Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017 Ran by Robert R. Fenichel (07-04-2017 12:32:16) Running from C:\Users\Robert R. Fenichel\Desktop Windows 7 Professional Service Pack 1 (X64) (2015-10-13 18:55:24) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-979816460-3853156291-1427404335-500 - Administrator - Disabled) Guest (S-1-5-21-979816460-3853156291-1427404335-501 - Limited - Disabled) Robert R. Fenichel (S-1-5-21-979816460-3853156291-1427404335-1000 - Administrator - Enabled) => C:\Users\Robert R. Fenichel ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-979816460-3853156291-1427404335-1000\...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.) 3D Models for DipTrace (HKLM-x32\...\3D Models for DipTrace) (Version: 3.0 - Novarm) ABBYY FineReader 10 Professional Edition (HKLM-x32\...\{F1000000-0001-0000-0000-074957833700}) (Version: 10.501.29.7006 - ABBYY) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Advantage Client Engine SDK x86_64 v11.10 (HKLM\...\{D4BB5208-3747-4BFD-946C-4699B142E1DC}) (Version: 11.10.0014 - Sybase, Inc.) Advantage Data Architect v11.10 (HKLM-x32\...\{2C13E985-B33D-42BD-A606-B00D4D8CFE3C}) (Version: 11.10.0024 - Sybase, Inc.) Advantage Delphi Components v11.10 (HKLM-x32\...\{C8509120-0D07-4441-AF49-EB70165CA3E5}) (Version: 11.10.0014 - Sybase, Inc.) Advantage TDataSet Descendant for Delphi/C++Builder v8.1 (HKLM-x32\...\{9F1E9D66-63F5-423B-902C-2F5BCBFD4388}) (Version: 8.10.0038 - Extended Systems, Inc.) Advantage TDataSet Descendant for Delphi/C++Builder v9.0 (HKLM-x32\...\{B12E154B-5894-4F48-BAB2-94C32C4BA3B7}) (Version: 9.00.0007 - iAnywhere, Inc.) akFontViewer (HKLM-x32\...\akFontViewer) (Version: - ) Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.) Arduino (HKLM-x32\...\Arduino) (Version: 1.6.7 - Arduino LLC) Axialis AX-Icons 4.5 (HKLM-x32\...\AX-Icons 4.5) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.1.1 - Borland Software Corporation) CAIDA IP Spoofing Tester (HKLM-x32\...\spoofer) (Version: - ) Canon MF Toolbox 4.9.1.1.mf09 (HKLM-x32\...\{6767DFEE-8909-453A-B553-C7693912B2EB}) (Version: 3.2.0 - Canon) Canon MF4320-4350 (HKLM\...\{99A5569D-9F86-4f32-A227-1538B731DA42}) (Version: - ) CoolMon (HKLM-x32\...\CoolMon) (Version: - ) CrashPlan (HKLM\...\{879BBD10-45D3-4752-AA6B-FB789392946C}) (Version: 4.8.0.323 - Code 42 Software) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Digilent Software (HKLM-x32\...\Digilent Software) (Version: 1.2.2 - Digilent, Inc.) DipTrace (HKLM\...\DipTrace) (Version: 3.1 beta - Novarm) DYMO Label Software (HKLM-x32\...\DYMO Label Software) (Version: - ) EAGLE 6.5.0 (HKLM-x32\...\EAGLE 6.5.0) (Version: 6.5.0 - CadSoft Computer GmbH) EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - ) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Eudora (HKLM-x32\...\{116D6A91-14D2-4020-BC4D-BC008B7B6267}) (Version: 7.0 - ) ExamDiff 1.9 (Build 1.9.0.2) (HKLM-x32\...\ExamDiff_is1) (Version: 1.9.0.2 - PrestoSoft LLC) Excalibur For Windows 32-bit (HKLM-x32\...\Excalibur For Windows 32-bit) (Version: - ) FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse) FotoAlbum 3.4.1 (HKLM-x32\...\FotoTime_FA_3x_is1) (Version: 3.4.1 - FotoTime, Inc.) FY3200 PC Contrl software (HKLM-x32\...\FY3200 PC Contrl softwareV2.2) (Version: V2.2 - Fei Yi Ke Ji) Garmin Trip and Waypoint Manager v5 (HKLM-x32\...\{414A373B-59DF-4102-94CA-9FE9A74CBDDA}) (Version: 5.0.0.0 - Garmin Ltd or its subsidiaries) GExperts for Delphi 7 (HKLM-x32\...\GExpertsDelphi7_is1) (Version: 1.36 - GExperts Development Team) Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google) Google Update Helper (x32 Version: 1.2.183.39 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden Gpg4win (2.2.0) (HKLM-x32\...\GPG4Win) (Version: 2.2.0 - The Gpg4win Project) GpProfile (HKLM-x32\...