Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-11-2014 01 Ran by BB1 at 2014-11-08 21:19:18 Running from C:\FRST Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 4.65 (HKLM\...\7-Zip) (Version: - ) Abdio Free MOV Player (Free) (HKLM\...\Abdio Free MOV Player (Free)) (Version: Abdio Free MOV Player - Abdio Free MOV Player) Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) ALLPlayer V3.X (HKLM\...\ALLPlayer_is1) (Version: - ALLPlayer Sp. z o.o.) Any Video Converter 3.1.8 (HKLM\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) Archiwizator WinRAR (HKLM\...\WinRAR archiver) (Version: - ) AVG Security Toolbar (HKLM\...\AVG Secure Search) (Version: 13.0.0.7 - AVG Technologies) BroadCam Video Streaming Server (HKLM\...\BroadCam) (Version: - NCH Software) BufferChm (Version: 100.0.170.000 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.7.2356 - CDBurnerXP) CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden D1500 (Version: 100.0.206.000 - Nazwa firmy) Hidden D1500_Help (Version: 100.0.206.000 - Hewlett-Packard) Hidden Debut Video Capture Software (HKLM\...\Debut) (Version: - NCH Software) Detektor Winampa (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) DeviceDiscovery (Version: 100.0.190.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden DJ_SF_03_D1500_ProductContext (Version: 100.0.215.000 - Hewlett-Packard) Hidden DJ_SF_03_D1500_Software (Version: 100.0.206.000 - Hewlett-Packard) Hidden DJ_SF_03_D1500_Software_Min (Version: 100.0.239.000 - Hewlett-Packard) Hidden DRUKI Gofin 2.2.19.0 (HKLM\...\{852B928B-042E-4555-B59B-3473734906FF}) (Version: 2.2.19.0 - Wydawnictwo Podatkowe GOFIN sp. z o.o.) Dynamic Energy Saver 1.0 B8.0128.1 (HKLM\...\{5869CE1E-BC0B-4648-B1AE-6EF4A985590C}) (Version: 1.00.0000 - GIGABYTE) eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden Exact Audio Copy 1.0beta3 (HKLM\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff) Foxit Reader 5.1 (HKLM\...\Foxit Reader_is1) (Version: 5.1.0.1021 - Foxit Corporation) FreeCommander 2009.02 (HKLM\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski) GimPhoto 1.4.3 (HKLM\...\GimPhoto) (Version: 1.4.3 - Ek kian) Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.) Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden GPBaseService (Version: 100.0.187.000 - Hewlett-Packard) Hidden GPL Ghostscript 8.70 (HKLM\...\GPL Ghostscript 8.70) (Version: - ) HP Customer Participation Program 10.0 (HKLM\...\HPExtendedCapabilities) (Version: 10.0 - HP) HP Deskjet 1510 series — podstawowe oprogramowanie urządzenia (HKLM\...\{8E37497B-FD89-409A-90E1-29B7349FD465}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.) HP Deskjet 1510 series Pomoc (HKLM\...\{065AAC3B-F0A7-4D13-A40B-3133D319E4EB}) (Version: 30.0.0 - Hewlett Packard) HP Deskjet D1500 Printer Driver Software 10.0 Rel .3 (HKLM\...\{0CE5F45E-F6CC-4638-B0DD-BB7F6EF56713}) (Version: 10.0 - HP) HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Imaging Device Functions 10.0 (HKLM\...\HP Imaging Device Functions) (Version: 10.0 - HP) HP Photosmart Essential 2.5 (HKLM\...\HP Photosmart Essential) (Version: 2.5 - HP) HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 3.5 - HP) HP Solution Center 10.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 10.0 - HP) HP Update (HKLM\...\{11B83AD3-7A46-4C2E-A568-9505981D4C6F}) (Version: 4.000.007.003 - Hewlett-Packard) HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden HPSSupply (Version: 100.0.170.000 - Hewlett-Packard) Hidden Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - ) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.28 - Irfan Skiljan) Malwarebytes Anti-Malware wersja 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) MarketResearch (Version: 100.0.170.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Mozilla Firefox 33.0.3 (x86 pl) (HKLM\...\Mozilla Firefox 33.0.3 (x86 pl)) (Version: 33.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla) Mozilla Thunderbird (2.0.0.22) (HKLM\...\Mozilla Thunderbird (2.0.0.22)) (Version: 2.0.0.22 (pl) - Mozilla) MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger) Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - plk) (Version: - Microsoft Corporation) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30320 - Microsoft Corporation) Prism Video File Converter (HKLM\...