Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-11-2014 Ran by Andrrzej Szachta at 2014-11-30 20:16:53 Running from C:\Users\Andrrzej Szachta\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated) Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Acer Incorporated) Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated) Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated) AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated) AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4794 - AVG Technologies) AVG 2014 (Version: 14.0.4189 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4794 - AVG Technologies) Hidden AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.0.19 - AVG Technologies) B010 (x32 Version: 140.0.353.000 - Hewlett-Packard) Hidden Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.6 - Broadcom Corporation) Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.0.2.4 - Broadcom Corporation) Browsers Apps (HKLM-x32\...\Browsers Apps) (Version: 1.34.7.29 - app) BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform) CinPlus-2.4cV19.11 (HKLM-x32\...\CinPlus-2.4cV19.11) (Version: 1.35.9.29 - CinPlusV19.11) clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated) Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 3.18.0.342250 - NNG Llc.) Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM) ETDWare PS/2-X64 11.6.23.203_WHQL (HKLM\...\Elantech) (Version: 11.6.23.203 - ELAN Microelectronic Corp.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Photosmart B010 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{19B5D345-8500-48A7-9737-558E5EEB063C}) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated) InetStat (HKU\S-1-5-21-2101704784-470427644-3715861599-1001\...\InetStat) (Version: 0.5b - InetStat) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated) LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MyBestOffersToday 014.241 (HKLM-x32\...\mbot_de_241_is1) (Version: - MYBESTOFFERSTODAY) <==== ATTENTION Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.) Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG) Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer) Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2008 - Acer) Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden PS_AIO_07_B010_SW_Min (x32 Version: 140.0.353.000 - Hewlett-Packard) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications) Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros) Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) Shopping Helper Smartbar (HKLM-x32\...\{7473B376-BABC-4D84-BF08-00EE7CE8CD8E}) (Version: 11.123.63.20379 - ReSoft Ltd.) <==== ATTENTION Shopping Helper Smartbar Engine (HKU\S-1-5-21-2101704784-470427644-3715861599-1001\...\{011fcab7-b55d-4ad8-9ffc-9bab0cfaf1c0}) (Version: 11.123.63.20379 - ReSoft Ltd.) <==== ATTENTION SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB) Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden TrustedShopper (HKLM-x32\...\{A799564D-B58C-4B41-BFF5-A05313AE2258}) (Version: 2.0.1 - SqueakyChocolate, LLC) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) UpdateChecker (HKU\S-1-5-21-2101704784-470427644-3715861599-1001\...\UpdateChecker) (Version: - ) <==== ATTENTION VeriBrowse (HKLM-x32\...\8B682441-3B9F-C7B9-C5E0-782D49889B19) (Version: - VeriBrowse-software) Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WindowsProtectManger20.0.0.401 (HKLM-x32\...\WindowsProtectManger) (Version: 20.0.0.401 - Fuyu LIMITED) <==== ATTENTION Word Proser 1.10.0.2 (HKLM-x32\...\WordProser_1.10.0.2) (Version: 1.10.0.2 - Word Proser) <==== ATTENTION XSManager (HKLM-x32\...\XSManager) (Version: 3.0 - XSManager) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 09-11-2014 16:58:04 Zaplanowany punkt kontrolny 14-11-2014 17:59:48 Windows Update 17-11-2014 19:35:31 Windows Update 23-11-2014 11:27:37 Operacja przywracania 26-11-2014 17:03:35 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05D5EC86-434F-4139-880E-A4488A411024} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5_user => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5.exe [2014-11-19] (CinPlusV19.11) <==== ATTENTION Task: {0DC1A7D9-1F70-4DDE-B407-997E2EA7CCC7} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-16] (Acer Incorporated) Task: {1197016B-46D6-4843-BF61-913A7D0D69B5} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-6 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-6.exe [2014-11-19] (CinPlusV19.11) <==== ATTENTION Task: {1E310176-BCB1-4557-9985-B6BEA43B2E82} - System32\Tasks\QEDYQJMM => C:\Users\Andrrzej Szachta\AppData\Roaming\QEDYQJMM.exe <==== ATTENTION Task: {1F63FBEE-448C-4F83-A6D6-5AA570C756DC} - System32\Tasks\VKZRD => C:\Users\Andrrzej Szachta\AppData\Roaming\VKZRD.exe <==== ATTENTION Task: {296B7F43-F8C6-438F-B1A9-AF8E933962E1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {3F697E01-AE2E-4B86-942C-D17EF56DE102} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-19] (globalUpdate) <==== ATTENTION Task: {3F6A0027-37BA-4EDE-A124-00C37BBEF9E3} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-11 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-11.exe <==== ATTENTION Task: {47C5618E-9D8F-47CF-B8C2-BDE9FE32BEAE} - System32\Tasks\ed97fe52-20d5-4263-a231-ccd5ca6f83aa => C:\Program Files (x86)\CinPlus-2.4cV19.11\ed97fe52-20d5-4263-a231-ccd5ca6f83aa.exe [2014-11-19] (CinPlusV19.11) <==== ATTENTION Task: {4FB4ED19-264E-468A-9FB6-A7ADC6F4BCC8} - System32\Tasks\575b099a-cfe6-44dd-a987-55f1a33b68ef => C:\Program Files (x86)\Browsers Apps\575b099a-cfe6-44dd-a987-55f1a33b68ef.exe [2014-08-01] () <==== ATTENTION Task: {6052F3E3-D417-4079-91AE-52F6FD189A0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21] (Google Inc.) Task: {7102717A-B900-4271-8C2C-AF3A11DA13B1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {82201705-E21F-458C-8C01-6609B7B9EAC4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-17] (Microsoft Corporation) Task: {88773724-3DF9-40B1-BCA8-21DB520F1B1E} - System32\Tasks\VeriBrowse Update => C:\Program Files (x86)\ver7VeriBrowse\o4VeriBrowseZ61.exe [2014-11-19] () Task: {90908FBB-36B1-4235-8C92-146BA47C7124} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-1 => C:\Program Files (x86)\CinPlus-2.4cV19.11\CinPlus-2.4cV19.11-codedownloader.exe <==== ATTENTION Task: {B43D73FC-46BE-4263-BC1C-7FA6B364EA60} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5.exe [2014-11-19] (CinPlusV19.11) <==== ATTENTION Task: {BA74CF78-A665-453F-9D4D-5381CEF57EC6} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-2 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-2.exe <==== ATTENTION Task: {D4409097-46BC-47AE-8638-E96B60307B54} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-3 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-3.exe <==== ATTENTION Task: {DC770B38-3935-46DA-87E5-85F189E275E4} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-4 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-4.exe <==== ATTENTION Task: {E6EA2260-722E-4BF5-B958-E56D927ECC44} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-28] (Adobe Systems Incorporated) Task: {EE1A02F6-26FF-423C-A1BF-41781250340C} - System32\Tasks\66cf2788-31d0-47a5-a3ef-f2c9d1c969c9 => C:\Program Files (x86)\CinPlus-2.4cV19.11\66cf2788-31d0-47a5-a3ef-f2c9d1c969c9.exe [2014-11-19] () <==== ATTENTION Task: {EE30EBCF-637E-4461-A842-5ED1697A913C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21] (Google Inc.) Task: {EF171C35-AAAE-44E2-9729-00EF83317C71} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-06-18] (Acer Incorporate) Task: {F1A11905-6598-43BD-A89C-E8CF4CF5F986} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] () Task: {FAB83138-8B46-437B-B754-D5E1A7E43B8E} - System32\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-7 => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\575b099a-cfe6-44dd-a987-55f1a33b68ef.job => C:\Program Files (x86)\Browsers Apps\575b099a-cfe6-44dd-a987-55f1a33b68ef.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\66cf2788-31d0-47a5-a3ef-f2c9d1c969c9.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\66cf2788-31d0-47a5-a3ef-f2c9d1c969c9.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-1.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\CinPlus-2.4cV19.11-codedownloader.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-11.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-11.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-2.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-2.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-3.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-3.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-4.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-4.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5_user.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-6.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-7.