212.000) Steam (x32 Version: 1.0.0.0) Talisman: Digital Edition (x32) Talisman: Prologue (x32) Toolbox (x32 Version: 140.0.424.000) TQ Defiler.NET (x32 Version: 1.3.7) TrayApp (x32 Version: 140.0.212.000) Unity Web Player (HKCU Version: ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) Virtual Pool 3 DL (x32 Version: 3.3.1.1) Virtual Pool 3 Preview (x32 Version: 3.2.3.9) Virtual Pool 4 Demo (x32 Version: 4.1.1.7) Visual Pinball VPInstaller 1.0.3 (x32 Version: VPInstaller 1.0.3) VLC media player 2.0.3 (x32 Version: 2.0.3) WebReg (x32 Version: 140.0.212.017) Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (02/03/2011 2.4.0.0) (Version: 02/03/2011 2.4.0.0) Windows Driver Package - Fructel AB (usbser) Ports (11/04/2011 1.0.0.0) (Version: 11/04/2011 1.0.0.0) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Sync (x32 Version: 14.0.8089.726) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.00 (32-bit) (x32 Version: 4.00.0) Yahoo! Messenger (x32) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-13 21:34 - 2013-11-06 07:31 - 00449863 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {3D0F80A5-F569-402A-909D-5047EADEB20D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe Task: {64506389-48FD-4A6D-B4D1-13ED5817E66E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1237553287-1429794397-2156527687-1000UA => C:\Users\Ryan2011\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-03] (Google Inc.) Task: {68CECEF1-4732-4935-88B7-0F8A6CB84326} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe Task: {757CC069-530F-4A09-95CD-861F832C0212} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1237553287-1429794397-2156527687-1000Core => C:\Users\Ryan2011\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-03] (Google Inc.) Task: {CD96F50D-D4B2-4040-B732-45D70ECF4195} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-06-22] (Piriform Ltd) Task: {E956ACFD-B423-47F8-8B1D-BFE24FF7D8EF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated) Task: {ECC21FC9-D70C-4F41-91D8-C96DFC8A8B50} - System32\Tasks\{730F5265-3543-43CD-B456-02F5030351B3} => C:\Program Files (x86)\Visual Pinball\VPinball_9_0_2.exe [2009-02-09] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1237553287-1429794397-2156527687-1000Core.job => C:\Users\Ryan2011\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1237553287-1429794397-2156527687-1000UA.job => C:\Users\Ryan2011\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-09 07:26 - 2013-09-07 21:27 - 00327168 _____ () C:\Windows\system32\MSWSOCK.dll 2013-11-01 09:01 - 2013-11-01 09:01 - 00089088 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll 2011-04-12 11:08 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2013-10-09 07:26 - 2013-09-07 21:27 - 00327168 _____ () C:\Windows\system32\mswsock.dll 2013-11-04 16:46 - 2013-11-04 16:46 - 00115137 _____ () C:\Users\Ryan2011\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll 2013-03-13 15:48 - 2013-03-13 15:48 - 24978944 _____ () C:\Users\Ryan2011\AppData\Roaming\Dropbox\bin\libcef.dll 2013-08-15 11:02 - 2013-08-15 11:02 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\44bfa824a3b8a6f789fda79a2e01a8db\IsdiInterop.ni.dll 2010-09-10 02:49 - 2010-03-03 20:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-08-27 08:37 - 2012-05-25 03:25 - 00921600 _____ () C:\Program Files (x86)\Yahoo!\Messenger\yui.dll 2012-08-27 08:37 - 2012-05-25 03:25 - 00078336 _____ () C:\Program Files (x86)\Yahoo!\Messenger\pcre.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Photosmart D110 series Description: Photosmart D110 series Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Photosmart D110 series Description: Photosmart D110 series Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Photosmart D110 series Description: Photosmart D110 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Photosmart D110 series Description: Photosmart D110 series Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/12/2013 08:38:36 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/11/2013 08:39:12 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/08/2013 00:15:39 PM) (Source: SideBySide) (User: ) Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error: (11/08/2013 08:50:56 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/07/2013 08:54:35 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/06/2013 08:12:52 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/05/2013 07:49:40 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (11/04/2013 