Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2015 Ran by Izabela at 2015-04-26 22:40:54 Running from C:\Users\Izabela\Downloads\Adware Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3124128087-3043424795-594286103-500 - Administrator - Disabled) Gość (S-1-5-21-3124128087-3043424795-594286103-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3124128087-3043424795-594286103-1003 - Limited - Enabled) Izabela (S-1-5-21-3124128087-3043424795-594286103-1001 - Administrator - Enabled) => C:\Users\Izabela ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3124128087-3043424795-594286103-1001\...\uTorrent) (Version: 3.4.2.39744 - BitTorrent Inc.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adblock Plus dla IE (32-bitowego i 64-bitowego) (HKLM\...\{E3EA4A92-E882-4BAF-9FE2-EAA7C692A1A1}) (Version: 1.4 - Eyeo GmbH) Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - ) Adobe Reader XI (11.0.10) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - ) Aktualizacje NVIDIA 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden AutoCAD 2014 — Polski (Polish) (Version: 19.1.18.0 - Autodesk) Hidden AutoCAD 2014 Language Pack – Polski (Polish) (Version: 19.1.18.0 - Autodesk) Hidden Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk) Autodesk AutoCAD 2014 — Polski (Polish) (HKLM\...\AutoCAD 2014 — Polski (Polish)) (Version: 19.1.18.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk) Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Call of Duty (HKLM-x32\...\Call of Duty) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform) CMDialog ActiveX Control DLL (x32 Version: 6.0.84.18 - Unknown) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform) Dell System Detect (HKU\S-1-5-21-3124128087-3043424795-594286103-1001\...\73f463568823ebbe) (Version: 5.13.0.1 - Dell) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.) ElsaWin (HKLM-x32\...\ElsaWin) (Version: 5.20 - ) Far Cry (HKLM-x32\...\FarCry_is1) (Version: - Cenega Poland Sp. z o. o.) GDR 4033 for SQL Server 2008 R2 (KB2977320) (64-bit) (HKLM\...\KB2977320) (Version: 10.52.4033.0 - Microsoft Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden Hardlock Device Drivers (HKLM-x32\...\Hardlock Device Drivers) (Version: - ) IC_Katalog (HKLM-x32\...\IC_Katalog) (Version: 10.0.630.0 - Inter Cars) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) KMSpico v9.0.6.20131120 (HKLM\...\KMSpico_is1) (Version: 9.0.6.20131120 - ) Lexmark (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - ) Lexmark 4900 Series (HKLM\...\Lexmark 4900 Series) (Version: - Lexmark International, Inc.) Mała Księgowość Rzeczpospolitej (HKLM-x32\...\Mała Księgowość Rzeczpospolitej) (Version: 23.08 - Usługi Informatyczne Andrzej Ciupiński) MFCDLL Shared Library - Retail Version (x32 Version: 6.0.8665.0 - Unknown) Hidden Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version: - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{E8F7904A-4780-4F3F-B153-21BE32857120}) (Version: 10.52.4033.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Policies (HKLM-x32\...\{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{1D4A3734-9328-440F-960C-42B4CE481EB4}) (Version: 10.52.4033.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation) Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.52.4000.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU (HKLM-x32\...\{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.52.4000.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation) MSMAPI Controls (x32 Version: 6.0.81.69 - Unknown) Hidden MSXML 4.0 (x32 Version: 4.20.9818.0 - Microsoft Corporation) Hidden Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation) NVIDIA Sterownik graficzny 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation) Panel sterowania NVIDIA 350.12 (Version: 350.12 - NVIDIA Corporation) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) Sentinel Runtime (HKLM-x32\...\{678E25DE-EB70-4B01-9BAB-649F613A8434}) (Version: 6.63.1.43776 - SafeNet Inc.) Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft) Service Pack 2 for SQL Server 2008 R2 (KB2630458) (64-bit) (HKLM\...\KB2630458) (Version: 10.52.4000.0 - Microsoft Corporation) SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) SOAP SDK Files (x32 Version: 3.00.1325.3 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Common Files (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Database Engine Services (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Database Engine Shared (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Management Studio (Version: 10.52.4000.0 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0415-0000-0000000FF1CE}_Office15.PROPLUS_{61D76467-9532-4D27-AE19-31DF7BD2C973}) (Version: - Microsoft) VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 11.0.0 - VMware, Inc) VMware Workstation (Version: 11.0.0 - VMware, Inc.) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3124128087-3043424795-594286103-1001_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3124128087-3043424795-594286103-1001_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3124128087-3043424795-594286103-1001_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3124128087-3043424795-594286103-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\pl-PL\acadficn.dll (Autodesk, Inc.) ==================== Restore Points ========================= 23-04-2015 16:12:19 Zaplanowany punkt kontrolny ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1A2C5028-093E-4A4C-BB68-2D317EA05F77} - System32\Tasks\Installation App Launcher => C:\Program Files (x86)\Lexmark 4900 Series\lxdramon.exe [2010-02-04] () Task: {25E0B14C-4061-4BF6-9368-331AB6C09D4D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-10] (Google Inc.) Task: {345D8CEF-F3A1-44DD-89F6-76ED07B68CE1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {3914A737-EACE-4556-A423-45C13E067FF2} - System32\Tasks\{67B280F8-6EA5-4F81-85B8-D740452B7C08} => pcalua.exe -a C:\Users\Izabela\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe -d C:\Users\Izabela\Downloads Task: {55084295-B290-4B52-8227-C00957084965} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-10] (Google Inc.) Task: {7ABA97F5-E113-4B96-A6B1-0AD66562F675} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2013-11-20] () Task: {7EF2CEDC-6D28-45E3-A89C-E0503DEC18FD} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: {A3C7CC57-253F-47A1-A287-81C89A1A6BAF} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation) Task: {B068617C-0A6F-459A-B3BC-8D53A5BD25AB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd) Task: {B9808EAB-02F8-4A0E-B030-BBE2F43B91B9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-04-15] (Microsoft Corporation) Task: {BE4B85C5-0275-4E68-87A5-9DF9104E9A0D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: {DFD16E17-DC83-4E5E-8F3B-4610DDDBDE16} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: {EFCEF889-0DD6-4A14-9628-000F26BCF819} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {F5A7963C-4422-463B-8786-84C1C2DE5163} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: {F8A0D481-5F04-45F1-BE11-F6344738862B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2014-10-24 15:21 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-07-21 08:40 - 2009-10-16 16:02 - 00186880 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\lxdrdrpp.dll 2014-11-20 19:20 - 2014-11-20 19:20 - 12730560 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe 2014-01-29 23:02 - 2014-01-29 23:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-11-03 15:21 - 2010-02-04 05:45 - 00676520 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrmon.exe 2014-11-03 15:21 - 2010-02-04 05:45 - 00025256 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrMsdMon.exe 2014-11-20 19:44 - 2014-11-20 19:44 - 01299136 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll 2014-11-20 19:20 - 2014-11-20 19:20 - 00194752 _____ () C:\Program Files (x86)\VMware\VMware Workstation\nfc-types.dll 2014-11-20 19:20 - 2014-11-20 19:20 - 00191680 _____ () C:\Program Files (x86)\VMware\VMware Workstation\LIBEXPAT.dll 2014-11-20 19:20 - 2014-11-20 19:20 - 00388288 _____ () C:\Program Files (x86)\VMware\VMware Workstation\ssoClient.dll 2014-11-03 15:21 - 2010-02-04 05:29 - 00380928 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrscw.dll 2014-11-03 15:21 - 2009-10-16 11:49 - 00188416 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrdatr.dll 2014-11-03 15:21 - 2010-02-04 05:29 - 01036288 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrDRS.dll 2014-11-03 15:21 - 2010-02-04 05:29 - 00081920 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrcaps.dll 2014-11-03 15:21 - 2010-02-04 05:19 - 00069632 _____ () C:\Program Files (x86)\Lexmark 4900 Series\lxdrcnv4.dll 2014-11-03 15:21 - 2010-01-21 06:09 - 00028672 _____ () C:\Program Files (x86)\Lexmark 4900 Series\App4R.Monitor.Common.dll 2014-11-03 15:21 - 2010-01-21 06:09 - 00036864 _____ () C:\Program Files (x86)\Lexmark 4900 Series\App4R.Monitor.Core.dll 2014-11-03 15:21 - 2010-01-21 06:08 - 00065536 _____ () C:\Program Files (x86)\Lexmark 4900 Series\app4r.devmons.mcmdevmon.dll 2014-11-03 15:21 - 2008-03-25 04:53 - 00012288 _____ () C:\Program Files (x86)\Lexmark 4900 Series\app4r.devmons.mcmdevmon.autoplayutil.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Izabela\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3124128087-3043424795-594286103-1001\...\dell.com -> dell.