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\a438dbb6-0d37-422e-8e57-4e522a5ddd7b-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\ed97fe52-20d5-4263-a231-ccd5ca6f83aa.job => C:\Program Files (x86)\CinPlus-2.4cV19.11\ed97fe52-20d5-4263-a231-ccd5ca6f83aa.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\QEDYQJMM.job => C:\Users\Andrrzej Szachta\AppData\Roaming\QEDYQJMM.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\VeriBrowse Update.job => C:\Program Files (x86)\ver7VeriBrowse\o4VeriBrowseZ61.exe Task: C:\WINDOWS\Tasks\VKZRD.job => C:\Users\Andrrzej Szachta\AppData\Roaming\VKZRD.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2013-11-12 07:19 - 2013-02-21 07:58 - 00111176 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll 2013-11-12 07:19 - 2013-02-21 07:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll 2014-10-31 18:14 - 2014-10-22 05:04 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libglesv2.dll 2014-10-31 18:14 - 2014-10-22 05:04 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libegl.dll 2014-10-31 18:14 - 2014-10-22 05:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\pdf.dll 2014-10-31 18:14 - 2014-10-22 05:04 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll 2014-10-31 18:14 - 2014-10-22 05:05 - 14902600 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Andrrzej Szachta\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-2101704784-470427644-3715861599-500 - Administrator - Disabled) Andrrzej Szachta (S-1-5-21-2101704784-470427644-3715861599-1001 - Administrator - Enabled) => C:\Users\Andrrzej Szachta Gość (S-1-5-21-2101704784-470427644-3715861599-501 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/29/2014 08:48:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: IVON) Description: Aktywacja aplikacji Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic nie powiodła się. Błąd: -2144927149. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (11/29/2014 08:47:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: IVON) Description: Aktywacja aplikacji Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic nie powiodła się. Błąd: -2144927149. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (11/29/2014 08:42:29 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.3.9600.17284, sygnatura czasowa: 0x53f816dc Nazwa modułu powodującego błąd: MPR.dll, wersja: 6.3.9600.16384, sygnatura czasowa: 0x5215e27b Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000007642 Identyfikator procesu powodującego błąd: 0x44c Godzina uruchomienia aplikacji powodującej błąd: 0xExplorer.EXE0 Ścieżka aplikacji powodującej błąd: Explorer.EXE1 Ścieżka modułu powodującego błąd: Explorer.EXE2 Identyfikator raportu: Explorer.EXE3 Pełna nazwa pakietu powodującego błąd: Explorer.EXE4 Identyfikator aplikacji względem pakietu powodującego błąd: Explorer.EXE5 Error: (11/25/2014 05:27:37 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program backgroundTaskHost.exe w wersji 6.3.9600.16384 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1f5c Godzina rozpoczęcia: 01d008cc02d069da Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\WINDOWS\system32\backgroundTaskHost.exe Identyfikator raportu: f21b3710-74bf-11e4-bf0b-a4db30ca0d03 Pełna nazwa pakietu powodującego błąd: ZinioLLC.Zinio_2.1.0.317_x64__0q6dqzpp40p2e Identyfikator aplikacji względem pakietu powodującego błąd: App Error: (11/25/2014 05:27:37 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program LiveComm.exe w wersji 17.5.9600.20605 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1388 Godzina rozpoczęcia: 01d008cbfe103084 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Identyfikator raportu: f21a2577-74bf-11e4-bf0b-a4db30ca0d03 Pełna nazwa pakietu powodującego błąd: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Identyfikator aplikacji względem pakietu powodującego błąd: ppleae38af2e007f4358a809ac99a64a67c1 Error: (11/25/2014 05:27:37 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program wwahost.exe w wersji 6.3.9600.17031 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1e60 Godzina rozpoczęcia: 01d008cbfdd6c732 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\WINDOWS\syswow64\wwahost.exe Identyfikator raportu: f22a7bf1-74bf-11e4-bf0b-a4db30ca0d03 Pełna nazwa pakietu powodującego błąd: Microsoft.SkypeApp_3.1.0.1005_x86__kzf8qxf38zg5c Identyfikator aplikacji względem pakietu powodującego błąd: App Error: (11/25/2014 05:26:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: cmd.exe, wersja: 6.3.9600.16384, sygnatura czasowa: 0x52157d47 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.3.9600.17278, sygnatura czasowa: 0x53eeb4a3 Kod wyjątku: 0xc0000142 Przesunięcie błędu: 0x00098f05 Identyfikator procesu powodującego błąd: 0xbfc Godzina uruchomienia aplikacji powodującej błąd: 0xcmd.exe0 Ścieżka aplikacji powodującej błąd: cmd.exe1 Ścieżka modułu powodującego błąd: cmd.exe2 Identyfikator raportu: cmd.exe3 Pełna nazwa pakietu powodującego błąd: cmd.