Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-12-2013 Ran by PC at 2013-12-04 21:31:27 Running from C:\Users\PC\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== µTorrent (x32 Version: 3.1.3) Adobe AIR (x32 Version: 3.4.0.2540) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152) Adobe Reader XI (11.0.05) (x32 Version: 11.0.05) Advanced GIF Animator 3.0 (x32 Version: 3.0) AIMP3 (x32 Version: v3.10.1051 RC 2, 01.06.2012) ALLMediaServer (x32 Version: 0.95) ALLPlayer V5.X (x32) AMR Player 1.3 (x32) Any Video Converter 3.5.6 (x32) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) Bonjour (Version: 3.0.0.10) Borland C++Builder 6 (x32 Version: 6.0) Browsers Protector (x32 Version: 1.0.0.0) CCleaner (Version: 3.17) Centrum obsługi urządzeń z systemem Windows Mobile (Version: 6.1.6965.0) Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000) Contextual Tool Extrafind (x32) ConvertHelper 2.2 (x32) Corel Shell Extension - 64Bit (Version: 14.0) CrystalDiskInfo 5.6.0 (x32 Version: 5.6.0) DAEMON Tools Lite (x32 Version: 4.46.1.0328) doPDF 7.3 printer Easy GIF Animator 5.6 (x32 Version: Easy GIF Animator 5.0) Geeks3D.com FurMark 1.10.1 (x32) GG (HKCU Version: 11) GIMP 2.4.0 (x32) Google Chrome (x32 Version: 31.0.1650.57) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.165) Grand Theft Auto Vice City (x32 Version: 1.00.000) hama PC-Webcam AC-140 (x32 Version: 0.1.0.000) Hardlock Device Drivers (x32) HD Tune Pro 5.00 (x32) iTunes (Version: 11.1.1.11) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Java SE Development Kit 7 Update 17 (x32 Version: 1.7.0.170) LiveVDO plugin 1.3 (x32 Version: 1.3) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile PLK Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended PLK Language Pack (Version: 4.0.30319) Microsoft Antimalware Service PL-PL Language Pack (Version: 3.0.8402.2) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0) Microsoft Security Client (Version: 4.4.0304.0) Microsoft Security Client PL-PL Language Pack (Version: 2.1.1116.0) Microsoft Security Essentials (Version: 4.4.304.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1) Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Mouse Recorder Pro 2.0.5.0 (x32) Mozilla Firefox 25.0.1 (x86 pl) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 25.0.1) MSVC80_x64_v2 (Version: 1.0.3.0) MSVC80_x86_v2 (x32 Version: 1.0.3.0) MSVC90_x64 (Version: 1.0.1.2) MSVC90_x86 (x32 Version: 1.0.1.2) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) NapiProjekt 2.0.0 (build 2151) (x32) Need for Speed Underground 2 (x32) Need for Speed™ Most Wanted (x32) Need For Speed™ World (x32 Version: 1.0.0.1166) Nero 8 (x32 Version: 8.3.465) neroxml (x32 Version: 1.0.0) Nokia Connectivity Cable Driver (x32 Version: 7.1.78.0) Nokia Suite (x32 Version: 3.5.34.0) Notepad++ (x32 Version: 6.3) NVIDIA Install Application (Version: 2.1002.124.810) NVIDIA Oprogramowanie systemu PhysX 9.12.1031 (Version: 9.12.1031) NVIDIA PhysX (x32 Version: 9.12.1031) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2018) NVIDIA Sterownik 3D Vision 320.18 (Version: 320.18) NVIDIA Sterownik graficzny 320.18 (Version: 320.18) NVIDIA Sterownik kontrolera 3D Vision 320.18 (Version: 320.18) Obsługa programów Apple (x32 Version: 2.3.6) Pakiet sterowników systemu Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0) Panel sterowania NVIDIA 320.18 (Version: 320.18) PC Connectivity Solution (x32 Version: 12.0.32.0) Photomatix Pro version 4.2.4 (Version: 4.2.4) Picasa 3 (x32 Version: 3.8) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Prezi Desktop (x32 Version: 3.090) Real Alternative 2.0.2 (x32 Version: 2.0.2) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6602) Skype™ 6.3 (x32 Version: 6.3.107) SpeedFan (remove only) (x32) Splashtop Software Updater (x32 Version: 1.5.6.14) Splashtop Streamer (x32 Version: 2.4.5.2) StartSearch Toolbar 1.3 (x32 Version: 1.3) Tibia (x32 Version: 9.70) Total Commander 64-bit (Remove or Repair) (Version: 8.01) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) VNC Mirror Driver 1.8.0 (Version: 1.8.0) VNC Printer Driver 1.8.0 (Version: 1.8.0) VNC Server 5.0.2 (Version: 5.0.2) VNC Viewer 5.0.2 (Version: 5.0.2) WapSter AQQ (x32 Version: 2.4.5.50) War Thunder Launcher 1.0.1.278 (x32) Win7codecs (x32 Version: 3.0.7) Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0) WinRAR 4.00 (64-bitowy) (Version: 4.00.0) ==================== Restore Points ========================= 22-11-2013 14:01:51 Windows Update 26-11-2013 17:08:18 Windows Update 29-11-2013 20:36:57 ComboFix created restore point 30-11-2013 15:50:47 Windows Update 30-11-2013 18:18:55 Usunięto: ChomikBox 03-12-2013 00:05:21 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-10-30 15:08 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {00F7F1FD-D4AB-47A7-9D75-9F488544C803} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-18] (Adobe Systems Incorporated) Task: {86AE75BD-6B5D-42D4-A17E-029D0D6A4ECA} - System32\Tasks\{FCADC60E-9A97-45A8-82DA-4E1270F78AEC} => C:\Users\PC\Pobrane - Torrent\ETKA7.3\ETKA7.3\setup.EXE Task: {A4C4DB3B-80A4-4AE7-B41E-C340948790FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-17] (Google Inc.) Task: {D384FB76-6361-43BD-A5F8-5120EF8CEDD1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-17] (Google Inc.) Task: {ECB9DE1F-EF18-4C57-BBA6-59F1AB4194A7} - System32\Tasks\{22B17D4E-209D-4114-BF87-84873074B530} => Firefox.exe http://ui.skype.com/ui/0/6.7.0.102/pl/abandoninstall?source=lightinstaller&page=tsPlugin Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-11-16 