Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-02-2015 01 Ran by Bartek at 2015-02-19 17:44:37 Running from C:\Users\Bartek\Downloads\FRST Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) ALLPlayer Pilot (HKLM\...\{146BDBDD-ACD9-4B04-A286-C27471841E8E}_is1) (Version: 1.2 - ALLPlayer Group, Ltd.) ALLPlayer V6.X (HKLM\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) Avast Free Antivirus (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software) Comodo Dragon (HKLM\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.49.0 - Conexant) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Dolby Advanced Audio v2 (HKLM\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) DriverPack Solution Updater (HKU\S-1-5-21-572225163-2724440774-3182437306-1000\...\DRPSu Updater) (Version: 0.0.25 - DriverPack Solution) Energy Management (HKLM\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.43 - Lenovo) Energy Management (Version: 8.0.2.43 - Lenovo) Hidden FormatFactory 3.6.0.0 (HKLM\...\FormatFactory) (Version: 3.6.0.0 - Format Factory) Galeria fotografii usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation) Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3131 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation) key-find uninstall (HKLM\...\key-find uninstall) (Version: - key-find) K-Lite Codec Pack 10.9.5 Full (HKLM\...\KLiteCodecPack_is1) (Version: 10.9.5 - ) Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4000 - Broadcom Corporation) Lenovo EasyCamera (HKLM\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10227 - Realtek Semiconductor Corp.) Lenovo_Wireless_Driver (HKLM\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.223.181 - Lenovo) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 35.0.1 (x86 pl) (HKLM\...\Mozilla Firefox 35.0.1 (x86 pl)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla) Napisy24 (HKLM\...\{D1985DBC-F09E-4317-91B8-932AD0FD4A27}_is1) (Version: 0.95 - Napisy24.pl) Opera Stable 27.0.1689.69 (HKLM\...\Opera 27.0.1689.69) (Version: 27.0.1689.69 - Opera Software ASA) Pakiet sterowników systemu Windows - Broadcom (BCM43XX) Net (03/21/2012 6.20.55.51) (HKLM\...\1970E91402F8A4C191F47F67FECED468E8A8E26D) (Version: 03/21/2012 6.20.55.51 - Broadcom) Podręcznik użytkownika (Version: 1.0.0.17 - Lenovo) Hidden Podstawowe programy Windows Live (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Podstawowe programy Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.12 - Qualcomm Atheros Communications Inc.) Realtek Card Reader (HKLM\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39048 - Realtek Semiconductor Corp.) Registry Dr (HKLM\...\{A6A9374C-4A54-4F08-AF5A-F893F0B6B900}) (Version: 2.5.9 - EuroTrade A.L. Ltd) Strong Signal (HKLM\...\Strong Signal) (Version: 2.0.5520.35183 - Strong Signal) <==== ATTENTION! UserGuide (HKLM\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.17 - Lenovo) WinAVI Video Converter (HKLM\...\WinAVI Video Converter) (Version: 11.6.1.4734 - ZJMedia Digital Technology Ltd.) Windows Movie Maker 2.6 (HKLM\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) World of Tanks (HKU\S-1-5-21-572225163-2724440774-3182437306-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-572225163-2724440774-3182437306-1000_Classes\CLSID\{010833F3-751A-402F-9FCC-C365B6A12E41}\localserver32 -> C:\Users\Bartek\Downloads\BESTplayer.exe No File ==================== Restore Points ========================= 24-01-2015 15:00:33 IIF_MSI 24-01-2015 15:05:58 Installed Lenovo EasyCamera 24-01-2015 15:09:57 Zainstalowane Qualcomm Atheros Communications Inc.(R) AR81Familynpň/ 24-01-2015 15:21:48 Broadcom BTW Restore Point 24-01-2015 15:54:03 Zainstalowane Realtek Card Reader 24-01-2015 15:54:03 Zainstalowane Energy Management 24-01-2015 15:54:46 Instalacja pakietu sterownika urządzenia: Lenovo Urządzenia systemowe 24-01-2015 15:55:55 Zainstalowane UserGuide 24-01-2015 15:59:14 IIF_MSI 24-01-2015 17:52:36 avast! antivirus system restore point 06-02-2015 20:17:32 Zaplanowany punkt kontrolny 07-02-2015 15:27:12 Zainstalowany program DirectX 12-02-2015 15:19:45 Installed Windows Movie Maker 2.6 12-02-2015 15:29:19 Windows Live Essentials 12-02-2015 15:29:43 Zainstalowany program DirectX 12-02-2015 15:30:05 Zainstalowany program DirectX 12-02-2015 15:30:40 WLSetup ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0062A123-3597-4517-867F-E1BBE94BA33E} - System32\Tasks\Opera scheduled Autoupdate 1423853935 => C:\Program Files\Opera\launcher.exe [2015-02-10] (Opera Software) Task: {390B2D85-CCB7-48E7-9F10-BA9653639270} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-01-24] (AVAST Software) Task: {6700BB17-D027-4195-808F-4A45C15213F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-01-24] (Google