Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2014 Ran by amx at 2014-11-19 01:51:08 Running from C:\Documents and Settings\amx.X-628658B1E9874\Pulpit Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.1.8210 - Adobe Systems Inc.) Adobe Audition 1.0 (HKLM\...\{81E76DE9-BBCB-449C-91BB-6E4E5436D496}) (Version: 1.0 - Adobe Systems) Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.8.800.94 - Adobe Systems Incorporated) Adobe Flash Player 9 ActiveX (HKLM\...\{BB65C393-C76E-4F06-9B0C-2124AA8AF97B}) (Version: 9.0.16.0 - Adobe Systems, Inc.) Adobe Photoshop 7.0 CE (HKLM\...\Adobe Photoshop 7.0 CE) (Version: 7.0 CE - Adobe Systems, Inc.) Adobe Reader 9.1 - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.) Airlines 2 (HKLM\...\InstallShield_{FEF2F735-63EC-4BB7-93E8-8EBF9174E769}) (Version: 1.00.0000 - Play Sp. z o.o.) Airlines 2 (Version: 1.00.0000 - Play Sp. z o.o.) Hidden Apple Software Update (HKLM\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.) Archiwizator WinRAR (HKLM\...\WinRAR archiver) (Version: - ) ASIO4ALL (HKLM\...\ASIO4ALL) (Version: - ) ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.203-051211a-035588C - ) AutoCAD 2008 - Polski (HKLM\...\AutoCAD 2008 - Polski) (Version: 17.1.51.0 - Autodesk) AutoCAD 2008 - Polski (Version: 17.1.51.0 - Autodesk) Hidden Autodesk DWF Viewer 7 (HKLM\...\{9A346205-EA92-4406-B1AB-50379DA3F057}) (Version: 7.2.0 - Autodesk, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 3.07 - Piriform) Chess 3D 1.01 (HKLM\...\Criminal_Tango_3.01) (Version: - ) Codec 8.3d (HKLM\...\Codec_is1) (Version: - ) Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DC-Bass Source 1.3.0 (HKLM\...\DC-Bass Source) (Version: - ) Deluxe Ski Jump 3 v1.5.0 (HKLM\...\Deluxe Ski Jump 3_is1) (Version: 1.5.0 - Mediamond Tmi) Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM\...\Dev-C++) (Version: - ) Diagram Designer (HKLM\...\Diagram Designer) (Version: - ) DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC) FCleaner 1.1.7.420 (HKLM\...\FCleaner_is1) (Version: - FTweak, Inc.) FL Studio 8 (HKLM\...\FL Studio 8) (Version: - Image-Line bvba) FreeMind (HKLM\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 0.9.0 - ) Gadu-Gadu 7.7 (HKLM\...\Gadu-Gadu) (Version: - ) Garmin MapSource (HKLM\...\{38B9A4E1-4482-44D9-AC14-64F70938CCB5}) (Version: 6.14.1.0 - Garmin Ltd or its subsidiaries) Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) Heroes of Might and Magic III - Złota Edycja (HKLM\...\{8B743AA0-53B2-11D2-808A-00600895FB43}) (Version: 1.0 - ) HijackThis 2.0.2 (HKLM\...\HijackThis) (Version: 2.0.2 - TrendMicro) hp psc 1200 series (HKLM\...\hp psc 1200 series_Driver) (Version: - ) IL Download Manager (HKLM\...\IL Download Manager) (Version: - Image-Line bvba) IrfanView (remove only) (HKLM\...\IrfanView) (Version: - ) Java 7 Update 9 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217009FF}) (Version: 7.0.90 - Oracle) Java(TM) 6 Update 20 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.) Lagarith Lossless Codec (1.3.27) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - ) LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - ) LibreOffice 4.1.4.2 (HKLM\...\{94E11973-ED58-47A0-907C-ABF6D95C5DD8}) (Version: 4.1.4.2 - The Document Foundation) Malwarebytes Anti-Malware wersja 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) MapSource - UMP-pcPL (HKLM\...\Mapa UMP-pcPL (prawie cała Polska)_is1) (Version: 25.07.2010 - ) Mathcad 14 (HKLM\...\{E666A69B-A76D-43D5-AF28-4B2150A6EDE2}) (Version: 14.0.3.0 - PTC) Mathcad 14 Help (HKLM\...\{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}) (Version: 14 - Mathsoft) Mathcad 14 Resource Center (HKLM\...\{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}) (Version: 14 - Mathsoft) Microsoft .NET Framework 2.0 — pakiet języka polskiego (HKLM\...\Microsoft .NET Framework 2.0 Language Pack - PLK) (Version: - Microsoft Corporation) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM\...