Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01 Ran by Basia i Tomek at 2014-02-15 20:28:16 Running from C:\Users\tomas_000\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Internet Security (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Internet Security (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Internet Security (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== µTorrent (HKCU Version: 3.3.2.30446 - BitTorrent Inc.) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Polish (x32 Version: 11.0.06 - Adobe Systems Incorporated) Aktualizacje NVIDIA 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden avast! Internet Security (x32 Version: 9.0.2013 - Avast Software) Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (Version: - Microsoft) Dev-C++ (x32 Version: 5.5.1 - ) Dolby Home Theater v4 (x32 Version: 7.2.8000.17 - Dolby Laboratories Inc) Energy Management (x32 Version: 8.0.2.11 - Lenovo) Energy Management (x32 Version: 8.0.2.11 - Lenovo) Hidden Europa Universalis IV (x32 Version: - Paradox Interactive) Football Manager 2014 (x32 Version: 1 - ) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team) Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.) Google Talk Plugin (x32 Version: 5.1.4.17398 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Google+ Auto Backup (HKCU Version: 1.0.22.105 - Google, Inc.) Google+ Auto Backup (x32 Version: 1.0.21.81 - Google) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 9.17.10.2932 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden KMSpico v9.1.3 (Version: 9.1.3 - ) Lenovo App Shop (x32 Version: 45246 - Intel) Lenovo EasyCamera (x32 Version: 6.2.9200.10192 - Realtek Semiconductor Corp.) Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (x32 Version: 8.0.0.1219 - CyberLink Corp.) Lenovo pointing device (Version: 11.4.21.1 - ELAN Microelectronic Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.5630.52 - CyberLink Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.5630.52 - CyberLink Corp.) Hidden Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden Malwarebytes Anti-Malware wersja 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft Access MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft DCF MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Excel MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Groove MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Lync MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft OneNote MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Outlook MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Publisher MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Word MUI (Polish) 2013 (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Mozilla Firefox 27.0.1 (x86 pl) (x32 Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden NVIDIA GeForce Experience 1.8.2 (Version: 1.8.2 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA Optimus Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden NVIDIA Sterownik 3D Vision 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA Sterownik graficzny 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.20 (Version: 1.2.20 - NVIDIA Corporation) Onekey Theater (x32 Version: 3.0.1.0 - Lenovo) Panel sterowania NVIDIA 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden Picasa 3 (x32 Version: 3.9 - Google, Inc.) Power2Go (x32 Version: 5.6.0.9109 - CyberLink Corp.) Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.220 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (x32 Version: 10.0 - Qualcomm Atheros) Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6798 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39029 - Realtek Semiconductor Corp.) SDFormatter (x32 Version: 4.0.0 - SD Association) Shared C Run-time for x64 (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden SugarSync Manager (x32 Version: 1.9.61.90905 - SugarSync, Inc.) System Requirements Lab for Intel (x32 Version: 4.5.22.0 - Husdawg, LLC) TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer) The Testament of Sherlock Holmes (x32 Version: 1.00.2 - Focus Home Interactive) Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH) Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (Version: - Microsoft) Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837637) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837638) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837655) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2850066) 64-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2850063) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2850061) 64-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2767850) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2817495) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2013 (KB2837647) 64-Bit Edition (Version: - Microsoft) UserGuide (x32 Version: 1.0.0.15 - Lenovo) UserGuide (x32 Version: 1.0.0.15 - Lenovo) Hidden Windows Driver Package - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1 - Lenovo) Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733 - Lenovo) WinRAR 5.01 (64-bitowy) (Version: 5.01.0 - win.rar GmbH) ==================== Restore Points ========================= 30-01-2014 15:14:17 Removed Nitro Pro 8 31-01-2014 15:17:30 avast! antivirus system restore point 05-02-2014 09:00:05 Windows Update 13-02-2014 10:38:22 Windows Update 15-02-2014 17:57:43 Installed SpyHunter ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {1D7D6319-1889-4706-8182-051EC2DEA71D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-14] (Google Inc.) Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2A6005AF-AF0E-4531-9495-60CDCDAACBE7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-14] (Google Inc.) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {2DA93BD9-AE4C-4457-8F58-DED36794ED0B} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {71F95463-A398-45A3-A9CF-78BCEF42645D} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-08] (CyberLink Corp.) Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {855E5585-F34A-4F2C-B992-BA71E844C31B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {974D215E-E057-4D2D-9D99-257534967132} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2013-12-11] () Task: {9CD9DD5C-FA00-45A0-BBCD-A0124EF3149B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {A0F79637-15D2-4024-96EA-0DEAA77FA0FD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3765252679-2603235602-2670530523-1002UA => C:\Users\tomas_000\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-14] (Google Inc.) Task: {BE9D749F-4F21-477C-A266-DEDB333BCFF4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-02-13] (Microsoft Corporation) Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D2D34FDE-DB7A-4A8A-B3F8-36709C56407C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3765252679-2603235602-2670530523-1002Core => C:\Users\tomas_000\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-14] (Google Inc.) Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {EED2BAEC-32BC-4895-9055-132B9EEE63AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-31] (AVAST Software) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3765252679-2603235602-2670530523-1002Core.job => C:\Users\tomas_000\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3765252679-2603235602-2670530523-1002UA.job => C:\Users\tomas_000\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-25 08:09 - 2013-01-25 08:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-01-25 08:05 - 2013-01-25 08:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-01-25 08:12 - 2013-01-25 08:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2013-12-21 00:02 - 2013-12-21 00:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-02-15 18:13 - 2014-02-15 16:41 - 02180608 _____ () C:\Program Files\AVAST Software\Avast\defs\14021501\algo.dll 2014-01-09 08:59 - 2013-12-19 21:33 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2014-02-04 10:41 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll 2014-02-04 10:41 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll 2014-02-04 10:41 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll 2014-02-04 10:41 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll 2014-02-04 10:41 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll 2014-01-08 13:33 - 2014-01-08 13:33 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00020480 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll 2013-10-06 02:18 - 2013-07-18 23:30 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll 2013-10-06 02:18 - 2013-07-18 23:31 - 00064512 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll 2013-10-06 01:48 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Windows:nlsPreferences AlternateDataStreams: C:\Users\tomas_000\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/15/2014 08:04:56 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 11.0.0.0, sygnatura czasowa: 0x52a8d15d Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007ffd90a40565 Identyfikator procesu powodującego błąd: 0x870 Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (02/15/2014 07:48:05 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 11.0.0.0, sygnatura czasowa: 0x52a8d15d Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007ff8d7500565 Identyfikator procesu powodującego błąd: 0xa04 Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (02/15/2014 07:23:49 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 11.0.0.0, sygnatura czasowa: 0x52a8d15d Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007ffc8bf10565 Identyfikator procesu powodującego błąd: 0xa24 Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (02/15/2014 06:49:54 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 11.0.0.0, sygnatura czasowa: 0x52a8d15d Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007ff92e930565 Identyfikator procesu powodującego błąd: 0x9c4 Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (02/15/2014 06:48:10 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/15/2014 06:30:22 PM) (Source: Application Hang) (User: ) Description: Program uTorrent.exe w wersji 3.3.2.30446 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1a1c Godzina rozpoczęcia: 01cf2a73751f0d2d Godzina zakończenia: 0 Ścieżka aplikacji: C:\Users\tomas_000\AppData\Roaming\uTorrent\uTorrent.exe Identyfikator raportu: d7199702-9666-11e3-be8d-201a06297e49 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (02/15/2014 06:08:33 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/13/2014 04:35:20 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/13/2014 03:52:23 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 11.0.0.0, sygnatura czasowa: 0x52a8d15d Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007ff918c31d65 Identyfikator procesu powodującego błąd: 0x53c Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (02/13/2014 03:49:32 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] System errors: ============= Error: (02/15/2014 08:05:13 PM) (Source: Service Control Manager) (User: ) Description: Usługa Service KMSELDI niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/15/2014 07:48:10 PM) (Source: Service Control Manager) (User: ) Description: Usługa Service KMSELDI niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/15/2014 07:23:50 PM) (Source: Service Control Manager) (User: ) Description: Usługa Service KMSELDI niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/15/2014 07:23:34 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:34 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:34 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:34 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:33 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:33 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Error: (02/15/2014 07:23:33 PM) (Source: DCOM) (User: IDEAPAD) Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}IdeaPadBasia i TomekS-1-5-21-3765252679-2603235602-2670530523-1002LocalHost (Using LRPC)UnavailableUnavailable Microsoft Office Sessions: ========================= Error: (02/15/2014 08:04:56 PM) (Source: Application Error)(User: ) Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ffd90a4056587001cf2a80b63628e3C:\Program Files\KMSpico\Service_KMS.exeunknown0eaa1f58-9674-11e3-be91-201a06297e49 Error: (02/15/2014 07:48:05 PM) (Source: Application Error)(User: ) Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ff8d7500565a0401cf2a7e6091b0d1C:\Program Files\KMSpico\Service_KMS.exeunknownb3b4548c-9671-11e3-be90-201a06297e49 Error: (02/15/2014 07:23:49 PM) (Source: Application Error)(User: ) Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ffc8bf10565a2401cf2a7af889561aC:\Program Files\KMSpico\Service_KMS.exeunknown50094148-966e-11e3-be8f-201a06297e49 Error: (02/15/2014 06:49:54 PM) (Source: Application Error)(User: ) Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ff92e9305659c401cf2a7642b23bf1C:\Program Files\KMSpico\Service_KMS.exeunknown9309f6c5-9669-11e3-be8e-201a06297e49 Error: (02/15/2014 06:48:10 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/15/2014 06:30:22 PM) (Source: Application Hang)(User: ) Description: uTorrent.exe3.3.2.304461a1c01cf2a73751f0d2d0C:\Users\tomas_000\AppData\Roaming\uTorrent\uTorrent.exed7199702-9666-11e3-be8d-201a06297e49 Error: (02/15/2014 06:08:33 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/13/2014 04:35:20 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (02/13/2014 03:52:23 PM) (Source: Application Error)(User: ) Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ff918c31d6553c01cf28cb23d93167C:\Program Files\KMSpico\Service_KMS.exeunknown7191fe94-94be-11e3-be8c-201a06297e49 Error: (02/13/2014 03:49:32 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] CodeIntegrity Errors: =================================== Date: 2014-02-04 20:16:28.862 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:16:06.220 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:14:04.907 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:13:49.649 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:13:44.421 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:13:11.075 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:13:09.878 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:13:08.642 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:07:08.509 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-02-04 20:07:03.867 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 47% Total physical RAM: 3951.52 MB Available physical RAM: 2073.09 MB Total Pagefile: 4847.52 MB Available Pagefile: 2781.69 MB Total Virtual: 131072 MB Available Virtual: 131071.78 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:890.89 GB) (Free:816.74 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.81 GB) NTFS Drive g: () (Removable) (Total:1.86 GB) (Free:1.86 GB) FAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: AF3EDCE5) Partition: GPT Partition Type ======================================================== Disk: 1 (Size: 2 GB) (Disk ID: 00000000) Partition 1: (Active) - (Size=2 GB) - (Type=06) ==================== End Of Log ============================