Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by Alicja at 2015-07-02 12:13:19 Running from C:\Users\Alicja\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1784000907-981279448-3592846456-500 - Administrator - Disabled) Alicja (S-1-5-21-1784000907-981279448-3592846456-1000 - Administrator - Enabled) => C:\Users\Alicja Gość (S-1-5-21-1784000907-981279448-3592846456-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1784000907-981279448-3592846456-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Norton 360 (Disabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton 360 (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66} FW: Norton 360 (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated) Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.5.155 - Adobe Systems, Inc.) Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros) ATI Catalyst Install Manager (HKLM\...\{7300A8BE-037B-3E65-341D-E2A1A46ADBC2}) (Version: 3.0.795.0 - ATI Technologies, Inc.) Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.1.0.0 - Auslogics Labs Pty Ltd) Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version: - DICE) ccc-core-static (x32 Version: 2011.0128.1802.32290 - Nazwa firmy) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP) ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl) Clover 3.0 (HKLM-x32\...\Clover) (Version: 3.0 - EJIE Technology) Defraggler (HKLM\...\Defraggler) (Version: 2.17 - Piriform) Dropbox (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\Dropbox) (Version: 3.6.7 - Dropbox, Inc.) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON SX218 Series Printer Uninstall (HKLM\...\EPSON SX218 Series) (Version: - SEIKO EPSON Corporation) f.lux (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\Flux) (Version: - ) foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski) Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.5.116.602 - Foxit Software Inc.) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.0.6.1126 - Foxit Software Inc.) Free Download Manager 3.9.6 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG) GG (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\GG) (Version: 12 - GG Network S.A.) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) Google Drive (HKLM-x32\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.) Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Honeyview (HKLM\...\Honeyview) (Version: 5.11 - Bandisoft.com) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) JDownloader 0.9 (HKLM-x32\...\jdownloader09) (Version: 0.9 - AppWork GmbH) K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - ) Kodi (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\Kodi) (Version: - XBMC-Foundation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Camera Codec Pack (HKLM\...\{7C19409A-4C5A-49E9-B601-07383E4B6E37}) (Version: 6.3.9723.0 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 23.002.08.03.54 - Huawei Technologies Co.,Ltd) Mozilla Firefox 34.0.5 (x86 pl) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 pl)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Norton 360 (HKLM-x32\...\N360) (Version: 21.7.0.11 - Symantec Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - ) OpenFM (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\OpenFM) (Version: 2 - GG Network S.A.) OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden QupZilla 1.8.5 (HKLM-x32\...\QupZilla) (Version: 1.8.5 - QupZilla Team) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.) RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.) Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform) Spotify (HKU\S-1-5-21-1784000907-981279448-3592846456-1000\...\Spotify) (Version: 1.0.8.59.gee82e7e6 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1168 - SUPERAntiSpyware.com) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer) TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.11C - TOSHIBA CORPORATION) TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{5BA99779-6E12-49EF-BE49-F35B1EDB4DF9}) (Version: 1.0.4 - TOSHIBA CORPORATION) Utility Common Driver (x32 Version: 1.0.52.2C - TOSHIBA) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) Xilisoft Video Converter Ultimate 6 (HKLM-x32\...\Xilisoft Video Converter Ultimate 6) (Version: 6.0.7.0707 - Xilisoft) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 -> C:\Program Files\Honeyview\HVShell64.dll (Bandisoft.com) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1784000907-981279448-3592846456-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Alicja\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) ==================== Restore Points ========================= 25-05-2015 21:57:52 Zaplanowany punkt kontrolny 02-06-2015 18:18:08 Zaplanowany punkt kontrolny 11-06-2015 00:20:42 Zaplanowany punkt kontrolny 11-06-2015 03:00:18 Windows Update 24-06-2015 21:30:25 Zaplanowany punkt kontrolny 29-06-2015 13:19:07 Installed inSSIDer Home 29-06-2015 13:33:30 Removed inSSIDer Home 29-06-2015 13:35:11 Removed GFI LANguard Network Security Scanner 5.0 29-06-2015 13:37:48 Removed Blackmagic Fusion 29-06-2015 17:25:41 Czyszczenie rejestru przez pro 02-07-2015 10:51:17 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 02-07-2015 10:52:02 Zainstalowany program DirectX 02-07-2015 11:24:05 Windows Update ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {03107F53-7D4D-46A7-8D73-D906247C97B8} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\WSCStub.exe [2015-06-16] (Symantec Corporation) Task: {08B3A7E5-123F-4A3F-8D62-3FF12FE3B8A9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {1A1B9EF1-E69B-4E2A-BA77-4BDA70E1F333} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-10] (Google Inc.) Task: {4143BCA8-C235-477D-8EA3-9A979EBBD909} - System32\Tasks\{B5024A63-5535-4CA9-86D5-5121842A3072} => pcalua.exe -a "C:\Program Files (x86)\Xilisoft\Video Converter Ultimate 6\Uninstall.exe" Task: {44EE33A2-7DA9-4F80-ABCE-123D0CE56B1F} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {48DE6949-D55A-4A40-B6DA-42860FFD84F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-10] (Google Inc.) Task: {4E2A56E8-2FF6-47D9-8E56-8CAE7E62772D} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe Task: {66797591-C26E-45CA-85A8-75F67B25A03F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1784000907-981279448-3592846456-1000Core => C:\Users\Alicja\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {70A29CD6-02A9-4D0A-A781-CF81FF4EB1C6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd) Task: {723D8B30-65AE-49ED-A9D3-B822A60358C1} - System32\Tasks\Opera scheduled Autoupdate 1421846189 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software) Task: {ACD40724-F317-4D57-B4C3-022EBF82600E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {B4B842B0-3B1F-47A5-8B9C-8C540A445B4D} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {B5ACB932-810A-4CD9-B9AF-BF244352F0BE} - System32\Tasks\{3EAF8A8D-B7DE-4FB1-AF80-FD1549F4CAE9} => pcalua.exe -a "C:\Program Files (x86)\Essential Data Tools\AnyReader\UninsHs.exe" -c /u0={AEB8F226-C238-4636-A289-E540B725B5BB} Task: {C6D3F8D0-5D91-4E7A-8A3B-0A96A8D4CE91} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {CE5F56FF-FBEC-44B0-8777-30645178073C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1784000907-981279448-3592846456-1000UA => C:\Users\Alicja\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1784000907-981279448-3592846456-1000Core.job => C:\Users\Alicja\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1784000907-981279448-3592846456-1000UA.job => C:\Users\Alicja\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2011-03-14 17:27 - 2011-03-14 17:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe 2015-01-20 18:24 - 2015-01-21 14:17 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2015-01-10 16:12 - 2015-07-02 11:35 - 00017920 _____ () C:\Windows\System32\rpcnetp.exe 2015-01-10 21:29 - 2007-09-02 14:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe 2011-01-28 19:01 - 2011-01-28 19:01 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2015-01-10 21:29 - 2007-09-02 14:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll 2015-06-22 22:21 - 2015-06-20 07:46 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll 2015-06-22 22:21 - 2015-06-20 07:46 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll 2015-06-22 22:21 - 2015-06-20 07:46 - 15003976 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1784000907-981279448-3592846456-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Alicja\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 10.10.10.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Who Is On My Wifi.lnk => C:\Windows\pss\Who Is On My Wifi.lnk.CommonStartup MSCONFIG\startupreg: Dropbox Update => "C:\Users\Alicja\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c MSCONFIG\startupreg: Spotify => "C:\Users\Alicja\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Alicja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{A20DED86-3A5C-44D5-A648-4EFC06C2138A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{518BC44B-9A2F-4DCF-9E1E-CA9842752C93}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4963F838-2D30-46D9-8DD1-726C63D80311}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{9D25BDB3-E6FC-45B7-BCC8-6B9156E77463}C:\users\alicja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alicja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{95785C84-37BE-45E7-8CE4-35962142139E}C:\users\alicja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alicja\appdata\roaming\spotify\spotify.exe FirewallRules: [{24A9E402-1269-4F49-8E12-3ECF18E2D1FD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FAC65E38-4237-4475-AA90-4BDD465BFDC6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{1F05CE16-D580-4DCB-93C4-42E008D0F19E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe FirewallRules: [{F914268A-9D43-41C6-AF51-D61371AE42D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe FirewallRules: [{0637B03C-CBF1-421A-9C54-FADD158F5AFF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{1BB9F548-56A0-4145-A44C-A1B6516C7CC8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{276CE12F-9488-4FCD-835D-1657393B198F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{9D91E1EA-FBCB-4055-9D13-618E6B560A55}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{29EE3900-189D-4997-AEFC-39D9A90A9C90}] => (Allow) C:\Users\Alicja\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{928A11AF-7581-4D2A-B810-D5C8F29DCBAC}] => (Allow) C:\Users\Alicja\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{F5B2047F-C1A9-435E-93F6-B2AEC85F021B}] => (Allow) C:\Users\Alicja\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{2875D782-C448-48E7-913D-8AD97B4111FE}] => (Allow) C:\Users\Alicja\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{049122F1-DBE4-4823-BAAE-121DB67E6F62}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{E3BA12F4-72B7-44F2-9CFA-8AD7C773C9B1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{73F12F10-CA89-4BE1-A77A-003444A71B60}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{4DF57BA8-8B23-4444-98A6-4091D71E6F65}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{F082362C-5F51-49D6-8E50-4485F7CED17E}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{67A91D69-3CFD-4770-B6DF-26F303A9166D}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [TCP Query