Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2017
Ran by morocco (06-02-2017 19:30:11)
Running from C:\Users\morocco\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2017-01-10 15:12:10)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-348923343-1604788325-264493167-500 - Administrator - Disabled)
Guest (S-1-5-21-348923343-1604788325-264493167-501 - Limited - Disabled)
morocco (S-1-5-21-348923343-1604788325-264493167-1000 - Administrator - Enabled) => C:\Users\morocco

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 10.0.386.4 (Disabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 10.0.386.4 (Disabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: جدار الحماية الشخصي ESET (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-348923343-1604788325-264493167-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
DriverPack Notifier (HKLM-x32\...\DriverPack Notifier) (Version: 2.2.1 - DriverPack Solution)
ESET Smart Security (HKLM\...\{AF446B88-34F5-4959-9276-A5251EE4A3A2}) (Version: 10.0.386.4 - ESET, spol. s r.o.)
FastStone Capture 8.4 (HKLM-x32\...\FastStone Capture) (Version: 8.4 - FastStone Soft)
FormatFactory 4.0.0.0 (HKLM-x32\...\FormatFactory) (Version: 4.0.0.0 - Free Time)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HDD Regenerator (HKLM-x32\...\{CC5DA723-D428-40D1-B82B-21EB64B1273C}) (Version: 20.11.0011 - Abstradrome)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Java 8 Update 121 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
JetClean (HKLM-x32\...\BlueSprig_JetClean_is1) (Version: 1.5.0 - BlueSprig)
K-Lite Mega Codec Pack 12.7.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.7.5 - KLCP)
Malwarebytes Anti-Malware النسخة 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 en-US)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
Opera Stable 42.0.2393.517 (HKLM-x32\...\Opera 42.0.2393.517) (Version: 42.0.2393.517 - Opera Software)
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
Snagit 11 (HKLM-x32\...\{7CA5C4DF-8327-4035-AE2B-CA76336A04FD}) (Version: 11.0.0 - TechSmith Corporation)
USB Disk Security (HKLM-x32\...\USB Disk Security_is1) (Version: - Zbshareware Lab)
VideoAvatar (HKLM-x32\...\VideoAvatar_is1) (Version: - GeoVid)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Driver Package - Intel Corporation (igfx) Display (09/23/2009 8.15.10.1930) (HKLM\...\50DEFEBB429D8864CA109C92460A629FAFD57F6D) (Version: 09/23/2009 8.15.10.1930 - Intel Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.5.2013.2 - URSoft, Inc.)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {057B1938-E237-4648-8752-DDE9CABA52D3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-10] (Google Inc.)
Task: {1FCDF207-445C-4529-8CDF-EFDAE161375F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-10] (Google Inc.)
Task: {5630EF66-EA6D-4FFB-AA4F-92F33FF04552} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-12-20] ()
Task: {5B426E84-B6F4-4301-9E86-E17418F4A25B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {64DED9C1-7176-4EBF-9EC2-B27B816C21A8} - System32\Tasks\JetCleanLoginCheckUpdate => C:\Program Files (x86)\BlueSprig\JetClean\AutoUpdate.exe [2013-05-14] (BlueSprig)
Task: {6B9A6950-B9AD-40E3-8EAB-E1200A7E4CC7} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {8A4C0B15-B3EB-4763-9A5F-FD4A4A387C13} - System32\Tasks\Opera scheduled Autoupdate 1484062280 => C:\Program Files (x86)\Opera\launcher.exe [2017-01-26] (Opera Software)
Task: {9F6C55A3-D184-441D-BFB1-D37B9BC41CF6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {F1A94C2A-BDCA-4644-9169-29E71FAAAFB8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2013-05-08 14:17 - 2013-05-08 14:17 - 00082144 _____ () C:\Program Files (x86)\HDD Regenerator\hrsrv.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [326]
AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [180]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DFServ => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2009-06-10 21:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-348923343-1604788325-264493167-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\morocco\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snagit 11.lnk => C:\Windows\pss\Snagit 11.lnk.CommonStartup
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: HDD Regenerator => "C:\Program Files (x86)\HDD Regenerator\Shell.exe" /1
MSCONFIG\startupreg: IDMan => C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: uTorrent => %APPDATA%\uTorrent\uTorrent.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2F5A7620-FAC7-4AFA-9E98-4C5F7B6E37AC}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2B115B11-D37A-47F5-ACBC-0984ACDFCAA5}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7F62D23D-40BB-4EAC-A383-DC1E3DFC7D26}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7BD60547-D814-4A92-B6D0-84EB08BB81C1}] => C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{3E8ED566-CC36-4B04-9FB4-EB68DA6E3CD6}] => C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{C693A847-EDF5-4F26-B5C1-E01D1903E208}] => C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{95715E95-AF18-4691-9F6F-B85A5E387007}] => C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{2A52CE1B-A9BD-475B-AC17-954B80D13938}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{735EC73B-6709-46E4-ABE2-EE18079DB942}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9A3C3BC8-6E5D-4AF0-B431-416F133A6962}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9E0FF672-A016-44BC-96C7-41D6EC117A56}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{83B163AF-AF56-4FE8-8D41-E05D3583E9C7}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{98147FB0-4A02-452C-873F-BF09A060F01E}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7A689ECA-C29D-44A3-8160-201D19F14F50}] => C:\Users\morocco\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{6C9ADD57-0F18-4047-8018-4ACF6E97D74D}C:\users\morocco\desktop\dcc\dcc_e2.exe] => C:\users\morocco\desktop\dcc\dcc_e2.exe
FirewallRules: [UDP Query User{AF0E00B1-1EE5-4C53-B756-C276C7F6D018}C:\users\morocco\desktop\dcc\dcc_e2.exe] => C:\users\morocco\desktop\dcc\dcc_e2.exe
FirewallRules: [{7C9C86F2-C586-435A-A1AE-D44CF3A40708}] => C:\Program Files (x86)\Opera\42.0.2393.517\opera.exe

