Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2015 01 Ran by mateusz at 2015-02-18 22:34:54 Running from C:\Users\mateusz\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: McAfee Anti-Virus i Anti-Spyware (Disabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee Anti-Virus i Anti-Spyware (Disabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: McAfee Firewall (Disabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.2.7116 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 3.2.7116 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.2.19 - NewTech Infosystems) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated) Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0812 - Acer Incorporated) Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.) Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_OMUI.pl-pl_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_OMUI.pl-pl_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_OMUI.pl-pl_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media) Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version: - Oberon Media) Ares 2.1.7 (HKLM-x32\...\Ares) (Version: 2.1.7-Build#3041 - Ares Development Group) Ares 3.1.7.3042 (HKLM-x32\...\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1) (Version: 3.1.7.3042 - Ares) ATI AVIVO64 Codecs (Version: 10.11.0.41019 - ATI Technologies Inc.) Hidden ATI Catalyst Install Manager (HKLM\...\{03136F9A-A046-B531-412F-C205BD64316C}) (Version: 3.0.750.0 - ATI Technologies, Inc.) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software) Backup Manager Advance (x32 Version: 2.0.2.19 - NewTech Infosystems) Hidden Batman - Toksyczny chłód (HKLM-x32\...\Batman - Toksyczny chłód) (Version: - ) ccc-core-static (x32 Version: 2009.1019.2131.36819 - Nazwa firmy) Hidden Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media) DC Universe Online Live (2) (HKU\S-1-5-21-2026956122-931518800-205582366-1000\...\SOE-DC Universe Online Live (2)) (Version: - Sony Online Entertainment) DC Universe Online Live (HKU\S-1-5-21-2026956122-931518800-205582366-1000\...\SOE-DC Universe Online Live) (Version: - Sony Online Entertainment) Disney Infinity 2.0 (HKLM-x32\...\{AD3C5D08-A89D-4E05-A0D2-CD24C6F689EE}) (Version: 1.96.2618 - Disney Interactive) eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version: - Oberon Media) First Class Flurry (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115208410}) (Version: - Oberon Media) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version: - Oberon Media) Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version: - Oberon Media) Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 1.00.3004 - Acer Incorporated) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated) ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LEGO MARVEL Super Heroes (HKLM-x32\...\Steam App 249130) (Version: - Traveller's Tales) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0415-0000-0000000FF1CE}_OMUI.pl-pl_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Language Pack 2007 - Polish/Polski (HKLM-x32\...\OMUI.pl-pl) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office PowerPoint Viewer 2007 (Polish) (HKLM-x32\...\{95120000-00AF-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{44E42AAA-432F-4E03-8D7D-C8DB4FEE526A}) (Version: 9.7.0621 - Microsoft Corporation) Mozilla Firefox 35.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 pl)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 9 Essentials (HKLM-x32\...\{965ef942-36c2-4f92-b60f-c75cd1dcde2f}) (Version: - Nero AG) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - ) Pakiet zgodności dla systemu Office 2007 (HKLM-x32\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pomocnik Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.) Scooby-Doo!(TM) Pierwsze Strachy (HKLM-x32\...\{A3D11978-F110-419E-8981-2CCFC17ADE64}) (Version: 1.00 - WB Games) SHREK FOREVER(TM) (x32 Version: 1.0 - Activision) Hidden Shrek Forever(TM) Gra (HKLM-x32\...\InstallShield_{1419B671-B248-48A6-87F2-D7B786CFB5F2}) (Version: 1.0 - Activision) Skylanders Spyro's Adventure(TM) (HKLM-x32\...