Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-07-2015 Ran by Marcin at 2015-07-08 11:42:37 Running from C:\Users\Marcin\Downloads\Nowy folder Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1528271663-2433272372-2689265756-500 - Administrator - Disabled) Gość (S-1-5-21-1528271663-2433272372-2689265756-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1528271663-2433272372-2689265756-1006 - Limited - Enabled) Marcin (S-1-5-21-1528271663-2433272372-2689265756-1001 - Administrator - Enabled) => C:\Users\Marcin ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: AVG update module (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG update module (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} FW: AVG update module (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 1500 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden 1500_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden 1500Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden Adobe Reader XI (11.0.11) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) AIO_CDB_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden AIO_CDB_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6030 - AVG Technologies) AVG 2015 (Version: 15.0.4365 - AVG Technologies) Hidden AVG 2015 (Version: 15.0.6030 - AVG Technologies) Hidden Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation) BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden Car Mechanic Simulator 2015 (HKLM-x32\...\Car Mechanic Simulator 2015_is1) (Version: - ) Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD) CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform) Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.4704.58 - CyberLink Corp.) Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden GG (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\GG) (Version: 12 - GG Network S.A.) Google Chrome (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden IC_Katalog ONLINE (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\8fe0a249888b2f6b) (Version: 2.5.10.0 - Inter Cars) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Mozilla Firefox 38.0.5 (x86 pl) (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\Mozilla Firefox 38.0.5 (x86 pl)) (Version: 38.0.5 - Mozilla) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.4.11800.21.100 - Nero AG) Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG) Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG) Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.0.13400.11.100 - Nero AG) Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13200 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG) Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10600.2.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG) Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.0.11100.8.100 - Nero AG) Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10600.2.100 - Nero AG) Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP) Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.) Raptr (HKLM-x32\...\Raptr) (Version: - ) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games) Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden SopCast 3.9.6 (HKLM-x32\...