\GpProfile) (Version: - ) High-Definition Video Playback 10 (x32 Version: 7.0.11000.25.1 - Nero AG) Hidden Intel(R) Chipset Device Software (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation) Intel(R) Network Connections 20.2.3001.0 (HKLM\...\PROSetDX) (Version: 20.2.3001.0 - Intel) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation) Intel® Hardware Accelerated Execution Manager (HKLM\...\{30F3FF94-225B-4319-A13C-E307FFDA3CFB}) (Version: 6.0.1 - Intel Corporation) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden Logitech SetPoint 6.51 (HKLM\...\sp6) (Version: 6.51.8 - Logitech) LTspice IV (HKLM-x32\...\LTspice IV) (Version: - ) MapSource - Topo Canada v2 (HKLM-x32\...\InstallShield_{9F308117-9B2F-45EB-9FAF-B59CD8339673}) (Version: 2.00 - Garmin Ltd. and its subsidiaries) MapSource - Topo Canada v2 (x32 Version: 2.00 - Garmin Ltd. and its subsidiaries) Hidden MapSource (HKLM-x32\...\{5E3CFCA6-C95A-47CB-A822-7FA80D423AF2}) (Version: 5.4 - Garmin Ltd. and its subsidiaries) ME ThreadPal Trial (HKLM-x32\...\ME ThreadPal Trial v3.6_is1) (Version: - Close Tolerance Software) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft FrontPage 2000 (HKLM-x32\...\{00120409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.7870.2031 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-979816460-3853156291-1427404335-1000\...\OneDriveSetup.exe) (Version: 17.3.6281.1202 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{C79A7EAB-9D6F-4072-8A6D-F8F54957CD93}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Setup (English) (HKLM\...\{5DDC2234-4B37-45BC-AD33-41F1469B4D83}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation) Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.0.2100.60 - Microsoft Corporation) moltosenso Network Manager Iron version 1.0.0 (HKLM-x32\...\{46AF7E88-A8CA-4EB7-B9FD-E6EC45AD8659}_is1) (Version: 1.0.0 - moltosenso s.r.l.) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 43.0 (x64 en-US) (HKLM\...\Mozilla Firefox 43.0 (x64 en-US)) (Version: 43.0 - Mozilla) Mozilla Firefox 52.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.0.1 (x86 en-US)) (Version: 52.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.1.6284 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.10700.7.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10400.4.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.10500.7.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10400.5.100 - Nero AG) Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10600.1.100 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10500.5.100 - Nero AG) Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10500.1.100 - Nero AG) Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0012 - Nero AG) Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10500.1.100 - Nero AG) NVIDIA 3D Vision Controller Driver 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation) NVIDIA 3D Vision Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.44 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Graphics Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7870.2024 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7830.1018 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7870.2024 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7668.2066 - Microsoft Corporation) Hidden Oracle VM VirtualBox 5.1.14 (HKLM\...\{6AE61854-0F78-49E3-ABCC-586FB43CE709}) (Version: 5.1.14 - Oracle Corporation) Password Safe (HKLM-x32\...\Password Safe) (Version: - ) PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.1.0 - Prolific Technology INC) Programmer's Notepad (HKLM-x32\...\{52CF142B-7B0E-41E7-98F5-B834122523E7}_is1) (Version: 2.4.2.1440 - Simon Steele) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.) ReportBuilder Standard 17.03 for Delphi 7 (HKLM-x32\...\ReportBuilder Standard 17.03 for Delphi 7) (Version: - Digital Metaphors) ReportBuilder Standard 17.03 for Delphi 7 (x32 Version: 17.0.03.293 - Digital Metaphors) Hidden ReportBuilder Standard 18.0 for Delphi 7 (HKLM-x32\...