\{90110415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM\...\{90850415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20125.0 - Microsoft Corporation) Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version: - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MOBILedit! Support Libraries (HKLM\...\{1A834332-A9EE-440C-9505-2D07F445F05A}) (Version: 4.0.0 - COMPELSON Labs) MOBILedit!4 ver. 4.2 (HKLM\...\{47DA7D2E-408C-4050-B75F-95F6D2E6A332}_is1) (Version: 4.2.2.727 - COMPELSON Labs) Mozilla Firefox 33.1 (x86 pl) (HKLM\...\Mozilla Firefox 33.1 (x86 pl)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 6.0 Parser (HKLM\...\{AEB9948B-4FF2-47C9-990E-47014492A0FE}) (Version: 6.00.3883.8 - Microsoft Corporation) N.I Pro-53 v3.0-OxYGeN (HKLM\...\N.I Pro-53 v3.0-OxYGeN) (Version: - ) Nawigator obrazów i fotografii HP 2.0 - All-in-One (Version: 1.10.0000 - Hewlett-Packard Company) Hidden Nawigator obrazów i fotografii HP 2.0 - All-in-One Sterowniki (Version: 1.10.0000 - Hewlett-Packard Company) Hidden Nawigator obrazów i fotografii HP 2.0 - hp psc 1200 series (HKLM\...\HP PSC 1200 Series) (Version: - ) NVIDIA PhysX (HKLM\...\{1C4551A6-4743-4093-91E4-1477CD655043}) (Version: 9.09.0203 - NVIDIA Corporation) Olympus Digital Wave Player (HKLM\...\{FB91E774-867B-4567-ACE7-8144EF036068}) (Version: - ) OpenOffice.ux.pl 3.2 (HKLM\...\{45F80C55-3EBB-41C6-8451-C0DAEF4FA9E0}) (Version: 3.2.39483 - OpenOffice.org) OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - ) Panel sterowania ATI (HKLM\...\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}) (Version: 6.14.10.5173 - ) PDF Architect (HKLM\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge) pdfforge Toolbar v1.0 (HKLM\...\{B8B0FC8B-E69B-4215-AF1A-4BDFF20D794B}) (Version: 1.00.0000 - GreenTree Applications, Inc.) <==== ATTENTION pdfsam (HKU\S-1-5-21-1547161642-117609710-725345543-1003\...\pdfsam) (Version: 2.2.1 - ) PoiZone (HKLM\...\PoiZone) (Version: - Image-Line bvba) PSP Audioware MasterQ DX VST v1.0 (HKLM\...\PSP Audioware MasterQ DX VST v1.0) (Version: - ) PSP_Audioware_Mastercomp_DX_RTAS_VST_v1.0-PLZ (HKLM\...\PSP_Audioware_Mastercomp_DX_RTAS_VST_v1.0-PLZ) (Version: 1.04 - PLZ!) QuickTime (HKLM\...\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}) (Version: 7.62.14.0 - Apple Inc.) Ralink Wireless LAN Card (HKLM\...\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}) (Version: 1.00.01 - RALINK) Real Alternative 1.9.0 (HKLM\...\RealAlt_is1) (Version: 1.9.0 - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - ) RTP for RM2K (Png, Wav, Midi, Fonts) (HKLM\...\RTP for RM2K (Png, Wav, Midi, Fonts)) (Version: - ) SimCity 4 Deluxe (HKLM\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version: - ) Sonic Foundry ACID 4.0 (HKLM\...\{2A38B5AA-EA84-4F87-9937-2FB23982243A}) (Version: 4.0.215 - Sonic Foundry) Sony Ericsson PC Companion 2.00.146 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.00.146 - Sony Ericsson) Sony USB Driver (HKLM\...\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}) (Version: - ) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 4.48.1000 - SUPERAntiSpyware.com) swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 8.3.0.0 - Synaptics) System Requirements Lab CYRI (HKLM\...\{679F739E-5C76-4A41-B562-F9392156B6DD}) (Version: 4.4.21.0 - Husdawg, LLC) Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH) Toxic Biohazard (HKLM\...\Toxic Biohazard) (Version: - Image-Line bvba) VBA (2627.01) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team) Waves 4.0 (HKLM\...\{4C4D25EB-6513-4702-8355-F4194DE2E1D9}) (Version: - ) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden Windows Driver Package - Agere (AgereSoftModem) Modem (06/29/2006 2.1.72) (HKLM\...\99E181BACEA7AD8AEDFB58F2BD9484BFE72A9CA7) (Version: 06/29/2006 2.1.72 - Agere) Windows Driver Package - ATI Technologies Inc System (12/20/2004 5.10.1000.5) (HKLM\...