\InstallShield_{388DC046-56AD-42F2-AEAD-81B7C47D05AE}) (Version: 1.00.0000 - Activision) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Syrenka Racer (HKLM-x32\...\Syrenka Racer_is1) (Version: - PLAY) Unity Web Player (HKU\S-1-5-21-2026956122-931518800-205582366-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated) Wesoła Szkoła 2 (HKLM-x32\...\Wesoła Szkoła 2_is1) (Version: - Next Generation Interactive) Wesoła Szkoła 3 (HKLM-x32\...\Wesoła Szkoła 3_is1) (Version: - Next Generation Interactive) Windows Live Sync (HKLM-x32\...\{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}) (Version: 14.0.8089.726 - Microsoft Corporation) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 17-02-2015 22:49:51 avast! antivirus system restore point 18-02-2015 17:27:33 Removed MyWinLocker. 18-02-2015 20:34:51 Manual 18-02-2015 20:40:09 Installed Microsoft Fix it 50123 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {00FEC37E-2E01-4F2E-B6A5-7249387A81B4} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION Task: {03E86E98-2BA6-42B7-A13E-39910686AD65} - System32\Tasks\{1CF293E6-69FC-46D8-AAA4-CE0E08A6B3BF} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {043EDB0B-88E0-4408-A7F7-190B8AFB4A5A} - System32\Tasks\{BCA34CCE-5E94-4811-B0A9-7928BB613B82} => pcalua.exe -a C:\Users\mateusz\Downloads\Shockwave_Installer_Slim.exe -d C:\Users\mateusz\Downloads Task: {055662D5-A6A8-4865-8944-4372D0A9A1EC} - \241088c9-696a-4418-bda9-b3b4bab05fe5-6 No Task File <==== ATTENTION Task: {09C5D82D-F120-49A0-8BC2-031DE0A8CBE0} - System32\Tasks\{8B3C4B1B-17D2-4F33-ADF4-681C21CA6806} => pcalua.exe -a C:\Users\mateusz\AppData\Local\Temp\Low\{5B87788F-2F05-4420-AC80-2FE12D6E08A7}\adobeshockwavextrabundle.exe -d C:\Users\mateusz\Desktop -c /xtrabundle=BC_Shockwave_3D_Asset Task: {0C8D7EEC-654B-4F4A-897C-A2801C2D20E6} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION Task: {0E55065D-7B9B-476F-B764-ED7D798524C1} - System32\Tasks\{822088F6-7A6D-4728-9960-C1D45A0144CE} => pcalua.exe -a "C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe" -d C:\Users\mateusz\Desktop Task: {0FFA6EC1-3C0D-4B6F-AA54-8863AADAD76D} - \BlockAndSurf Update No Task File <==== ATTENTION Task: {107F7900-B507-4FCF-A8E3-7FC654FC43C0} - \SaveSenseLiveUpdateTaskMachineUA No Task File <==== ATTENTION Task: {110567EE-B756-4756-8180-D63567E1E9EC} - System32\Tasks\{AFC10F2E-499C-41DF-AB28-A299152CC148} => pcalua.exe -a E:\Install.exe -d E:\ Task: {128C077C-7678-47EE-96CA-ACF37E3319AD} - \241088c9-696a-4418-bda9-b3b4bab05fe5-7 No Task File <==== ATTENTION Task: {1E356FD0-747E-482A-98F5-48C1F04AEB69} - \SaveSense No Task File <==== ATTENTION Task: {23E2E1D2-CAA2-429B-991B-A5961BD620D6} - \BitGuard No Task File <==== ATTENTION Task: {3AC4BCFF-79CE-4FBC-A49F-BB464AC3EA84} - \241088c9-696a-4418-bda9-b3b4bab05fe5-4 No Task File <==== ATTENTION Task: {3CF73285-6B96-4AF9-91D8-5046085EEE27} - System32\Tasks\{4B5C51CB-56F8-4261-8DFC-A75F60FEB17C} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {3D1A434F-2713-4244-AD9C-B9242541F7D0} - \BlockAndSurf_wd No Task File <==== ATTENTION Task: {4BF5E155-582D-43EE-AB62-950E381C91CE} - \241088c9-696a-4418-bda9-b3b4bab05fe5-1 No Task File <==== ATTENTION Task: {518EE03F-A36E-4211-A6EB-C1EA83DAA9A9} - System32\Tasks\{CC53FC14-8864-45A4-95FE-7E0AC82BD696} => pcalua.exe -a C:\Users\mateusz\AppData\Roaming\awesomehp\UninstallManager.exe Task: {52245D7D-7F8B-4C26-93DB-EE242F78F872} - \AmiUpdXp No Task File <==== ATTENTION Task: {55A22B93-FC75-4D72-A971-9067DC6DA2CD} - System32\Tasks\{591EB96F-08F2-4D62-AE1E-470AFB8C62BD} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {5C571624-B7B9-48F6-9ACE-5365BFA04590} - System32\Tasks\{4254C72F-578D-4F99-9194-33F3ED423B3B} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {63EE1C18-27AB-4DE2-8988-9DD1A12CDB97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-17] (Adobe Systems Incorporated) Task: {6D20318F-CA03-4D57-9D8E-547051584711} - System32\Tasks\{CEDB865C-C777-49E8-B41C-83B12C0941AC} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {707028F2-4AA0-4AC7-98E0-ED14BF12BE51} - \SaveSenseLiveUpdateTaskMachineCore No Task File <==== ATTENTION Task: {71A66698-D02D-496B-A701-7712890272E9} - System32\Tasks\{4142C8E7-7E1E-4AAE-9FAE-EDD32E84AF25} => pcalua.exe -a