\ReportBuilder Standard 18.0 for Delphi 7) (Version: - Digital Metaphors) ReportBuilder Standard 18.0 for Delphi 7 (x32 Version: 18.0.0.369 - Digital Metaphors) Hidden RoboForm 7-9-28-8 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-28-8 - Siber Systems) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden SigmaPlot 13.0 (HKLM-x32\...\{88B90FF3-D0D3-454A-AACE-9B026E2829E3}) (Version: 13.0 - Systat Software, Inc.) SOLIDWORKS 2015 x64 Edition SP02.1 (HKLM-x32\...\SolidWorks Installation Manager 20150-40201-1100-100) (Version: 23.2.1.1 - SolidWorks Corporation) SOLIDWORKS 2015 x64 Edition SP02.1 (Version: 23.121.1 - Dassault Systemes SolidWorks Corp) Hidden SOLIDWORKS Electrical 2015 SP02.1 x64 Edition (Version: 23.21.1 - Dassault Systemes SolidWorks Corp) Hidden SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.0.2100.60 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Startup Control Panel (HKLM-x32\...\{3DC91D8B-0C19-4D67-930B-D0AAD2009632}) (Version: 2.7.0.0 - Mike Lin) StartupMonitor (HKLM-x32\...\{76EFAC4F-1712-401F-B2AE-590B170C9BCE}) (Version: 1.0.2.0 - Mike Lin) The Master Genealogist v9 (HKLM-x32\...\{096FBCE1-9FE5-4400-966D-81AFA00368A2}) (Version: 9.05.0000 - Wholly Genes Software) ThumbsPlus version 7 SP2 (HKLM-x32\...\ThumbsPlus7) (Version: 7.0 SP2 - Cerious Software, Inc.) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) Viewplot (HKLM-x32\...\Viewplot) (Version: - ) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) Web Companion (HKLM-x32\...\{4a749ae8-33fa-47a0-8095-98f90e95424f}) (Version: 2.1.1159.2383 - Lavasoft) WinAVR 20100110 (remove only) (HKLM-x32\...\WinAVR-20100110) (Version: 20100110 - ) WinDirStat 1.1.2 (HKU\S-1-5-21-979816460-3853156291-1427404335-1000\...\WinDirStat) (Version: - ) Windows Movie Maker 2016 (HKLM-x32\...\{3CC29C1A-B5FE-457B-8F22-32A2videowin}}_is1) (Version: - videowinsoft.com) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinZip 15.5 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240C3}) (Version: 15.5.9510 - WinZip Computing, S.L. ) X-CTU (HKLM-x32\...\{101586B7-AE8E-4AC4-B75F-48B0C1387B09}) (Version: 5.2.75 - Digi) XCTU (HKLM-x32\...\XCTU 6.3.4.3) (Version: 6.3.4.3 - Digi International Inc.) Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-979816460-3853156291-1427404335-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Robert R. Fenichel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileCoAuthLib64.dll () ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {136C3DAE-44F7-469B-95C1-65CEA8474EE8} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMMMIMGMPMLMKMNJNMCNHMKJLMMJCNLMKJNMGMCNGMKJNJHMCNMJKMMMKJNMGMMJMMPMPMIMNJJNJICMIMCNGMCNOMJMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMOMFMEKMICNJJCKFMOMJMIMPMJNHICMCJGIGJKJNMJNBJCMNKAJNJKJNILIPNNKBNPNJLKJBJGJMJHJKJDJJNKJ (the data entry has 119 more characters). Task: {1621DAB7-486B-46EC-8711-71DFE955127B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-26] (Microsoft Corporation) Task: {1E43AD5B-1532-45EA-9CF6-263553367F97} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2016-07-11] (AO Kaspersky Lab) Task: {259DB0F1-E1FA-4E8B-B740-B3AA6F68731F} - System32\Tasks\{5E0E2F8A-4D70-470E-988B-5B770928C75A} => C:\Users\Robert R. Fenichel\Desktop\models3d_beta.exe Task: {351673E7-7A8D-4EFF-B9E0-7D790C6D6352} - System32\Tasks\{BB4B1526-B077-498D-8AF0-19770E47F21D} => pcalua.exe -a "G:\install\programming\Delphi\Delphi 7\Report Builder\rbstd 1603 for d7.exe" -d "G:\install\programming\Delphi\Delphi 7\Report Builder" Task: {3A326E33-0473-41AF-A767-549CE5D9D18D} - System32\Tasks\{1BF330DB-D3C3-408A-A192-E33927BD3EC5} => C:\Program Files (x86)\Nikon\NkScan4\Nikon Scan.exe Task: {402F598D-ED2B-48D8-8B00-B57FF3E7BB00} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14] (Adobe Systems Incorporated) Task: {452FAB89-9C8F-4916-B629-BB7D4A4C51F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-14] (Google