\97E13221C0A0E7CFE057E87EC6F14F6E684BD516) (Version: 12/20/2004 5.10.1000.5 - ATI Technologies Inc) Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray (HKLM\...\KB952011) (Version: 1.0 - Microsoft Corporation) Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) Xerte v2.17 (HKLM\...\Xerte_is1) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files\OpenOffice.ux.pl 3\Basis\program\shlxthdl\shlxthdl.dll (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{28B7AA99-C0F9-4C47-995E-8A8D729603A1}\localserver32 -> C:\Program Files\AutoCAD 2008\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{30A2652A-DDF7-45e7-ACA6-3EAB26FC8A4E}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files\OpenOffice.ux.pl 3\Basis\program\shlxthdl\shlxthdl.dll (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{41662FC2-0D57-4aff-AB27-AD2E12E7C273}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{448BB771-CFE2-47C4-BCDF-1FBF378E202C}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files\OpenOffice.ux.pl 3\Basis\program\shlxthdl\shlxthdl.dll (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{6AB55F46-2523-4701-A912-B226F46252BA}\localserver32 -> C:\Program Files\AutoCAD 2008\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{7AABBB95-79BE-4C0F-8024-EB6AF271231C}\localserver32 -> C:\Program Files\AutoCAD 2008\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{7B342DC4-139A-4a46-8A93-DB0827CCEE9C}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files\OpenOffice.ux.pl 3\Basis\program\shlxthdl\ooofiltproxy.dll (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{7FA8AE11-B3E3-4D88-AABF-255526CD1CE8}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{82154420-0FBF-11d4-8313-005004526AB4}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files\OpenOffice.ux.pl 3\Basis\program\shlxthdl\shlxthdl.dll (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{D0484DE6-AAEE-468a-991F-8D4B0737B57A}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{D2D59CD1-0A6A-4D36-AE20-47817077D57C}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2008\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{E5A0B632-DFBA-4549-9346-E414DA06E6F8}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{EE5D1EA4-D445-4289-B2FC-55FC93693917}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) CustomCLSID: HKU\S-1-5-21-1547161642-117609710-725345543-1003_Classes\CLSID\{F616B81F-7BB8-4F22-B8A5-47428D59F8AD}\localserver32 -> C:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe (OpenOffice.org) ==================== Restore Points ========================= 24-08-2014 00:58:12 Punkt kontrolny systemu 26-08-2014 05:28:13 Punkt kontrolny systemu 28-08-2014 13:33:59 Punkt kontrolny systemu 31-08-2014 08:25:56 Punkt kontrolny systemu 01-09-2014 11:07:40 Punkt kontrolny systemu 02-09-2014 14:52:42 Punkt kontrolny systemu 04-09-2014 03:12:53 Punkt kontrolny systemu 05-09-2014 12:58:38 Punkt kontrolny systemu 07-09-2014 10:30:25 Punkt kontrolny systemu 08-09-2014 10:41:35 Punkt kontrolny systemu 09-09-2014 12:09:31 Punkt kontrolny systemu 11-09-2014 10:34:50 Punkt kontrolny systemu 12-09-2014 22:23:13 Punkt kontrolny systemu 16-09-2014 22:24:27 Punkt kontrolny systemu 17-09-2014 22:42:56 Punkt kontrolny systemu 19-09-2014 10:55:43 Punkt kontrolny systemu 20-09-2014 23:35:30 Punkt kontrolny systemu 24-09-2014 11:17:40 Punkt kontrolny systemu 25-09-2014 16:04:26 Punkt kontrolny systemu 26-09-2014 19:09:59 Punkt kontrolny systemu 28-09-2014 23:32:39 Punkt kontrolny systemu 30-09-2014 10:34:35 Punkt kontrolny systemu 01-10-2014 23:35:43 Punkt kontrolny systemu 04-10-2014 09:46:39 Punkt kontrolny systemu 06-10-2014 20:33:38 Punkt kontrolny systemu 07-10-2014 22:56:37 Punkt kontrolny systemu 10-10-2014 11:23:43 Punkt kontrolny systemu 13-10-2014 15:21:26 Punkt kontrolny systemu 15-10-2014 18:57:02 Punkt kontrolny systemu 16-10-2014 19:22:08 Punkt kontrolny systemu 17-10-2014 20:42:54 Punkt kontrolny systemu 