C:\Users\mateusz\AppData\Local\Temp\Low\{B442FEDE-914F-4090-8E2C-98DFF30D18DD}\adobeshockwavextrabundle.exe -d C:\Users\mateusz\Desktop -c /xtrabundle=BC_SwaStrm Task: {72AF540B-3BBF-4F39-A73B-C780AB5EE83C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.) Task: {766FDA0C-7208-4EEF-B19D-92A33E7DC769} - System32\Tasks\{8F56A9DC-B252-4121-AD03-D8E682286DBE} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {7A9BB502-5BEB-45A9-93AE-D799BF69AE78} - System32\Tasks\RMSchedule => C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe Task: {8535685E-E8C4-4792-A6AB-D7BF888AAF39} - System32\Tasks\Norton Security Scan for mateusz => C:\PROGRA~2\NORTON~2\Engine\361~1.11\Nss.exe Task: {8B083170-873B-45BE-9D58-F8C30C4046C4} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION Task: {8ED3A920-5BEC-4C2F-8573-B08CB20DF9B7} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION Task: {97B9BE3D-D4B8-4BBA-9FE6-F96C50AB31AA} - \241088c9-696a-4418-bda9-b3b4bab05fe5-5 No Task File <==== ATTENTION Task: {996734FE-039D-4F6F-A7F1-20ADF4AA58F9} - System32\Tasks\APSnotifierCA => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {A3CDB19D-19B3-4228-A90F-AF6DDBE7A5BD} - \241088c9-696a-4418-bda9-b3b4bab05fe5-3 No Task File <==== ATTENTION Task: {AD62135A-BA21-47C2-A106-AC5429F3EA97} - \241088c9-696a-4418-bda9-b3b4bab05fe5-2 No Task File <==== ATTENTION Task: {C0D4B0D0-E048-4BB7-AC19-9E4C6DAA2151} - System32\Tasks\{2B68B673-39CC-4C4E-8D3B-027ACFE00093} => pcalua.exe -a E:\Setup.exe -d E:\ Task: {C53BBE77-EA74-4DC5-8A89-F0C8622AFA8B} - System32\Tasks\{54461FC2-3FD1-4FE3-A818-5FE76EE01CF0} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {CACFBDBA-3D14-49DE-94B7-B031762BABE7} - System32\Tasks\{FE7977C2-BEBB-4374-81F6-6E5AF4B00642} => pcalua.exe -a c:\PROGRA~2\COMMON~1\ADOBEA~1\Versions\1.0\ADOBEA~1.EXE -d C:\Users\mateusz\Downloads -c "C:\Users\mateusz\Downloads\ifscl248c (1).air" Task: {D2EE992F-CFC4-45CC-8EF9-4D9C7A198408} - System32\Tasks\{99FFE0C2-F982-49B9-9B01-3B882636BA5C} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {D7328B8F-A982-46FC-BDF3-AD1CA8D25C18} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.) Task: {E3D87B30-8150-4524-895C-C15018F4D9AB} - System32\Tasks\{AD963E2D-CA51-4956-9C3D-F78C2D3B9E52} => C:\Program Files (x86)\Ares\Ares.exe [2010-10-27] (Ares Development Group) Task: {E5BAE136-44C5-4ADE-9537-7DB826EDC00A} - System32\Tasks\{6C57434D-05B1-4989-8342-5BDDD20CA535} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c C:\Gratka\ZG_Demo\start.exe Task: {E6C1F2E6-B766-4CF3-B715-BABB51A183C1} - System32\Tasks\RMAutoUpdate => C:\Program Files (x86)\PC Tools Registry Mechanic\SULauncher.exe Task: {EE1BD01F-7F5D-49E2-9A63-D5602D85F6A3} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles Updater\GFFUpdater.exe <==== ATTENTION Task: {FE754B3A-6ED4-4B17-9454-01EF20FA5FEC} - System32\Tasks\{0EF0D1B2-EF93-4AF1-A0B6-DF1FD2C12CBB} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c C:\Bakoma\bakoma.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfedef4a2412dd.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d009973254b21a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d04acde8ae536f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\McAfee Cleanup.job => C:\Users\mateusz\AppData\Local\Temp\MCPR\mccleanup.exe <==== ATTENTION Task: C:\Windows\Tasks\RMAutoUpdate.job => C:\Program Files (x86)\PC Tools Registry Mechanic\SULauncher.exe Task: C:\Windows\Tasks\RMSchedule.job => C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe ==================== Loaded Modules (whitelisted) ============== 2009-12-14 03:19 - 2009-12-09 10:24 - 00076320 _____ () C:\OEM\USBDECTION\USBS3S4Detection.exe 2015-02-17 22:50 - 2015-02-17 22:50 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll 2015-02-17 22:50 - 2015-02-17 22:50 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll 2009-08-18 08:27 - 2009-08-18 08:27 - 00629280 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe 2009-08-14 10:55 - 2009-08-14 10:55 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-03-15 20:06 - 2010-03-15 20:06 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2015-02-18 21:50 - 2015-02-18 21:50 - 02911744 _____ () C:\Program Files\AVAST Software\Avast\defs\15021802\algo.dll 