16:32 - 2013-11-16 16:32 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\PC\Desktop\Obraz (3).jpg:3or4kl4x13tuuug3Byamue2s4b AlternateDataStreams: C:\Users\PC\Desktop\Obraz (3).jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} AlternateDataStreams: C:\Users\PC\Desktop\Obraz (5).jpg:3or4kl4x13tuuug3Byamue2s4b AlternateDataStreams: C:\Users\PC\Desktop\Obraz (5).jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} AlternateDataStreams: C:\Users\PC\Desktop\Obraz (6).jpg:3or4kl4x13tuuug3Byamue2s4b AlternateDataStreams: C:\Users\PC\Desktop\Obraz (6).jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} AlternateDataStreams: C:\Users\PC\Desktop\Obraz (7).jpg:3or4kl4x13tuuug3Byamue2s4b AlternateDataStreams: C:\Users\PC\Desktop\Obraz (7).jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/04/2013 03:12:48 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/04/2013 00:58:40 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2013 08:05:43 PM) (Source: SideBySide) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "assemblyIdentity1". Błąd w pliku manifestu lub w pliku zasad "assemblyIdentity2" w wierszu assemblyIdentity3. Wartość "*" atrybutu "language" elementu "assemblyIdentity" jest nieprawidłowa. Error: (12/03/2013 08:04:04 PM) (Source: SideBySide) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/03/2013 03:47:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2013 03:39:52 PM) (Source: SideBySide) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "assemblyIdentity1". Błąd w pliku manifestu lub w pliku zasad "assemblyIdentity2" w wierszu assemblyIdentity3. Wartość "*" atrybutu "language" elementu "assemblyIdentity" jest nieprawidłowa. Error: (12/02/2013 03:38:17 PM) (Source: SideBySide) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/02/2013 02:44:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/01/2013 09:54:59 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: nfsw.exe, wersja: 1.0.0.1594, sygnatura czasowa: 0x520002cf Nazwa modułu powodującego błąd: nfsw.exe, wersja: 1.0.0.1594, sygnatura czasowa: 0x520002cf Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x003c162d Identyfikator procesu powodującego błąd: 0x6f0 Godzina uruchomienia aplikacji powodującej błąd: 0xnfsw.exe0 Ścieżka aplikacji powodującej błąd: nfsw.exe1 Ścieżka modułu powodującego błąd: nfsw.exe2 Identyfikator raportu: nfsw.exe3 Error: (12/01/2013 05:00:24 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (12/04/2013 03:11:19 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (12/04/2013 00:57:09 AM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (12/03/2013 03:46:22 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (12/02/2013 02:42:48 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (12/01/2013 04:58:55 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (11/30/2013 05:17:13 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (11/30/2013 04:40:12 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi PirritUpdater z powodu następującego błędu: %%2 Error: (11/29/2013 09:46:27 PM) (Source: Service Control Manager) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (11/29/2013 09:43:22 PM) (Source: Service Control Manager) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (11/29/2013 09:39:23 PM) (Source: Service Control Manager) (User: ) Description: Usługa PirritUpdater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Microsoft Office Sessions: ========================= Error: (12/04/2013 03:12:48 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/04/2013 00:58:40 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/03/2013 08:05:43 PM) (Source: SideBySide)(User: ) Description: assemblyIdentitylanguage*c:\program files (x86)\WapSter\wapster aqq\System\DelZip179.dllc:\program files (x86)\WapSter\wapster aqq\System\DelZip179.dll8 Error: (12/03/2013 08:04:04 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe Error: (12/03/2013 03:47:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/02/2013 03:39:52 PM) (Source: SideBySide)(User: ) Description: assemblyIdentitylanguage*c:\program files (x86)\WapSter\wapster aqq\System\DelZip179.dllc:\program files (x86)\WapSter\wapster aqq\System\DelZip179.dll8 Error: (12/02/2013 03:38:17 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe Error: (12/02/2013 02:44:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/01/2013 09:54:59 PM) (Source: Application Error)(User: ) Description: nfsw.exe1.0.0.1594520002cfnfsw.exe1.0.0.1594520002cfc0000005003c162d6f001ceeed403c54702C:\ProgramData\Electronic Arts\Need For Speed World\Data\nfsw.exeC:\ProgramData\Electronic Arts\Need For Speed World\Data\nfsw.exed6b6e611-5aca-11e3-80bd-001fd08072af Error: (12/01/2013 05:00:24 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2013-10-30 15:07:09.822 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-10-30 15:07:09.744 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 46% Total physical RAM: 4094.49 MB Available physical RAM: 2174.83 MB Total Pagefile: 8187.16 MB Available Pagefile: 6135.09 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:135.13 GB) (Free:38.49 GB) NTFS Drive d: (Dysk lokalny) (Fixed) (Total:97.66 GB) (Free:79.63 GB) NTFS Drive e: (NFSMW) (CDROM) (Total:2.13 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: B3AEB3AE) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=135 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=98 GB) - (Type=07 NTFS) ==================== End Of Log ============================