11:08:30 AM) (Source: SideBySide) (User: ) Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error: (11/01/2013 11:23:18 AM) (Source: SideBySide) (User: ) Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error: (11/01/2013 08:52:41 AM) (Source: Application Error) (User: ) Description: Faulting application name: hpqSTE08.exe, version: 140.0.212.0, time stamp: 0x4b03e1ad Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeaf722 Exception code: 0x40000015 Fault offset: 0x0005620a Faulting process id: 0xe58 Faulting application start time: 0xhpqSTE08.exe0 Faulting application path: hpqSTE08.exe1 Faulting module path: hpqSTE08.exe2 Report Id: hpqSTE08.exe3 System errors: ============= Error: (11/12/2013 07:49:36 AM) (Source: Service Control Manager) (User: ) Description: The WinDefend service terminated with the following error: %%126 Error: (11/12/2013 07:49:35 AM) (Source: Service Control Manager) (User: ) Description: The Google Update Service (gupdate) service failed to start due to the following error: %%2 Error: (11/12/2013 07:47:26 AM) (Source: Service Control Manager) (User: ) Description: The Microsoft Antimalware Service service failed to start due to the following error: %%5 Error: (11/11/2013 11:05:13 AM) (Source: Disk) (User: ) Description: The driver detected a controller error on \Device\Harddisk1\DR6. Error: (11/11/2013 11:05:13 AM) (Source: Disk) (User: ) Description: The driver detected a controller error on \Device\Harddisk1\DR6. Error: (11/11/2013 11:05:12 AM) (Source: Disk) (User: ) Description: The driver detected a controller error on \Device\Harddisk1\DR6. Error: (11/11/2013 11:00:56 AM) (Source: DCOM) (User: ) Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED} Error: (11/11/2013 10:55:13 AM) (Source: Service Control Manager) (User: ) Description: The Google Update Service (gupdate) service failed to start due to the following error: %%2 Error: (11/11/2013 10:53:12 AM) (Source: Service Control Manager) (User: ) Description: The WinDefend service terminated with the following error: %%126 Error: (11/11/2013 07:52:04 AM) (Source: Service Control Manager) (User: ) Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: %%1056 Microsoft Office Sessions: ========================= Error: (11/12/2013 08:38:36 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/11/2013 08:39:12 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/08/2013 00:15:39 PM) (Source: SideBySide)(User: ) Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8 Error: (11/08/2013 08:50:56 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/07/2013 08:54:35 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/06/2013 08:12:52 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/05/2013 07:49:40 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (11/04/2013 11:08:30 AM) (Source: SideBySide)(User: ) Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8 Error: (11/01/2013 11:23:18 AM) (Source: SideBySide)(User: ) Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8 Error: (11/01/2013 08:52:41 AM) (Source: Application Error)(User: ) Description: hpqSTE08.exe140.0.212.04b03e1admsvcrt.dll7.0.7601.177444eeaf722400000150005620ae5801ced708e33894c0C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exeC:\Windows\syswow64\msvcrt.dlldfcfe77e-42fc-11e3-bdf0-000acd21436e CodeIntegrity Errors: =================================== Date: 2013-11-04 16:43:34.593 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:43:34.390 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:43:34.187 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:43:34.000 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:05:22.392 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:05:22.189 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:05:21.986 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-04 16:05:21.784 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-01 11:50:27.955 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-11-01 11:50:27.753 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 4060.98 MB Available physical RAM: 2436.17 MB Total Pagefile: 8120.15 MB Available Pagefile: 6388.1 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:453.69 GB) (Free:383.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 86C69001) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=12 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=454 GB) - (Type=07 NTFS) ==================== End Of Log ============================