2015-02-17 22:50 - 2015-02-17 22:50 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll 2009-02-03 02:33 - 2009-02-03 02:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2008-09-29 02:55 - 2008-09-29 02:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2014-08-29 10:19 - 2014-12-01 22:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2014-08-29 10:19 - 2014-12-01 22:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2014-08-29 10:19 - 2014-12-01 22:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2014-08-29 10:19 - 2014-12-01 22:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2014-05-16 16:36 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2015-02-18 20:31 - 2014-12-02 01:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll 2015-02-18 20:31 - 2014-12-02 01:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2015-02-18 20:31 - 2014-12-02 01:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2014-04-28 15:37 - 2015-01-23 23:34 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll 2014-08-29 10:19 - 2014-12-01 22:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2014-05-21 08:39 - 2015-01-23 23:33 - 00696512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2009-08-18 08:31 - 2009-08-18 08:31 - 00163840 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll 2015-02-17 22:51 - 2015-02-17 22:51 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-05-01 14:35 - 2015-01-16 00:42 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2011-09-30 10:40 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2015-02-17 21:24 - 2015-02-17 21:24 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll 2014-01-28 18:36 - 2015-02-18 22:34 - 00380416 _____ () C:\Users\mateusz\Downloads\gmer.exe ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:444C53BA AlternateDataStreams: C:\ProgramData\Temp:4CF61E54 AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F AlternateDataStreams: C:\ProgramData\Temp:93DE1838 AlternateDataStreams: C:\ProgramData\Temp:AB689DEA AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D AlternateDataStreams: C:\ProgramData\Temp:E3C56885 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2026956122-931518800-205582366-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\mateusz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: BlockAndSurf => C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurf.exe MSCONFIG\startupreg: fst_pl_128 => "C:\Program Files (x86)\fst_pl_128\fst_pl_128.exe" MSCONFIG\startupreg: fst_pl_149 => "C:\Program Files (x86)\fst_pl_149\fst_pl_149.exe" MSCONFIG\startupreg: G Data AntiVirus Tray Application => C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe MSCONFIG\startupreg: GDFirewallTray => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe MSCONFIG\startupreg: mcui_exe => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey MSCONFIG\startupreg: Yahoo! Search => C:\Users\mateusz\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\dsrlte.exe ==================== Accounts: ============================= Administrator (S-1-5-21-2026956122-931518800-205582366-500 - Administrator - Disabled) Gość (S-1-5-21-2026956122-931518800-205582366-501 - Limited - Disabled) mateusz (S-1-5-21-2026956122-931518800-205582366-1000 - Administrator - Enabled) => C:\Users\mateusz ==================== Faulty Device Manager Devices ============= Name: Standardowa klawiatura PS/2 Description: Standardowa klawiatura PS/2 Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Klawiatury standardowe) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Port Multiport Communications (COM3) Description: Port Multiport Communications Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318} Manufacturer: (Standardowe typy portów) Service: Serial Problem: : Windows cannot determine the settings for this device. Consult the documentation that came with this device and use the Resource tab to set the configuration. (Code 34) Resolution: The device requires manual configuration. See the hardware documentation or contact the hardware vendor for instructions on manually configuring the device. After you configure the device itself, you can use the "Resources" tab in Device Manager to configure the resource settings in Windows. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Mysz Microsoft PS/2 Description: Mysz Microsoft PS/2 Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (02/18/2015 10:34:36 PM) (Source: Windows Search Service) (EventID: 1006) (User: ) Description: Usługa Windows Search nie może utworzyć nowego indeksu wyszukiwania. Błąd wewnętrzny <10, 0x80071a91, Nie można zapisać zmian menedżera przeszukiwania zakresu: >. Error: (02/18/2015 10:34:36 PM) (Source: Windows Search Service) (EventID: 1019) (User: ) Description: Usługa wyszukiwania systemu Windows nie może przetworzyć listy lokalizacji dołączonych i wykluczonych. Błąd: <20, 0x80071a91, „”>. Error: (02/18/2015 10:34:18 PM) (Source: Windows Search Service) (EventID: 1006) (User: ) Description: Usługa Windows Search nie może utworzyć nowego indeksu wyszukiwania. Błąd wewnętrzny <10, 0x80071a91, Nie można zapisać zmian menedżera przeszukiwania zakresu: >. Error: (02/18/2015 10:34:18 PM) (Source: Windows Search Service) (EventID: 1019) (User: ) Description: Usługa wyszukiwania systemu Windows nie może przetworzyć listy lokalizacji dołączonych i wykluczonych. Błąd: <20, 0x80071a91, „”>. Error: (02/18/2015 10:09:22 PM) (Source: Windows Search Service) (EventID: 1006) (User: ) Description: Usługa Windows Search nie może utworzyć nowego indeksu wyszukiwania. Błąd wewnętrzny <10, 0x80071a91, Nie można zapisać zmian menedżera przeszukiwania zakresu: >. Error: (02/18/2015 10:09:22 PM) (Source: Windows Search Service) (EventID: 1019) (User: ) Description: Usługa wyszukiwania systemu Windows nie może przetworzyć listy lokalizacji dołączonych i wykluczonych. Błąd: <20, 0x80071a91, „”>. Error: (02/18/2015 10:07:31 PM) (Source: Windows Search Service) (EventID: 1006) (User: ) Description: Usługa Windows Search nie może utworzyć nowego indeksu wyszukiwania. Błąd wewnętrzny <10, 0x80071a91, Nie można zapisać zmian menedżera przeszukiwania zakresu: >. Error: (02/18/2015 10:07:31 PM) (Source: Windows Search Service) (EventID: 1019) (User: ) Description: Usługa wyszukiwania systemu Windows nie może przetworzyć listy lokalizacji dołączonych i wykluczonych. Błąd: <20, 0x80071a91, „”>. Error: (02/18/2015 10:04:48 PM) (Source: Windows Search Service) (EventID: 1006) (User: ) Description: Usługa Windows Search nie może utworzyć nowego indeksu wyszukiwania. Błąd wewnętrzny <10, 0x80071a91, Nie można zapisać zmian menedżera przeszukiwania zakresu: >. Error: (02/18/2015 10:04:48 PM) (Source: Windows Search Service) (EventID: 1019) (User: ) Description: Usługa wyszukiwania systemu Windows nie może przetworzyć listy lokalizacji dołączonych i wykluczonych. Błąd: <20, 0x80071a91, „”>. System errors: ============= Error: (02/18/2015 10:34:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 5. Error: (02/18/2015 10:34:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Windows Search zakończyła działanie; wystąpił następujący błąd: %%6801 Error: (02/18/2015 10:34:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 4. Error: (02/18/2015 10:34:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Windows Search zakończyła działanie; wystąpił następujący błąd: %%6801 Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Error: (02/18/2015 10:10:08 PM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk0\DR0. Microsoft Office Sessions: ========================= Error: (12/14/2012 06:36:49 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 157 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/25/2011 01:04:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 909 seconds with 420 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz Percentage of memory in use: 60% Total physical RAM: 2999.06 MB Available physical RAM: 1175.25 MB Total Pagefile: 5996.3 MB Available Pagefile: 3961.37 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:225.45 GB) (Free:125.05 GB) NTFS Drive d: (DATA) (Fixed) (Total:226.21 GB) (Free:219.71 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: AECBB2DB) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=225.5 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=226.2 GB) - (Type=07 NTFS) ==================== End Of Log ============================