Inc.) Task: {4956DD52-ABC7-495A-899C-1A2558C83BD4} - System32\Tasks\{DB1F3FEC-3255-40F2-AF6D-4B2083D8D746} => C:\Users\Robert R. Fenichel\Desktop\models3d_beta.exe Task: {54D2E83A-786C-48F7-9DC1-66AA3EE393DE} - System32\Tasks\{E906D6A1-D60F-4C1E-9A3A-3B7B282C63AE} => pcalua.exe -a "G:\install\word processing\vedit\vpw-prodc.exe" -d "G:\install\word processing\vedit" Task: {63D151D1-BFAF-4DE9-BE7F-F9392D930C30} - System32\Tasks\{7B45D372-DA5C-4B4A-A952-128310F01C66} => pcalua.exe -a "C:\Users\Robert R. Fenichel\Desktop\scratch\SETUP.EXE" -d "C:\Users\Robert R. Fenichel\Desktop\scratch" Task: {6F59B2E1-9DA9-4126-B78A-C6EC0A9BBBE0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-14] (Google Inc.) Task: {9516E801-A4DC-4395-AA63-94669650CED8} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Internet\RoboForm\RoboTaskBarIcon.exe [2017-02-25] (Siber Systems) Task: {970308AA-FB30-4A1A-89B8-3CDED5BA87E1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-26] (Microsoft Corporation) Task: {9BC56AA5-D27A-485C-8F2A-6C34EE08BAAD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated) Task: {9FD45D76-F344-418A-A5D7-4472B3DEEB01} - System32\Tasks\{9504D4FF-6792-43B4-9A21-F1E54AA9183E} => pcalua.exe -a "C:\Users\Robert R. Fenichel\Desktop\feeltech\CH-340 Driver驱动\CH340_341for X64.EXE" -d "C:\Users\Robert R. Fenichel\Desktop\feeltech\CH-340 Driver驱动" Task: {A6B65AAD-3D9E-46B0-9350-2455AFAD7B26} - System32\Tasks\{A11E4E6D-04C2-4190-9D33-C807BA03FBE3} => pcalua.exe -a F:\Welcome.exe -d F:\ Task: {BFC31652-2C17-41E1-99A8-7BED41C2CB82} - System32\Tasks\{FC4F6C93-4FC8-41F7-94CD-5C01FAAE468C} => C:\Users\Robert R. Fenichel\Desktop\models3d_beta.exe Task: {C1EB00DD-EF7C-4318-94B4-EED09D72FBF0} - System32\Tasks\{0109BC9A-1E69-42AB-B31E-AC74BE401831} => C:\Users\Robert R. Fenichel\Desktop\models3d_beta.exe Task: {C6196BEA-E731-4B2F-8E4A-07FDB413F596} - System32\Tasks\{4E7951EC-4BB8-44C8-A9EC-B20EC20E96FE} => pcalua.exe -a "G:\install\hardware\attached\Feeltech 3200\CH-340 Driver驱动\CH340_341for X64.EXE" -d "G:\install\hardware\attached\Feeltech 3200\CH-340 Driver驱动" Task: {E4DAB0A0-88CF-46D4-AB1B-19505D01A036} - System32\Tasks\{ED4B180A-901E-4623-9776-D129AC51EBCD} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Nikon\NkScan4\Nikon Scan.exe" Task: {F5961FB2-BBEB-4B6D-A026-9B4A5AE9FA70} - System32\Tasks\AdobeAAMUpdater-1.0-CPU2015-Robert R. Fenichel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2015-10-13 12:54 - 2015-02-03 19:21 - 00115400 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-10-17 22:33 - 2016-10-17 22:33 - 00014848 _____ () C:\Program Files\CrashPlan\md564.dll 2016-10-17 22:33 - 2016-10-17 22:33 - 00238592 _____ () \\?\C:\Program Files\CrashPlan\cpnative64.dll 2016-10-17 22:33 - 2016-10-17 22:33 - 00082432 _____ () \\?\C:\Program Files\CrashPlan\c42archive64.dll 2016-10-17 22:33 - 2016-10-17 22:33 - 00484864 _____ () \\?\C:\Program Files\CrashPlan\libleveldb64.dll 2015-10-14 10:57 - 2015-10-14 10:57 - 00017168 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe 2015-10-14 10:57 - 2015-10-14 10:57 - 00008976 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Service.Logger.dll 2015-10-14 10:57 - 2015-10-14 10:57 - 00023312 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WcfService.dll 2016-05-18 10:48 - 2017-02-26 12:32 - 08930496 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll 2017-03-20 08:44 - 2017-03-20 08:44 - 00052392 _____ () C:\Program Files (x86)\Internet\Filezilla\fzshellext_64.dll 2010-07-14 21:44 - 2010-07-14 21:44 - 00020032 _____ () C:\Program Files (x86)\system tools\edit\Unlocker\UnlockerCOM.dll 2015-03-06 04:52 - 2015-03-06 04:52 - 00268280 _____ () C:\Program Files (x86)\image processing\SolidWorks\SOLIDWORKS\sldBodyDiffu.dll 2015-10-09 15:22 - 2014-02-09 15:34 - 00534016 _____ () G:\source code\Delphi\applications\infrastructure\CalendarClock\CalendarClockGadget.exe 2015-10-09 