==================== Restore Points =========================

11-01-2017 02:54:31 Installed Snagit 11
11-01-2017 02:56:45 Installed Microsoft Visual C++ 2005 Redistributable
11-01-2017 02:58:16 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
11-01-2017 02:58:40 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026
11-01-2017 02:59:02 Windows Update
05-02-2017 18:30:52 Before uninstalling AVS Video Editor 7.4.1
05-02-2017 18:37:12 Before uninstalling Aoao Video to Picture Converter 4.2
06-02-2017 02:02:28 Installed HDD Regenerator.

==================== Faulty Device Manager Devices =============

Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Serial Port
Description: PCI Serial Port
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/06/2017 07:22:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/06/2017 06:46:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/06/2017 03:17:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/06/2017 02:16:53 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program hddreg.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1054

Start Time: 01d2801ef65b0d9e

Termination Time: 1

Application Path: C:\Program Files (x86)\HDD Regenerator\hddreg.exe

Report Id:

Error: (02/06/2017 12:08:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/05/2017 11:51:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ietabhelper.exe, version: 10.1.11.1, time stamp: 0x58767311
Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba58
Exception code: 0xc0000374
Fault offset: 0x000ce653
Faulting process id: 0x7d0
Faulting application start time: 0x01d2800986239aa5
Faulting application path: C:\Users\morocco\AppData\Local\IE Tab\10.1.11.1\ietabhelper.exe
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 11eb19e3-ebfe-11e6-bccb-001e4f9ca9df

Error: (02/05/2017 10:12:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/05/2017 06:28:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/13/2017 05:06:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/13/2017 03:16:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (02/06/2017 07:13:21 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\morocco\AppData\Local\Temp\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (02/06/2017 07:13:21 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\morocco\AppData\Local\Temp\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (02/06/2017 07:13:21 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\morocco\AppData\Local\Temp\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (02/05/2017 08:56:46 PM) (Source: volmgr) (EventID: 45) (User: )
Description: The system could not sucessfully load the crash dump driver.

Error: (02/05/2017 08:26:31 PM) (Source: volmgr) (EventID: 45) (User: )
Description: The system could not sucessfully load the crash dump driver.

Error: (02/05/2017 07:32:21 PM) (Source: volmgr) (EventID: 45) (User: )
Description: The system could not sucessfully load the crash dump driver.

Error: (02/05/2017 06:26:55 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000046, 0xfffff80002909000, 0xfffffa8000000000, 0xfffff8a00261ac60). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 020517-21699-01.

Error: (01/13/2017 03:52:08 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The ESET Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (01/13/2017 03:16:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (01/13/2017 03:16:01 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Windows Search service terminated with service-specific error %%-1073473535.


CodeIntegrity:
===================================
Date: 2017-02-06 19:13:21.433
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-06 19:13:21.433
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-06 19:13:21.417
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-06 19:13:21.402
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-06 19:13:21.199
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-06 19:13:21.183
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\morocco\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-05 22:23:31.934
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\9617\em023_64.dll.raw because the set of per-page image hashes could not be found on the system.

Date: 2017-02-05 22:23:31.747
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\9617\em023_64.dll.raw because the set of per-page image hashes could not be found on the system.

Date: 2017-02-05 22:23:31.591
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\9617\em023_64.dll.raw because the set of per-page image hashes could not be found on the system.

Date: 2017-02-05 22:23:30.827
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\9490\em023_64.dll.raw because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 31%
Total physical RAM: 3044.61 MB
Available physical RAM: 2075.11 MB
Total Virtual: 6087.42 MB
Available Virtual: 5048.57 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:125.46 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 63B1729B)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================