Inc.) Task: {71D4A70E-E8BC-4895-8430-07EAD2EAEF0E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-09] (Adobe Systems Incorporated) Task: {B08C0954-41D5-4D5C-BBEC-3310FC84C012} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-01-24] (Google Inc.) Task: {DC3BBE5C-44BA-4875-B086-3C072F4848D2} - System32\Tasks\{5C8E8B62-0BC9-4F0B-820E-4378A507CDEF} => pcalua.exe -a "C:\drivers\AMD Video Driver\Setup.exe" -d "C:\drivers\AMD Video Driver" (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2015-02-17 14:35 - 2015-02-17 14:35 - 02911744 _____ () C:\Program Files\AVAST Software\Avast\defs\15021701\algo.dll 2015-02-19 17:35 - 2015-02-19 17:35 - 02911744 _____ () C:\Program Files\AVAST Software\Avast\defs\15021900\algo.dll 2015-01-24 17:56 - 2015-01-24 17:56 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-01-24 16:25 - 2011-04-28 09:27 - 00192856 _____ () C:\Users\Bartek\AppData\Roaming\DRPSu\DrvUpdater.exe 2015-02-13 19:58 - 2015-02-10 08:58 - 00552056 _____ () C:\Program Files\Opera\27.0.1689.69\opera_crashreporter.exe 2015-02-13 19:58 - 2015-02-10 08:58 - 01408632 _____ () C:\Program Files\Opera\27.0.1689.69\libglesv2.dll 2015-02-13 19:58 - 2015-02-10 08:58 - 00219256 _____ () C:\Program Files\Opera\27.0.1689.69\libegl.dll 2015-02-13 19:58 - 2015-02-10 08:58 - 09510520 _____ () C:\Program Files\Opera\27.0.1689.69\pdf.dll 2015-02-09 14:11 - 2015-02-09 14:11 - 16852144 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-572225163-2724440774-3182437306-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-572225163-2724440774-3182437306-500 - Administrator - Disabled) Bartek (S-1-5-21-572225163-2724440774-3182437306-1000 - Administrator - Enabled) => C:\Users\Bartek Gość (S-1-5-21-572225163-2724440774-3182437306-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-572225163-2724440774-3182437306-1002 - Limited - Enabled) ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (02/19/2015 05:34:57 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/19/2015 05:34:57 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll (1036) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546. System errors: ============= Error: (02/12/2015 07:20:50 PM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x00000050 (0xfe1141cc, 0x00000000, 0x95cecc3f, 0x00000000)C:\Windows\MEMORY.DMP021215-17487-01 Error: (02/12/2015 07:20:40 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 19:19:26 na ‎2015-‎02-‎12 było nieoczekiwane. Error: (02/09/2015 10:17:47 AM) (Source: NetBT) (EventID: 4321) (User: ) Description: Nie można zarejestrować nazwy „WORKGROUP :1d” w interfejsie o adresie IP 192.168.0.103. Komputer o adresie IP 192.168.0.100 nie zezwolił na przejęcie tej nazwy przez ten komputer. Error: (02/07/2015 07:42:29 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 19:41:43 na ‎2015-‎02-‎07 było nieoczekiwane. Error: (01/30/2015 11:34:00 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (01/28/2015 03:59:41 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 20:38:04 na ‎2015-‎01-‎27 było nieoczekiwane. Error: (01/24/2015 10:01:14 PM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x0000008e (0xc0000005, 0x82c94f01, 0x952bcb40, 0x00000000)C:\Windows\MEMORY.DMP012415-18891-01 Error: (01/24/2015 10:01:08 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 21:59:39 na ‎2015-‎01-‎24 było nieoczekiwane. Error: (01/24/2015 03:37:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Intel(R) Content Protection HECI Service zakończyła działanie; wystąpił następujący błąd: %%-2147024890 Error: (01/24/2015 03:12:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Microsoft Office Sessions: ========================= Error: (02/19/2015 05:34:57 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/19/2015 05:34:57 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/19/2015 05:34:56 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 Error: (02/18/2015 00:42:33 PM) (Source: ESENT) (EventID: 412) (User: ) Description: wuaueng.dll1036SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546 ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4210M CPU @ 2.60GHz Percentage of memory in use: 78% Total physical RAM: 2486.36 MB Available physical RAM: 534.84 MB Total Pagefile: 4971 MB Available Pagefile: 2253.82 MB Total Virtual: 2047.88 MB Available Virtual: 1888.4 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:488.28 GB) (Free:325.63 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D9FA2484) Partition 1: (Active) - (Size=1000 MB) - (Type=0B) Partition 2: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=1000 MB) - (Type=12) ==================== End Of Log ============================