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: cmd.exe5 Error: (11/25/2014 05:26:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: cmd.exe, wersja: 6.3.9600.16384, sygnatura czasowa: 0x52157d47 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.3.9600.17278, sygnatura czasowa: 0x53eeb4a3 Kod wyjątku: 0xc0000142 Przesunięcie błędu: 0x00098f05 Identyfikator procesu powodującego błąd: 0x2778 Godzina uruchomienia aplikacji powodującej błąd: 0xcmd.exe0 Ścieżka aplikacji powodującej błąd: cmd.exe1 Ścieżka modułu powodującego błąd: cmd.exe2 Identyfikator raportu: cmd.exe3 Pełna nazwa pakietu powodującego błąd: cmd.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: cmd.exe5 Error: (11/25/2014 05:26:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: cmd.exe, wersja: 6.3.9600.16384, sygnatura czasowa: 0x52157d47 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.3.9600.17278, sygnatura czasowa: 0x53eeb4a3 Kod wyjątku: 0xc0000142 Przesunięcie błędu: 0x00098f05 Identyfikator procesu powodującego błąd: 0x2e14 Godzina uruchomienia aplikacji powodującej błąd: 0xcmd.exe0 Ścieżka aplikacji powodującej błąd: cmd.exe1 Ścieżka modułu powodującego błąd: cmd.exe2 Identyfikator raportu: cmd.exe3 Pełna nazwa pakietu powodującego błąd: cmd.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: cmd.exe5 Error: (11/25/2014 05:26:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: cmd.exe, wersja: 6.3.9600.16384, sygnatura czasowa: 0x52157d47 Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.3.9600.17278, sygnatura czasowa: 0x53eeb4a3 Kod wyjątku: 0xc0000142 Przesunięcie błędu: 0x00098f05 Identyfikator procesu powodującego błąd: 0x3798 Godzina uruchomienia aplikacji powodującej błąd: 0xcmd.exe0 Ścieżka aplikacji powodującej błąd: cmd.exe1 Ścieżka modułu powodującego błąd: cmd.exe2 Identyfikator raportu: cmd.exe3 Pełna nazwa pakietu powodującego błąd: cmd.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: cmd.exe5 System errors: ============= Error: (11/30/2014 08:15:36 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:15:29 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:15:22 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:15:16 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:13:35 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:13:25 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:13:09 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084WSearchNiedostępny{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (11/30/2014 08:13:06 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084WSearchNiedostępny{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (11/30/2014 08:13:06 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084ShellHWDetectionNiedostępny{DD522ACC-F821-461A-A407-50B198B896DC} Error: (11/30/2014 08:12:56 PM) (Source: DCOM) (EventID: 10005) (User: IVON) Description: 1084WSearchNiedostępny{9E175B6D-F52A-11D8-B9A5-505054503030} Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-07-13 12:55:20.130 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:19.989 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:19.677 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:19.505 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:19.239 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:19.067 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:18.817 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:55:18.661 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:54:48.202 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-07-13 12:54:48.015 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU 2117U @ 1.80GHz Percentage of memory in use: 29% Total physical RAM: 3985.27 MB Available physical RAM: 2804.04 MB Total Pagefile: 8081.27 MB Available Pagefile: 6954.86 MB Total Virtual: 131072 MB Available Virtual: 131071.78 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:230.6 GB) (Free:159.15 GB) NTFS Drive f: (Nowy) (Fixed) (Total:215.65 GB) (Free:215.52 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: D159D262) Partition: GPT Partition Type. ==================== End Of Log ============================