\Prism) (Version: - NCH Software) PSSWCORE (Version: 2.02.0000 - Hewlett-Packard) Hidden Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5567 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13064_2 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.6.0.13064_2 - Samsung Electronics Co., Ltd.) Hidden Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 10.0 - HP) Skype web features (HKLM\...\{8B53527D-BBB2-43A5-91D7-9ED772FD737F}) (Version: 1.0.3502 - Skype Technologies S.A.) SlowView (HKLM\...\SlowView) (Version: 1.0 RC2 - Nikolaus Brennig) SmartWebPrintingOC (Version: 100.0.189.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 100.0.175.000 - Hewlett-Packard) Hidden Status (Version: 100.0.175.000 - Hewlett-Packard) Hidden SWF Opener (HKLM\...\{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1) (Version: 1.3 - UnH Solutions) Switch Sound File Converter (HKLM\...\Switch) (Version: - NCH Swift Sound) Toolbox (Version: 100.0.170.000 - Hewlett-Packard) Hidden TrayApp (Version: 100.0.170.000 - Hewlett-Packard) Hidden Undelete 360 (HKLM\...\Undelete 360_is1) (Version: - File Recovery Ltd.) UnloadSupport (Version: 10.0.0 - Hewlett-Packard) Hidden Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) VideoPad Video Editor (HKLM\...\VideoPad) (Version: - NCH Software) VideoToolkit01 (Version: 100.0.128.000 - Hewlett-Packard) Hidden Visualizer Photo Resize (HKLM\...\{D3621EAA-00D6-4791-97BF-7E8EE3437BF2}) (Version: 6.00.0000 - Visualizer Image Group) WebReg (Version: 100.0.170.000 - Hewlett-Packard) Hidden Winamp (HKLM\...\Winamp) (Version: 5.581 - Nullsoft, Inc) Winamp Toolbar (HKLM\...\Winamp Toolbar) (Version: - ) <==== ATTENTION Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.3) (Version: 1.3.3 - Xvid Team) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1579964985-3426180906-2269987189-1000_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.) ==================== Restore Points ========================= 08-11-2014 12:23:22 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {14D2B892-88B0-4AB2-9548-6FFE26E4EB81} - System32\Tasks\{DC3DBF1C-8AE9-47B3-BBF2-41161E14A24D} => C:\Program Files\Skype\Phone\Skype.exe Task: {1850FA01-352E-42C6-A0A9-77E1B41586F0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd) Task: {1BF5E031-4433-4672-B35F-17FA0E9D9915} - \1c4a65ae-d51e-4630-92af-803b13515a45-1 No Task File <==== ATTENTION Task: {27A30AB0-53FE-452B-9CB0-E8018E93B82D} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION Task: {33E935B9-5F64-4025-A5D1-A6D72F4E949A} - System32\Tasks\HP AR Program Upload - 6c01b4dbb3c54870bc8241eb44c0e593874262d891614b11aeefd241ed06ea66 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) Task: {3E770B73-6CC7-4549-ADD2-3D8BD205F401} - \1c4a65ae-d51e-4630-92af-803b13515a45-4 No Task File <==== ATTENTION Task: {44087664-0982-4F90-9F6A-9537AC7E2209} - System32\Tasks\HP AR Program Upload - afdb703f9e664cdfaf32ea61d8826a18b84af12e1e964d5a8dcf280fafeb1ae5 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) Task: {502924F9-EA64-4348-BA63-781CEEBF3E0A} - \1c4a65ae-d51e-4630-92af-803b13515a45-2 No Task File <==== ATTENTION Task: {53D6D145-4E6B-49F5-8398-C1630C6E1666} - System32\Tasks\NCH Software\prismShakeIcon => C:\Program Files\NCH Software\Prism\Prism.exe [2010-12-04] (NCH Software) Task: {599E80FE-81C8-4EC2-8EB3-910FB6C28710} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.) Task: {5E697E3D-4C35-473E-9671-BC2245935324} - System32\Tasks\NCH Software\debutShakeIcon => C:\Program Files\NCH Software\Debut\Debut.exe [2010-12-04] (NCH Software) Task: {5F21142F-7ECC-42FB-82E0-8E894346CCFC} - System32\Tasks\Registration Trigger IBM Lotus Symphony Task => C:\Program Files\IBM\Lotus\Symphony\framework\rcp\rcplauncher.exe Task: {6AF669B9-0E78-4F73-AE1B-D6F028EE8EDB} - \1c4a65ae-d51e-4630-92af-803b13515a45-5_user No Task File <==== ATTENTION Task: {6BAD32B9-A9F9-4187-815A-5791F926BCBA} - \1c4a65ae-d51e-4630-92af-803b13515a45-7 No Task File <==== ATTENTION Task: {76767E62-B873-43F1-90AC-093B5E13C700} - System32\Tasks\HP AR Program Upload - 0386be4bc30d4ed6bfa2c6d74cba393e5af571d68b984eb19330ac6fc1e0eaff => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) Task: {89A25111-7886-4259-BE6F-8D3E7405B218} - \1c4a65ae-d51e-4630-92af-803b13515a45-6 No Task File <==== ATTENTION Task: {A74D61EC-82DB-400F-9313-C77F5125C511} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION Task: {C88874ED-8260-439D-9230-35E09DA8D213} - System32\Tasks\GoogleUpdateTaskMachineCore1cef2ccdc5a3f47 => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.) Task: {C8BC0BCE-5515-4555-9365-C8B7C25E02DC} - \1c4a65ae-d51e-4630-92af-803b13515a45-11 No Task File <==== ATTENTION Task: {DB46D89F-7B06-4B83-9008-ED9353094FF2} - System32\Tasks\HP AR Program Upload - 67dd97dc7e6a48968e1c9264831c64d31d378b6701ca44509bb746b2d676969b => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) Task: {DD43D1F1-359D-4BC8-86B4-0D95200EA446} - System32\Tasks\GoogleUpdateTaskMachineCore1cc05a1d2dd65c => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.) Task: {E0751A33-DC5F-47D7-A8A5-39C2836ADB91} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe [2010-12-04] (NCH Software) Task: {EF64BD14-0E39-4296-A319-1029FE60C287} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.) Task: {FBE663AB-601A-478E-8E5F-88108CBCA15C} - \1c4a65ae-d51e-4630-92af-803b13515a45-5 No Task File <==== ATTENTION Task: {FD92EB3B-A80E-44A9-A661-3CBAB61F957C} - System32\Tasks\HP AR Program Upload - 4478f550fcea46028207227c88127698732396f1d619451b9ad83d2f44c54b79 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) Task: {FE8A9CCA-94FE-49C1-AE43-B50EBC14890A} - System32\Tasks\HP AR Program Upload - 8a56e9f4cfbd4d368c600aed2f6ca86479402a9308f94f8884ce912fbf68d003 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: ) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cc05a1d2dd65c.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef2ccdc5a3f47.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\User_Feed_Synchronization-{B7FE35DB-5C20-482A-B782-40CCE7940F92}.job => C:\Windows\system32\msfeedssync.exe ==================== Loaded Modules (whitelisted) ============= 2010-09-24 21:53 - 2010-03-04 22:38 - 00071096 _____ () C:\Program Files\CDBurnerXP\NMSAccessU.exe 2014-11-07 12:31 - 2014-11-07 12:31 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2014-03-29 18:16 - 2014-03-29 18:16 - 01020928 _____ () C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components\lpxpcom.dll 2014-11-06 23:44 - 2014-11-06 23:44 - 16832176 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) HKU\S-1-5-21-1579964985-3426180906-2269987189-1000\Software\Classes\.exe: exefile => <===== ATTENTION! ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1579964985-3426180906-2269987189-500 - Administrator - Disabled) BB1 (S-1-5-21-1579964985-3426180906-2269987189-1000 - Administrator - Enabled) => C:\Users\BB1 Gość (S-1-5-21-1579964985-3426180906-2269987189-501 - Limited - Enabled) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/08/2014 08:54:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.0.3.5422, sygnatura czasowa 0x545b5277, moduł powodujący błąd mozalloc.dll, wersja 33.0.3.5422, sygnatura czasowa 0x545b2aeb, kod wyjątku 0x80000003, przesunięcie błędu 0x00001425, identyfikator procesu 0x25c, godzina rozpoczęcia aplikacji 0xplugin-container.exe0. Error: (11/08/2014 08:34:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd KiesPDLR.exe, wersja 1.0.0.1, sygnatura czasowa 0x53c7142c, moduł powodujący błąd msxml3.dll, wersja 8.100.4002.0, sygnatura czasowa 0x4c1256c5, kod wyjątku 0xc0000005, przesunięcie błędu 0x000062e2, identyfikator procesu 0xd40, godzina rozpoczęcia aplikacji 0xKiesPDLR.exe0. Error: (11/08/2014 01:12:29 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd KiesPDLR.exe, wersja 1.0.0.1, sygnatura czasowa 0x53c7142c, moduł powodujący błąd msxml3.dll, wersja 8.100.4002.0, sygnatura czasowa 0x4c1256c5, kod wyjątku 0xc0000005, przesunięcie błędu 0x000062e2, identyfikator procesu 0x840, godzina rozpoczęcia aplikacji 0xKiesPDLR.exe0. Error: (11/07/2014 01:51:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd KiesPDLR.exe, wersja 1.0.0.1, sygnatura czasowa 0x53c7142c, moduł powodujący błąd msxml3.dll, wersja 8.100.4002.0, sygnatura czasowa 0x4c1256c5, kod wyjątku 0xc0000005, przesunięcie błędu 0x000062e2, identyfikator procesu 0x87c, godzina rozpoczęcia aplikacji 0xKiesPDLR.exe0. Error: (11/07/2014 01:30:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (11/07/2014 01:30:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (11/07/2014 01:29:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (11/07/2014 01:29:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (11/07/2014 01:29:19 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas szukania interfejsu IVssWriterCallback. hr = 0x80070005. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {15d080ad-00c3-4fcc-850c-464c7e4a9e08} Error: (11/07/2014 01:07:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. System errors: ============= Error: (11/08/2014 08:32:35 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa HP CUE DeviceDiscovery Error: (11/08/2014 08:32:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Update EnterDigital%%3 Error: (11/08/2014 08:30:43 PM) (Source: HTTP) (EventID: 15016) (User: ) Description: \Device\Http\ReqQueueKerberos Error: (11/08/2014 01:13:16 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa HP CUE DeviceDiscovery Error: (11/08/2014 01:13:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Update Yawtix%%2 Error: (11/08/2014 01:13:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Update EnterDigital%%3 Error: (11/08/2014 01:11:44 PM) (Source: HTTP) (EventID: 15016) (User: ) Description: \Device\Http\ReqQueueKerberos Error: (11/07/2014 01:52:07 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa HP CUE DeviceDiscovery Error: (11/07/2014 01:51:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Update Yawtix%%2 Error: (11/07/2014 01:51:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Update EnterDigital%%3 Microsoft Office Sessions: ========================= Error: (07/30/2014 09:57:57 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 22347 seconds with 360 seconds of active time. This session ended with a crash. Error: (05/21/2014 00:26:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 40535 seconds with 10020 seconds of active time. This session ended with a crash. Error: (04/14/2014 00:44:02 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6034 seconds with 540 seconds of active time. This session ended with a crash. Error: (03/20/2014 02:01:24 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6690.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 23713 seconds with 1980 seconds of active time. This session ended with a crash. Error: (03/14/2014 02:27:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6690.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 49477 seconds with 1980 seconds of active time. This session ended with a crash. Error: (02/27/2014 03:04:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6690.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 17338 seconds with 660 seconds of active time. This session ended with a crash. Error: (01/29/2013 00:37:46 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 42125 seconds with 1380 seconds of active time. This session ended with a crash. Error: (11/29/2012 02:24:07 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 5801 seconds with 1020 seconds of active time. This session ended with a crash. Error: (06/27/2012 09:07:18 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 40724 seconds with 3420 seconds of active time. This session ended with a crash. Error: (06/12/2012 11:31:22 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 9940 seconds with 120 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-11-08 21:19:13.301 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:12.961 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:12.745 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:12.539 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:12.179 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:11.991 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:11.788 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:19:11.588 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:18:54.973 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2014-11-08 21:18:54.784 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Genuine Intel(R) CPU 2160 @ 1.80GHz Percentage of memory in use: 71% Total physical RAM: 2036.77 MB Available physical RAM: 577.38 MB Total Pagefile: 4322.73 MB Available Pagefile: 2617.08 MB Total Virtual: 2047.88 MB Available Virtual: 1890.18 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:45.23 GB) (Free:2.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Dane) (Fixed) (Total:14.65 GB) (Free:2.52 GB) NTFS Drive e: () (Fixed) (Total:14.65 GB) (Free:0.78 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 74.5 GB) (Disk ID: 9C879C87) Partition 1: (Active) - (Size=45.2 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS) Could not read MBR for disk 1. ==================== End Of Log ============================