18-10-2014 23:50:45 Punkt kontrolny systemu 21-10-2014 19:40:59 Punkt kontrolny systemu 21-10-2014 21:53:44 Operacja przywracania 21-10-2014 22:02:29 Operacja przywracania 21-10-2014 22:06:09 Operacja przywracania 22-10-2014 22:07:15 Operacja przywracania 22-10-2014 22:33:43 avast! antivirus system restore point 28-10-2014 18:07:52 Punkt kontrolny systemu 30-10-2014 00:37:57 Installed Grand Theft Auto Vice City 30-10-2014 00:42:57 Installed Grand Theft Auto Vice City 30-10-2014 23:48:35 Removed Grand Theft Auto Vice City 01-11-2014 18:28:34 Punkt kontrolny systemu 02-11-2014 23:09:23 Punkt kontrolny systemu 04-11-2014 12:44:11 Punkt kontrolny systemu 05-11-2014 12:56:34 Punkt kontrolny systemu 06-11-2014 20:17:08 Punkt kontrolny systemu 10-11-2014 22:05:34 Punkt kontrolny systemu 12-11-2014 14:25:11 Punkt kontrolny systemu 15-11-2014 22:52:04 Punkt kontrolny systemu 17-11-2014 00:34:43 Punkt kontrolny systemu 18-11-2014 12:45:57 Punkt kontrolny systemu ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2001-10-26 14:45 - 2013-03-30 01:37 - 00000054 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1239879294.job => C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0013287c01750.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2009-02-27 18:04 - 2009-02-27 18:04 - 00311296 _____ () C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL 2014-10-30 01:48 - 2014-10-31 00:14 - 00036864 _____ () C:\Documents and Settings\amx.X-628658B1E9874\Ustawienia lokalne\temp\CmdLineExt02.dll 2014-10-30 01:32 - 2014-11-11 01:01 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:94A19129 AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:9AEE100C AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:9E00596C AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:94A19129 AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:9AEE100C AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:9E00596C ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Adobe Gamma Loader.lnk => C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup MSCONFIG\startupreg: FTweakFCleaner => C:\Program Files\FCleaner\FCleaner.exe MSCONFIG\startupreg: Gadu-Gadu => "C:\Program Files\Gadu-Gadu\gg.exe" /tray MSCONFIG\startupreg: Malwarebytes Anti-Malware (reboot) => "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript MSCONFIG\startupreg: MSMSGS => "C:\Program Files\Messenger\msmsgs.exe" /background MSCONFIG\startupreg: SearchSettings => C:\Program Files\pdfforge Toolbar\SearchSettings.exe MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ========================= Accounts: ========================== Administrator (S-1-5-21-1547161642-117609710-725345543-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrator.X-628658B1E9874 amx (S-1-5-21-1547161642-117609710-725345543-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\amx.X-628658B1E9874 Gość (S-1-5-21-1547161642-117609710-725345543-501 - Limited - Disabled) Pomocnik (S-1-5-21-1547161642-117609710-725345543-1000 - Limited - Disabled) SUPPORT_388945a0 (S-1-5-21-1547161642-117609710-725345543-1002 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= Name: Realtek RTL8139/810x Family Fast Ethernet NIC Description: Realtek RTL8139/810x Family Fast Ethernet NIC Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318} Manufacturer: Realtek Semiconductor Corp. Service: RTL8023xp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (11/15/2014 00:15:06 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 02:08:13 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 01:48:26 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 01:38:46 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 01:27:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 00:57:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/14/2014 00:57:39 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd xul.dll, wersja 33.1.0.5423, adres błędu 0x003a055e. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/13/2014 03:20:03 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/13/2014 02:35:53 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 33.1.0.5423, moduł powodujący błąd mozalloc.dll, wersja 33.1.0.5423, adres błędu 0x00001425. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (11/10/2014 11:44:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd hpoevm08.exe, wersja 4.2.0.21, moduł powodujący błąd ole32.dll, wersja 5.1.2600.2180, adres błędu 0x00017bed. Przetwarzanie zdarzenia określonego nośnika dla [hpoevm08.exe!ws!] System errors: ============= Error: (11/19/2014 01:29:56 AM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334} Error: (11/18/2014 09:29:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi avast! Antivirus z powodu następującego błędu: %%1260 Error: (11/18/2014 09:28:35 PM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi gusvc z argumentami „” w celu uruchomienia serwera: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8} Error: (11/18/2014 02:17:17 PM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi PDF Architect Service z argumentami „” w celu uruchomienia serwera: {B12468C9-5B13-40D9-B74B-1815B776F1FB} Error: (11/18/2014 01:04:17 PM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi PDF Architect Service z argumentami „” w celu uruchomienia serwera: {B12468C9-5B13-40D9-B74B-1815B776F1FB} Error: (11/18/2014 00:24:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi avast! Antivirus z powodu następującego błędu: %%1260 Error: (11/18/2014 00:40:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi avast! Antivirus z powodu następującego błędu: %%1260 Error: (11/18/2014 00:28:36 AM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi PDF Architect Service z argumentami „” w celu uruchomienia serwera: {B12468C9-5B13-40D9-B74B-1815B776F1FB} Error: (11/17/2014 09:13:54 PM) (Source: DCOM) (EventID: 10005) (User: X-628658B1E9874) Description: Model DCOM odebrał błąd „%%1058” podczas próby uruchomienia usługi PDF Architect Service z argumentami „” w celu uruchomienia serwera: {B12468C9-5B13-40D9-B74B-1815B776F1FB} Error: (11/17/2014 09:11:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi avast! Antivirus z powodu następującego błędu: %%1260 Microsoft Office Sessions: ========================= Error: (11/15/2014 00:15:06 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 02:08:13 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 01:48:26 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 01:38:46 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 01:27:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 00:57:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/14/2014 00:57:39 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423xul.dll33.1.0.5423003a055e Error: (11/13/2014 03:20:03 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/13/2014 02:35:53 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.1.0.5423mozalloc.dll33.1.0.542300001425 Error: (11/10/2014 11:44:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: hpoevm08.exe4.2.0.21ole32.dll5.1.2600.218000017bed ==================== Memory info =========================== Processor: Intel(R) Celeron(R) M CPU 410 @ 1.46GHz Percentage of memory in use: 66% Total physical RAM: 894.1 MB Available physical RAM: 298.07 MB Total Pagefile: 2168.34 MB Available Pagefile: 1612.52 MB Total Virtual: 2047.88 MB Available Virtual: 1953.09 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:39.06 GB) (Free:4.94 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive d: () (Fixed) (Total:54.09 GB) (Free:7.72 GB) NTFS Drive f: (Vice_City_Play) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 93.2 GB) (Disk ID: D413D413) Partition 1: (Active) - (Size=39.1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=54.1 GB) - (Type=OF Extended) ==================== End Of Log ============================