15:22 - 2015-06-06 23:04 - 01032192 _____ () G:\source code\Delphi\applications\infrastructure\start menu\StartMenu.exe 2015-10-09 15:22 - 2017-03-24 16:15 - 01634304 _____ () G:\source code\Delphi\applications\household databases\home control\HomeControlProject.exe 2016-06-28 00:19 - 2016-06-28 00:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll 2015-10-13 22:08 - 2006-10-04 09:04 - 00007680 ____R () C:\Program Files (x86)\Internet\Eudora\EuLang.dll 2015-10-13 22:08 - 2006-09-26 10:45 - 00151552 _____ () C:\Program Files (x86)\Internet\Eudora\LIBEXPAT.dll 2015-10-13 22:08 - 2006-10-04 09:04 - 00065536 ____R () C:\Program Files (x86)\Internet\Eudora\plstclnt.dll 2015-10-13 22:08 - 2006-09-26 10:45 - 00633856 _____ () C:\Program Files (x86)\Internet\Eudora\x1lib.dll 2015-10-09 15:21 - 2000-10-03 15:06 - 00011264 _____ () G:\Internet\Eudora\Plugins\Unwrap32.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\.DEFAULT\...\localhost -> localhost IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com IE trusted site: HKU\S-1-5-21-979816460-3853156291-1427404335-1000\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-979816460-3853156291-1427404335-1000\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 19:34 - 2009-06-10 14:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-979816460-3853156291-1427404335-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.1.254 - 75.153.171.122 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{1A69996A-38E2-4A19-B53D-E207CBAC1CF2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{48DC8B4C-433E-4FCF-B7EA-BDDE14110EF5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{90DF5A34-44A2-4A0C-A004-1F27DBBCE39C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{4CFE7BA6-49C3-46BB-9335-8AE1A3620A35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{1476D7A5-BEC0-431F-8E25-AE95826B318F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{0AA9523E-C226-462F-A80A-B5F728E9B629}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{74A3E4B4-C2FE-4A8A-97E9-C4DD1D4DAEB2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{AC0C43AF-DC60-4062-B36B-91F9BD7A90DB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6399F938-840E-49E1-AE46-1632A2E26B37}] => (Allow) C:\Users\Robert R. Fenichel\AppData\Local\Microsoft\OneDrive\OneDrive.exe FirewallRules: [{1F8CC371-D5CD-4A58-AF83-536947F83BAD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BDEC4E34-8DBC-4138-B5E1-4820E6FE88B7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{F2BF8F48-2D0A-4A07-BEC9-B31DAB8CC8B9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{C139B51A-C331-42A3-B411-396704AE384E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{4E39A97D-BDC8-4232-8899-F02E0BB3417C}] => (Allow) C:\Program Files (x86)\image processing\SolidWorks\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe FirewallRules: [{61BDF249-4D8B-4184-90B4-CCDFE3E2209F}] => (Allow) C:\Program Files (x86)\image processing\SolidWorks\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe FirewallRules: [{5548F3B4-3F9F-4182-A8DF-C29886D1B357}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{6EF84C69-804A-4931-AACF-CD4078F943D7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C12F55F7-C126-484F-A25B-AA09212655E5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C98172A6-9054-4AFD-8540-162960FF6519}] => (Allow) C:\Program Files (x86)\Internet\Firefox64\firefox.exe FirewallRules: [{215F0293-A5A2-4875-A658-312B65CAA42C}] => (Allow) C:\Program Files (x86)\Internet\Firefox64\firefox.exe FirewallRules: [{B841275D-EEA5-4BA1-9B68-5E9A837F0F00}] => (Allow) LPort=5044 FirewallRules: [{5F860B4A-CE93-4C1E-8E61-9B79243323EB}] => (Allow) LPort=5044 FirewallRules: [{6350D35A-FFA5-49C3-B3E3-4EE99D5FA49F}] => (Allow) LPort=5044 FirewallRules: [{C92F8F7D-0000-47F3-BB0A-D4DEEBD1CAC5}] => (Allow) LPort=5044 FirewallRules: [{8056F4F2-724C-48CC-BAEE-FB369EDDB636}] => (Allow) LPort=319 