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3124128087-3043424795-594286103-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Izabela\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.88.1 - 192.168.156.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3124128087-3043424795-594286103-1001\...\StartupApproved\Run: => "DAEMON Tools Lite" ==================== FirewallRules (whitelisted) =============== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) FirewallRules: [Wininit-Shutdown-In-Rule-TCP-RPC] => (Allow) %systemroot%\system32\wininit.exe FirewallRules: [Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper] => (Allow) %systemroot%\system32\wininit.exe FirewallRules: [ProximityUxHost-Sharing-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\proximityuxhost.exe FirewallRules: [ProximityUxHost-Sharing-Out-TCP-NoScope] => (Allow) %SystemRoot%\system32\proximityuxhost.exe FirewallRules: [NETDIS-DAS-In-UDP-Active] => (Allow) %SystemRoot%\system32\dashost.exe FirewallRules: [NETDIS-DAS-In-UDP] => (Allow) %SystemRoot%\system32\dashost.exe FirewallRules: [EventForwarder-In-TCP] => (Allow) %SystemRoot%\system32\NetEvtFwdr.exe FirewallRules: [TPMVSCMGR-Server-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe FirewallRules: [TPMVSCMGR-Server-Out-TCP-NoScope] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe FirewallRules: [TPMVSCMGR-Server-In-TCP] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe FirewallRules: [TPMVSCMGR-Server-Out-TCP] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe FirewallRules: [PlayTo-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-In-UDP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-In-UDP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-Out-UDP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-Out-UDP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-In-RTSP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-In-RTSP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [PlayTo-In-RTSP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe FirewallRules: [WFDPRINT-DAFWSD-In-Active] => (Allow) %SystemRoot%\system32\dashost.exe FirewallRules: [WFDPRINT-DAFWSD-Out-Active] => (Allow) %SystemRoot%\system32\dashost.exe FirewallRules: [RemoteDesktop-Shadow-In-TCP] => (Allow) %SystemRoot%\system32\RdpSa.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [{2F29B33F-E511-43E9-B932-1F370A8EBF2F}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\outlook.exe FirewallRules: [{35EB5587-CBA0-47D5-AC3B-5486BCCC10FA}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe FirewallRules: [{C63E0472-24D2-4E00-ABE0-683FC082381D}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe FirewallRules: [{2C6C3FA8-B1BB-4731-8203-FC032A4B4775}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{28A0299A-5CEE-4C28-8910-4EC28B68184B}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{0FC1F209-AE09-4531-BBFB-3DC1C43F5C54}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{4B856DC7-C648-4104-8CBF-213D8A9D581F}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{89BE3DF4-3D97-4313-88FE-F62BAA09C6F5}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{B79F2E74-81E9-483F-B9B3-49A5CF04F86C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{35A672BB-FD95-46F0-9EDE-7B522C9AAD4D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{B2CC69F3-7B78-46FB-84B0-18CB4600553E}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{99EE31C5-BFD4-4E7B-8031-F146EE0C673F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{DE6EB1CA-00FF-494D-8C40-7ACEA4248831}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{CE7F3001-AD05-4A86-8010-7C4FF8B9F84F}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{F7DDF3C3-296D-4CC8-A87E-1CB94ED0A73A}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{2BAE51A3-7111-4813-9B9D-1616935AE6D0}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{99E8F7CB-E4BE-437D-A427-CD1472FA0683}] => (Allow) %SystemRoot%\system32\dashost.exe FirewallRules: [{C014FF5F-B8A2-4F7B-8B3B-73066C173975}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8AC420C9-5F5A-446A-B10A-31B88E041FAD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2BA8F186-48E5-42F1-AF1F-D7CEFC354ABB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{22684B7E-20B3-4BF2-B924-7D5B04AF1C7C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{FBCABBFE-4553-4A93-A11D-29BFE72B80DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{91710545-3582-4BCB-93DD-17E80881BC78}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{5D2BD371-BEF6-4B1B-AF0F-BC38A98BC243}] => (Allow) C:\Windows\SysWOW64\lxdrcoms.exe FirewallRules: [{8DC17870-7A39-4BD7-91D8-B9D7F83F0197}] => (Allow) C:\Windows\SysWOW64\lxdrcoms.exe FirewallRules: [{7C771900-9FB1-494D-BCA2-477704E1F6CC}] => (Allow) C:\Program Files (x86)\Lexmark 4900 Series\lxdramon.exe FirewallRules: [{3DAC32FA-E013-4EB3-8EDE-8C9C7D98DACC}] => (Allow) C:\Program Files (x86)\Lexmark 4900 Series\lxdramon.exe FirewallRules: [{7B87F081-82AB-4B37-8066-CFDF6C2A35CA}] => (Allow) C:\Program Files (x86)\Lexmark 4900 Series\frun.exe FirewallRules: [{C9D9265D-DB00-45AD-9D48-0C043F6CE66C}] => (Allow) C:\Program Files (x86)\Lexmark 4900 Series\frun.exe FirewallRules: [{B6EA1388-13C3-4D95-95AA-4EA1FAC9821D}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxdrpswx.exe FirewallRules: [{204B717A-B45D-420F-BDF8-5071217EACF3}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxdrpswx.exe FirewallRules: [{A42BCCF8-1CDC-4879-B911-4ACC30B6335B}] => (Allow) C:\Windows\System32\lxdrcoms.exe FirewallRules: [{3835AB6A-CFFC-45E4-9DD9-1F7A70C62604}] => (Allow) C:\Windows\System32\lxdrcoms.exe FirewallRules: [{98376D4D-FAFB-453B-B692-808C95932A55}] => (Allow) C:\WINDOWS\system32\lxdrcoms.exe FirewallRules: [{22B183B3-B2F2-4298-AF0E-FB7F6C25C460}] => (Allow) C:\WINDOWS\system32\spool\DRIVERS\x64\3\lxdrpswx.exe FirewallRules: [{D9799923-93D2-4BCC-9151-7360ED11DAFD}] => (Allow) C:\WINDOWS\system32\spool\DRIVERS\x64\3\lxdrtime.exe FirewallRules: [{1307C491-35CC-48C6-BB15-A44389653E0A}] => (Allow) C:\WINDOWS\SysWOW64\lxdrcoms.exe FirewallRules: [{0B759DDF-2E7D-40AB-B255-08BCC3AEA8B4}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{EBA858F4-CDD7-48A3-A446-E0C3DE92FBF9}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{136151E6-9202-4E71-BD3C-B58C65B48275}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{3BC11444-E49B-41EA-A519-5520EBBDC212}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{EFE4D9C5-39B4-43EE-AE4C-00709F3755B6}] => (Allow) C:\WINDOWS\system32\hasplms.exe FirewallRules: [{F106B0FF-2F49-42CF-B948-D089B5FAE9E5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{B1E94207-6D49-4ED4-B22F-8A85A8660DC5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{1564A5E0-F458-49E4-916F-5D77CC1CF409}] => (Allow) C:\Users\Izabela\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{81160F22-89FD-446D-962E-D67837CAF49C}] => (Allow) C:\Users\Izabela\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{52EA49DA-BE98-40EC-B40B-5C9D065BAC0C}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{BA82A5D7-9408-49F6-B688-FDDBBE98E56B}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{03DD6F49-86E0-4C2D-9E06-94E2F1C9A0CC}] => (Allow) C:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{CC91CE42-D981-42FB-BC0A-FC32937BD3FA}] => (Allow) C:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{D82163D7-27BC-4335-B1D8-22FDBB53F55E}] => (Allow) C:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{A86E4994-F038-4DBB-BC2F-BFD58075066B}] => (Allow) C:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{49A867EB-D0F1-482A-99AB-7AA1B66D1ED2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{56D0BD8D-CE3E-464E-B55C-396581CDD14D}] => (Allow) C:\Windows\System32\KMSServer.exe FirewallRules: [{28065DE0-45F0-4EAF-8CB7-6BC59B1644A6}] => (Allow) C:\Windows\System32\KMSServer.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/26/2015 10:21:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Service_KMS.exe, wersja: 10.4.1.0, sygnatura czasowa: 0x528ccd03 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0x00000000 Przesunięcie błędu: 0x00007fff4a74252c Identyfikator procesu powodującego błąd: 0x918 Godzina uruchomienia aplikacji powodującej błąd: 0xService_KMS.exe0 Ścieżka aplikacji powodującej błąd: Service_KMS.exe1 Ścieżka modułu powodującego błąd: Service_KMS.exe2 Identyfikator raportu: Service_KMS.exe3 Pełna nazwa pakietu powodującego błąd: Service_KMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: Service_KMS.exe5 Error: (04/26/2015 10:20:47 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/26/2015 10:20:47 PM) (Source: MSSQL$ELSAWINDB) (EventID: 17187) (User: ) Description: SQL Server is not ready to accept new client connections. Wait a few minutes before trying again. If you have access to the error log, look for the informational message that indicates that SQL Server is ready before trying to connect again. [CLIENT: 192.168.17.1] Error: (04/26/2015 10:13:58 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/26/2015 10:05:47 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/24/2015 11:41:39 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/24/2015 11:24:06 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/22/2015 10:10:31 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Błąd w pliku manifestu lub w pliku zasad "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" w wierszu UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3. Tożsamość składnika znaleziona w manifeście nie odpowiada tożsamości