Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2014 01 Ran by User at 2014-12-16 20:21:47 Running from C:\Users\User\Desktop\naprawa Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.44.50 - Conexant) DealsGiant (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{f64035c2}) (Version: - Software Publisher) <==== ATTENTION Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo) Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden GoldenCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - GoldenCoupon) <==== ATTENTION Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.) Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) ipla 2.8.4 (HKLM-x32\...\ipla) (Version: 2.8.4 - Redefine Sp z o.o.) Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.1901 - Broadcom Corporation) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 13.12.824.1 - Vimicro) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.0710 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.0.0.0710 - CyberLink Corp.) Hidden Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.3.3 - ELAN Microelectronic Corp.) Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4310.52 - CyberLink Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.4310.52 - CyberLink Corp.) Hidden Lenovo Solution Center (HKLM\...\{1E939186-B443-4262-A278-3C82949EA7AC}) (Version: 1.1.009.00 - Lenovo Group Limited) Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.) Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) Hidden Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.5926 - Lenovo) LibreOffice 4.3.4.1 (HKLM-x32\...\{7D983A32-F645-48AB-8E38-4ACD234F40BC}) (Version: 4.3.4.1 - The Document Foundation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Opera Stable 26.0.1656.32 (HKLM-x32\...\Opera 26.0.1656.32) (Version: 26.0.1656.32 - Opera Software ASA) Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo) Pakiet sterowników systemu Windows - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Podręcznik użytkownika (x32 Version: 1.0.0.9 - Lenovo) Hidden Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.) UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 01-12-2014 15:34:53 avast! antivirus system restore point 06-12-2014 16:56:36 Removed Amazon Browser App 11-12-2014 21:33:59 Windows Update 15-12-2014 17:29:06 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {37DDC7EA-F2AB-4055-9683-4623070CE742} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {3EEDC92C-D029-4566-82F3-E245B4143244} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2012-08-08] (Lenovo) Task: {3FD58C91-86DD-4BED-859F-6CF89160396F} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-08] () Task: {4B59346C-0CEA-4DD4-8CC6-66674CE66258} - System32\Tasks\Opera scheduled Autoupdate 1416844099 => C:\Program Files (x86)\Opera\launcher.exe [2014-11-25] (Opera Software) Task: {4BCC6313-CA9E-43D6-9CCF-F6F64DBC52DB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-25] (Google Inc.) Task: {80502B83-9CC4-4CD2-9175-8A6D286280FF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-12-15] (Microsoft Corporation) Task: {9B01A6A9-39F6-4D2C-A033-52138F007325} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-08] () Task: {D7EE61A6-3721-443C-8EA5-49433AD144FA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2012-08-08] () Task: {E276EEEA-223A-447C-9AC4-7A9455BF3974} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-25] (Google Inc.) Task: {F70AEC1F-D4A5-4FC2-8842-E88AD9402759} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-01] (AVAST Software) Task: {FE06CFD2-ED5F-4B0C-8CC8-FBD4500104A5} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-08] () Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-08-26 15:48 - 2012-08-26 15:48 - 00044408 _____ () C:\Program Files\Lenovo\Bluetooth Software\BtwLeAPI.dll 2012-08-14 09:56 - 2012-08-03 17:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 00535160 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe 2014-12-16 19:34 - 2014-12-16 19:34 - 02908160 _____ () C:\Program Files\AVAST Software\Avast\defs\14121600\algo.dll 2014-11-30 11:32 - 2014-11-30 11:32 - 04052480 _____ () c:\Program Files (x86)\CouponFinder\SaleRadar.dll 2014-12-01 16:36 - 2014-12-01 16:36 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2012-10-31 05:47 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 00156792 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\message_center_win8.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 01358456 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libglesv2.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 00219256 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libegl.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 09312888 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\pdf.dll 2014-12-03 16:51 - 2014-12-03 16:51 - 00991352 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-3367409587-261043490-430672160-500 - Administrator - Disabled) Gość (S-1-5-21-3367409587-261043490-430672160-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3367409587-261043490-430672160-1003 - Limited - Enabled) User (S-1-5-21-3367409587-261043490-430672160-1001 - Administrator - Enabled) => C:\Users\User ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/16/2014 08:14:10 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2” w wierszu C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Składnik 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (12/16/2014 07:06:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/14/2014 01:51:52 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/14/2014 00:58:20 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/12/2014 01:24:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: BtStackServer.exe, wersja: 12.0.0.1901, sygnatura czasowa: 0x503aa637 Nazwa modułu powodującego błąd: WS2_32.dll, wersja: 6.3.9600.16384, sygnatura czasowa: 0x5215e246 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000002a212 Identyfikator procesu powodującego błąd: 0xfc4 Godzina uruchomienia aplikacji powodującej błąd: 0xBtStackServer.exe0 Ścieżka aplikacji powodującej błąd: BtStackServer.exe1 Ścieżka modułu powodującego błąd: BtStackServer.exe2 Identyfikator raportu: BtStackServer.exe3 Pełna nazwa pakietu powodującego błąd: BtStackServer.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: BtStackServer.exe5 Error: (12/11/2014 07:41:38 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/10/2014 04:23:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/09/2014 04:28:23 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/06/2014 05:56:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service McAfee Home Network since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error: (12/06/2014 05:56:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary zhecagnt. System Error: Nie można odnaleźć określonego pliku. . System errors: ============= Error: (12/16/2014 08:00:41 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 19:58:34 na ‎2014-‎12-‎16 było nieoczekiwane. Error: (12/15/2014 06:30:06 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (12/15/2014 06:29:36 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (12/12/2014 02:41:18 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (12/12/2014 01:12:41 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (12/12/2014 01:12:10 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (12/10/2014 08:36:39 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (12/09/2014 07:48:28 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (12/09/2014 06:44:09 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (12/09/2014 05:25:10 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Microsoft Office Sessions: ========================= Error: (12/16/2014 08:14:10 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\User\Downloads\SoftonicDownloader_dla_photoscape.exe Error: (12/16/2014 07:06:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/14/2014 01:51:52 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/14/2014 00:58:20 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/12/2014 01:24:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: BtStackServer.exe12.0.0.1901503aa637WS2_32.dll6.3.9600.163845215e246c0000005000000000002a212fc401d015dd381d61d9C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exeC:\WINDOWS\system32\WS2_32.dllc1866d39-81f9-11e4-be91-c0143dd45d14 Error: (12/11/2014 07:41:38 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/10/2014 04:23:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/09/2014 04:28:23 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/06/2014 05:56:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service McAfee Home Network since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (12/06/2014 05:56:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary zhecagnt. System Error: Nie można odnaleźć określonego pliku. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU B960 @ 2.20GHz Percentage of memory in use: 33% Total physical RAM: 3959.77 MB Available physical RAM: 2623.19 MB Total Pagefile: 4663.77 MB Available Pagefile: 3207.73 MB Total Virtual: 131072 MB Available Virtual: 131071.8 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:417.99 GB) (Free:393.7 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.65 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 377A084D) Partition: GPT Partition Type. ==================== End Of Log ============================