User{4ECCAC1A-09FB-4628-9C5A-E479BDF98593}C:\users\alicja\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\alicja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7724CFF6-4486-4B3C-AB4A-D867BC03895D}C:\users\alicja\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\alicja\appdata\roaming\spotify\spotify.exe FirewallRules: [{5CF61D3E-9727-4B89-A9C4-E07850AE7F1F}] => (Allow) C:\Users\Alicja\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{F3F36EC7-A0D7-4B76-ABCF-847FE05A7C6D}] => (Allow) C:\Users\Alicja\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{5F795329-FDA4-44E6-8497-34343EC80DCE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{CB08D00E-9DEE-40B0-AE3B-D32604507C1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{161CB558-E7A5-4CE3-9719-802BCA5C56EE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{F6844EAD-E24D-4C23-9968-BFDEA0D165E0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{E57A5EA4-BBCE-4DEF-9259-6916A1D0F7A9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/02/2015 11:38:38 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - Wystąpił błąd podczas inicjacji infrastruktury dołączania interfejsu API profilowania. Ten proces nie zezwoli na dołączenie profilera. HRESULT: 0x80004005. Identyfikator procesu (liczba dziesiętna): 3484. Identyfikator komunikatu: [0x2509]. Error: (07/02/2015 11:37:27 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/02/2015 10:38:10 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4216. Message ID: [0x2509]. Error: (07/02/2015 10:13:29 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 5408. Message ID: [0x2509]. Error: (07/02/2015 10:05:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: N360.exe, wersja: 12.11.4.4, sygnatura czasowa: 0x53f531a0 Nazwa modułu powodującego błąd: avModule.dll, wersja: 21.4.0.2, sygnatura czasowa: 0x53eea02d Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0006ec20 Identyfikator procesu powodującego błąd: 0x784 Godzina uruchomienia aplikacji powodującej błąd: 0xN360.exe0 Ścieżka aplikacji powodującej błąd: N360.exe1 Ścieżka modułu powodującego błąd: N360.exe2 Identyfikator raportu: N360.exe3 Error: (07/02/2015 09:17:50 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 10:30:42 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 06:35:48 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 05:02:29 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 6736. Message ID: [0x2509]. Error: (06/30/2015 06:35:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (07/02/2015 00:12:30 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie C:. Error: (07/02/2015 00:12:30 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Error: (07/02/2015 00:12:30 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Error: (07/02/2015 11:57:45 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Error: (07/02/2015 11:35:24 AM) (Source: Application Popup) (EventID: 877) (User: ) Description: Wystąpił błąd [DATABASE OPEN FAILED] podczas przetwarzania bazy danych sterowników. Error: (07/02/2015 10:06:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Norton 360 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (07/02/2015 09:21:01 AM) (Source: Disk) (EventID: 11) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1. Error: (07/02/2015 09:19:17 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Error: (07/01/2015 10:35:54 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Error: (07/01/2015 06:36:46 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku. Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume2. Microsoft Office: ========================= Error: (07/02/2015 11:38:38 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - Wystąpił błąd podczas inicjacji infrastruktury dołączania interfejsu API profilowania. Ten proces nie zezwoli na dołączenie profilera. HRESULT: 0x80004005. Identyfikator procesu (liczba dziesiętna): 3484. Identyfikator komunikatu: [0x2509]. Error: (07/02/2015 11:37:27 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/02/2015 10:38:10 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4216. Message ID: [0x2509]. Error: (07/02/2015 10:13:29 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 5408. Message ID: [0x2509]. Error: (07/02/2015 10:05:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: N360.exe12.11.4.453f531a0avModule.dll21.4.0.253eea02dc00000050006ec2078401d0b4970aabfb7bC:\Program Files (x86)\Norton 360\Engine\21.7.0.11\N360.exeC:\Program Files (x86)\Norton 360\Engine\21.7.0.11\avModule.dll23132c3a-2091-11e5-80d1-1c75088bd705 Error: (07/02/2015 09:17:50 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 10:30:42 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 06:35:48 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2015 05:02:29 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 6736. Message ID: [0x2509]. Error: (06/30/2015 06:35:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz Percentage of memory in use: 52% Total physical RAM: 3954.67 MB Available physical RAM: 1894.07 MB Total Pagefile: 7907.55 MB Available Pagefile: 5301.37 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:146.48 GB) (Free:10.61 GB) NTFS Drive d: () (Fixed) (Total:292.97 GB) (Free:123.28 GB) NTFS Drive e: () (Fixed) (Total:26.21 GB) (Free:26.09 GB) NTFS Drive g: (KINGSTON DT) (Removable) (Total:14.93 GB) (Free:1.78 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0D7815C9) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=146.5 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=293 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=26.2 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 14.9 GB) (Disk ID: F5A61371) Partition 1: (Active) - (Size=14.9 GB) - (Type=0C) Partition 2: (Not Active) - (Size=32 KB) - (Type=21) ==================== End of log ============================