składnika żądanego. Odwołanie to UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definicja to UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (04/21/2015 05:54:03 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Błąd w pliku manifestu lub w pliku zasad "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" w wierszu UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3. Tożsamość składnika znaleziona w manifeście nie odpowiada tożsamości składnika żądanego. Odwołanie to UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definicja to UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (04/21/2015 05:40:55 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Błąd w pliku manifestu lub w pliku zasad "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" w wierszu UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3. Tożsamość składnika znaleziona w manifeście nie odpowiada tożsamości składnika żądanego. Odwołanie to UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definicja to UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. System errors: ============= Error: (04/26/2015 10:22:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Service KMSELDI niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (04/26/2015 10:21:30 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:30 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:29 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:29 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:29 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:29 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:21:29 PM) (Source: DCOM) (EventID: 10016) (User: IZUNIA-DELL) Description: właściwe dla aplikacjiLokalnyUruchom{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Izunia-DELLIzabelaS-1-5-21-3124128087-3043424795-594286103-1001LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (04/26/2015 10:20:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Guardant Emulator Driver z powodu następującego błędu: %%1275 Error: (04/26/2015 10:20:26 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\WINDOWS\SysWow64\Drivers\NSHE.SYS Microsoft Office Sessions: ========================= Error: (04/26/2015 10:21:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Service_KMS.exe10.4.1.0528ccd03unknown0.0.0.0000000000000000000007fff4a74252c91801d0805e6f158e2cC:\Program Files\KMSpico\Service_KMS.exeunknowndff21389-ec51-11e4-82a0-4ceb427cfd0c Error: (04/26/2015 10:20:47 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/26/2015 10:20:47 PM) (Source: MSSQL$ELSAWINDB) (EventID: 17187) (User: ) Description: [CLIENT: 192.168.17.1] Error: (04/26/2015 10:13:58 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/26/2015 10:05:47 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/24/2015 11:41:39 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/24/2015 11:24:06 PM) (Source: LCSVRHIS) (EventID: 1) (User: ZARZĄDZANIE NT) Description: ADODB.Connection open failed. Error:-2147467259. Nieokreślony błąd. Error: (04/22/2015 10:10:31 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.ManifestC:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL1 Error: (04/21/2015 05:54:03 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"c:\program files (x86)\microsoft office\Office15\lync.exe.Manifestc:\program files (x86)\microsoft office\Office15\UccApi.DLL1 Error: (04/21/2015 05:40:55 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"c:\program files (x86)\microsoft office\Office15\lync.exe.Manifestc:\program files (x86)\microsoft office\Office15\UccApi.DLL1 CodeIntegrity Errors: =================================== Date: 2015-04-26 19:34:38.621 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:47.932 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:47.698 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:47.307 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:47.073 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:46.714 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:46.479 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:46.120 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:45.886 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-24 23:39:38.823 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Percentage of memory in use: 20% Total physical RAM: 8098.04 MB Available physical RAM: 6427.34 MB Total Pagefile: 9378.04 MB Available Pagefile: 7553.98 MB Total Virtual: 131072 MB Available Virtual: 131071.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:193.43 GB) NTFS Drive d: () (Fixed) (Total:465.75 GB) (Free:370.34 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 06A70610) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================