FirewallRules: [{F89D3F4B-0153-45BD-834D-6D86540BA8D2}] => (Allow) LPort=319 FirewallRules: [{F188674A-83E6-4D7E-A2B0-9F68D2CABA89}] => (Allow) LPort=320 FirewallRules: [{693C8427-F326-4AD0-8161-5450F053CE5D}] => (Allow) LPort=320 FirewallRules: [{BD5277C5-B331-4A4A-A842-D83A3951B1F5}] => (Allow) LPort=111 FirewallRules: [{42317F6F-5F7C-4E93-B441-3613BB89629B}] => (Allow) LPort=111 FirewallRules: [{D1ED32F5-3CA7-4765-8440-8101C74B94E0}] => (Allow) C:\Program Files\Agilent\IO Libraries Suite\bin\siclland.exe FirewallRules: [{207E1D94-0F1F-4BED-9B99-CE52F4D2CE96}] => (Allow) C:\Program Files\CrashPlan\CrashPlanService.exe ==================== Restore Points ========================= 03-04-2017 11:36:19 first after freezes ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/04/2017 01:34:26 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/04/2017 01:33:26 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/04/2017 01:32:24 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/04/2017 01:31:21 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/04/2017 01:30:18 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/04/2017 01:19:02 PM) (Source: VSS) (EventID: 12294) (User: ) Description: Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine returned E_INVALIDARG. Routine details GetSnapshot({00000000-0000-0000-0000-000000000000},00000000001D8D40). Operation: Get Shadow Copy Properties Context: Execution Context: Coordinator Error: (04/03/2017 07:45:04 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: Event-ID 1 Error: (04/03/2017 07:45:04 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: Event-ID 1 Error: (04/03/2017 07:45:04 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: Event-ID 1 Error: (04/03/2017 07:40:46 AM) (Source: WinMgmt) (EventID: 24) (User: ) Description: Event provider MS_SNMP_ENCAPSULATED_EVENT_PROVIDER attempted to register query "select * from SnmpNotification" whose target class "SnmpNotification" in //./root/snmp/localhost namespace does not exist. The query will be ignored. System errors: ============= Error: (04/06/2017 10:16:29 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/06/2017 10:16:29 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/06/2017 04:48:22 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/06/2017 04:48:21 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/06/2017 04:48:20 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/05/2017 03:25:20 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/05/2017 03:25:19 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/05/2017 03:24:22 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/05/2017 03:24:21 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. Error: (04/05/2017 03:22:24 PM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk2\DR2. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz Percentage of memory in use: 38% Total physical RAM: 16333.74 MB Available physical RAM: 10086.5 MB Total Virtual: 49099.92 MB Available Virtual: 43024.31 MB ==================== Drives ================================ Drive c: (Windows 7/64) (Fixed) (Total:201.21 GB) (Free:19.79 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (external) (Fixed) (Total:1863.01 GB) (Free:1640.39 GB) NTFS Drive g: (data) (Fixed) (Total:264.55 GB) (Free:239.29 GB) NTFS Drive h: (scratch) (Fixed) (Total:105.2 GB) (Free:67.89 GB) NTFS Drive i: (archive) (Fixed) (Total:1757.81 GB) (Free:1470.56 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A03E24BB) Partition 1: (Active) - (Size=201.2 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=264.6 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 8B962CFC) Partition 1: (Not Active) - (Size=105.2 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=1757.8 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 1A593907) Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================