\SopCast) (Version: 3.9.6 - www.sopcast.com) Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden World of Tanks (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warships (HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1528271663-2433272372-2689265756-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Marcin\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1528271663-2433272372-2689265756-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-1528271663-2433272372-2689265756-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Marcin\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.) ==================== Restore Points ========================= 03-07-2015 09:21:20 Zaplanowany punkt kontrolny 08-07-2015 10:56:37 Operacja przywracania ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {227860A7-C159-42A9-AECA-5B9748EA463B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1528271663-2433272372-2689265756-1001UA => C:\Users\Marcin\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.) Task: {36303498-6303-4A05-96F7-DB7A84A3524F} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Komp-Marcin Komp => E:\Programy\Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation) Task: {48A0A1FD-96AA-48E5-B624-3FD95CFF4E67} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1528271663-2433272372-2689265756-1001Core => C:\Users\Marcin\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.) Task: {655789C7-CC67-47DA-97A0-C81B5CED6A4A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {911D3889-0B42-46C1-B8E1-8EBE27AEA11B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => E:\Programy\Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {AD0A2810-3A20-4828-A466-C6BB74B4DFBB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => E:\Programy\Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {C2373228-DE52-42D1-A812-F696C0EAE0D7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-06-10] (Microsoft Corporation) Task: {C5ACC163-EFF8-4DDD-B3AC-A0D9FB74BF5A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1528271663-2433272372-2689265756-1001Core.job => C:\Users\Marcin\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1528271663-2433272372-2689265756-1001UA.job => C:\Users\Marcin\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-06-23 00:14 - 2015-06-20 07:46 - 01281864 _____ () C:\Users\Marcin\AppData\Local\Google\Chrome\Application\43.0.2357.130\libglesv2.dll 2015-06-23 00:14 - 2015-06-20 07:46 - 00080712 _____ () C:\Users\Marcin\AppData\Local\Google\Chrome\Application\43.0.2357.130\libegl.dll 2015-06-23 00:14 - 2015-06-20 07:46 - 15003976 _____ () C:\Users\Marcin\AppData\Local\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1528271663-2433272372-2689265756-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marcin\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta z Przeglądarki fotografii systemu Windows.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk" HKLM\...\StartupApproved\Run32: => "Raptr" HKLM\...\StartupApproved\Run32: => "HP Software Update" HKLM\...\StartupApproved\Run32: => "PowerDVD14Agent" HKLM\...\StartupApproved\Run32: => "Adobe ARM" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [UDP Query User{0359B925-55EB-4F53-9466-22FA8F0DA821}F:\wot\wotlauncher.exe] => (Allow) F:\wot\wotlauncher.exe FirewallRules: [TCP Query User{41787733-A6FC-4B5B-81AE-CB374BD4DE3F}F:\wot\wotlauncher.exe] => (Allow) F:\wot\wotlauncher.exe FirewallRules: [UDP Query User{5CF8AD42-1EC8-4F9F-8E22-EF58F043FE84}E:\programy\mozilla\firefox.exe] => (Block) E:\programy\mozilla\firefox.exe FirewallRules: [TCP Query User{1184EFEB-206C-42C5-975C-F78EB73DB9F1}E:\programy\mozilla\firefox.exe] => (Block) E:\programy\mozilla\firefox.exe FirewallRules: [UDP Query User{BA679E2D-0A10-4DB6-97B4-C7E913BDD45B}F:\wot\worldoftanks.exe] => (Allow) F:\wot\worldoftanks.exe FirewallRules: [TCP Query User{46639FAE-CEE1-49D2-B1C9-29039134DAB7}F:\wot\worldoftanks.exe] => (Allow) F:\wot\worldoftanks.exe FirewallRules: [{EDA2D657-3548-40E2-9726-899A0DC226F8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe FirewallRules: [{F5960DB6-F796-4F59-ACD1-9B62C9D6B2BC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe FirewallRules: [{81AE436E-E064-4EC7-8A62-45B7E428A6C6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe FirewallRules: [{46FBD6AB-716C-4184-8965-8DA95F7D4C67}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe FirewallRules: [{EC452353-776E-43FD-ACB4-B9AD7B91750D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe FirewallRules: [UDP Query User{E7F58A95-D2AE-4F68-B8A9-F806AAF34EF5}E:\programy\sopcast\sopcast.exe] => (Allow) E:\programy\sopcast\sopcast.exe FirewallRules: [TCP Query User{D52D0ADF-18F4-4A29-8E87-F47F795CD4B3}E:\programy\sopcast\sopcast.exe] => (Allow) E:\programy\sopcast\sopcast.exe FirewallRules: [UDP Query User{B6001164-B66E-4578-BED7-24CD9C6E112A}F:\wot\worldoftanks.exe] => (Allow) F:\wot\worldoftanks.exe FirewallRules: [TCP Query User{F7B6EEB7-5F5C-432B-AFC8-EECE2A7A1A10}F:\wot\worldoftanks.exe] => (Allow) F:\wot\worldoftanks.exe FirewallRules: [UDP Query User{6FD26380-0535-4E73-987A-733F2ED7B3C0}F:\wot\wotlauncher.exe] => (Allow) F:\wot\wotlauncher.exe FirewallRules: [TCP Query User{6D38192D-9E36-4AE1-AFEA-D1AA609E8973}F:\wot\wotlauncher.exe] => (Allow) F:\wot\wotlauncher.exe FirewallRules: [{9E9673CE-8C4E-4199-818B-F8FED5A78316}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{1B5426AB-36EB-4266-9267-7BB834EBFD41}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{BB659D46-4330-4B3B-BE26-E225990C98F5}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqfxt08.exe FirewallRules: [{C8FCA73C-DFFF-4359-ABEB-ABC109891BAC}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpofxs08.exe FirewallRules: [{B983FE9E-F1B7-4FE6-815C-CA83A1B53103}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{9FAD3B0F-498D-4C95-AFE9-1F35600BC9F4}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqnrs08.exe FirewallRules: [{B731DECA-FE51-4B63-9110-4DA0A173B0E8}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{BD3ACF9F-B3F8-48E6-A828-AD6D12AE4B63}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpzwiz01.exe FirewallRules: [{3EA25F0A-5554-4D88-88B6-81A4B5A251BA}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{A1DE6285-5502-4DFA-81C4-CEA98CF90269}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{6AC15BCE-C766-42C2-B94A-2481B664AF9D}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{0ABC76EC-4041-4FE4-8AEC-384CAEDEA0E5}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{7724E5A1-6F33-4B84-930F-B629B3238BB5}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hposfx08.exe FirewallRules: [{9C7DCF7E-C836-4633-BDF3-1C7A605B3C44}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpofxm08.exe FirewallRules: [{6E7D3F07-35BE-4253-B6DD-B4E27940EEC6}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{315355C4-EA93-42E7-B6B6-EDBD2A1A54C3}] => (Allow) E:\Programy\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{89C99017-2696-4121-969F-FD25047B79E2}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{BE47922E-5349-4A2B-872D-892BE2605D1A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{E0E0923B-9DF7-4E65-A204-73F65AD6D565}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{33B87EDA-A864-4C29-AC1B-82CF6E9B9611}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{93AA072D-7654-4D01-9BFB-CB2093271218}] => (Allow) E:\Programy\Office\Office15\outlook.exe FirewallRules: [{97790059-17CC-4602-885F-8F075B2B183A}] => (Allow) E:\Programy\Office\Office15\UcMapi.exe FirewallRules: [{F6E313A8-41BB-4A1D-837D-A855A9A054A8}] => (Allow) E:\Programy\Office\Office15\UcMapi.exe FirewallRules: [{786BDA12-801D-4676-B2BB-91386983DFF7}] => (Allow) E:\Programy\Office\Office15\lync.exe FirewallRules: [{B41D0CDA-5DFF-4A98-98B0-5D6CF99945F1}] => (Allow) E:\Programy\Office\Office15\lync.exe FirewallRules: [{57E246B3-6204-4C83-9527-1D0CB73A7FD1}] => (Allow) E:\Programy\Steam\bin\steamwebhelper.exe FirewallRules: [{71A701E2-02CE-4943-8E87-3998644B73B4}] => (Allow) E:\Programy\Steam\bin\steamwebhelper.exe FirewallRules: [{10DF2B60-21FD-461A-9ABE-890D96622523}] => (Allow) E:\Programy\Steam\Steam.exe FirewallRules: [{48860CA8-FBC3-418F-9B91-11C24CECB829}] => (Allow) E:\Programy\Steam\Steam.exe FirewallRules: [UDP Query User{00E2E71A-F3CE-4C3A-817E-C04D657D7805}E:\programy\mozilla\firefox.exe] => (Block) E:\programy\mozilla\firefox.exe FirewallRules: [TCP Query User{809A91B4-0F59-449E-8B31-B6FDE05879B6}E:\programy\mozilla\firefox.exe] => (Block) E:\programy\mozilla\firefox.exe FirewallRules: [{F6506A1C-A867-454C-951A-ABEC44ED5D72}] => (Allow) E:\Programy\AVG\avgemca.exe FirewallRules: [{E5B448CF-6C40-4506-A7A0-CFB0793B15D5}] => (Allow) E:\Programy\AVG\avgemca.exe FirewallRules: [{648A22A0-CF59-482A-97AC-BA709F150013}] => (Allow) E:\Programy\AVG\avgmfapx.exe FirewallRules: [{8B8C7DFA-135E-4010-AE30-DE2BC29D414A}] => (Allow) E:\Programy\AVG\avgmfapx.exe FirewallRules: [{6EA1F480-32D3-493B-87F5-559BCBA1CD61}] => (Allow) E:\Programy\AVG\avgdiagex.exe FirewallRules: [{28A8CC85-E931-4242-B4D2-E903B61FFC5E}] => (Allow) E:\Programy\AVG\avgdiagex.exe FirewallRules: [{442DE9DB-181E-4538-84A1-58C9A0644AC9}] => (Allow) E:\Programy\AVG\avgnsa.exe FirewallRules: [{85CC3721-EB30-4058-B600-18AAFE58DEF0}] => (Allow) E:\Programy\AVG\avgnsa.exe FirewallRules: [UDP Query User{0B8A265E-8379-434D-8E1F-74C9463A74A0}E:\programy\winamp\winamp.exe] => (Block) E:\programy\winamp\winamp.exe FirewallRules: [TCP Query User{D13E87CD-99AA-440A-B01D-B3DBF575C20C}E:\programy\winamp\winamp.exe] => (Block) E:\programy\winamp\winamp.exe FirewallRules: [TCP Query User{E8D8CD19-735B-408B-8958-5D7DA2A06A84}E:\programy\winamp\winamp.exe] => (Allow) E:\programy\winamp\winamp.exe FirewallRules: [UDP Query User{C341D2FD-B8C6-4C79-BAC1-B92E7E60A149}E:\programy\winamp\winamp.exe] => (Allow) E:\programy\winamp\winamp.exe FirewallRules: [{C4736C45-86AB-41D2-9D95-03445051B85A}] => (Allow) LPort=80 FirewallRules: [{341A15D0-20BE-4445-8D2F-26575931BB93}] => (Allow) LPort=443 FirewallRules: [{B6C0EB2A-21E6-42AF-A46B-BBB444BAC075}] => (Allow) LPort=20010 FirewallRules: [{73259103-6493-468A-880F-3ED93BB33B16}] => (Allow) LPort=3478 FirewallRules: [{6AE762E8-52CE-409A-8738-5C58C03514C8}] => (Allow) LPort=7850 FirewallRules: [{85C85F3F-7289-4E85-92FD-9B5B82E63335}] => (Allow) LPort=7852 FirewallRules: [{20EA8FA8-9991-4B41-8CC9-062AFAEA4FCC}] => (Allow) LPort=7853 FirewallRules: [{EAA10F48-6BDC-4EA4-8DA5-3FCCF36F3DFD}] => (Allow) LPort=27022 FirewallRules: [{90E4760A-F1B6-40A6-8C70-6F70384AAEA3}] => (Allow) LPort=6881 FirewallRules: [{ABF81BA0-523D-44B9-BD32-AEDEACBACC58}] => (Allow) LPort=33333 FirewallRules: [{F0A8BBF0-FF42-4EA3-A7B7-9E634B5D3B77}] => (Allow) LPort=20443 FirewallRules: [{CEC85530-E3B4-4748-B54B-3E66F7406D42}] => (Allow) LPort=8090 FirewallRules: [TCP Query User{B76D0BD6-55E2-4234-956D-2994A720964B}F:\war thunder\launcher.exe] => (Allow) F:\war thunder\launcher.exe FirewallRules: [UDP Query User{196D9A87-F7E1-4D9E-A774-144CF4127585}F:\war thunder\launcher.exe] => (Allow) F:\war thunder\launcher.exe FirewallRules: [TCP Query User{C788DABA-B19C-439F-9A01-04C8D0862383}E:\programy\sopcast\sopcast.exe] => (Allow) E:\programy\sopcast\sopcast.exe FirewallRules: [UDP Query User{D22804E0-074A-4771-96C2-EE05ED3608E5}E:\programy\sopcast\sopcast.exe] => (Allow) E:\programy\sopcast\sopcast.exe FirewallRules: [TCP Query User{319205BD-E658-47A8-8F7F-B9B277D87E0F}F:\war thunder\aces.exe] => (Allow) F:\war thunder\aces.exe FirewallRules: [UDP Query User{2D0BE636-484E-4440-82A0-6F27F143DA82}F:\war thunder\aces.exe] => (Allow) F:\war thunder\aces.exe FirewallRules: [{1FD8AA3D-D12D-4F07-8BB1-C8BE4176B9F8}] => (Allow) E:\Programy\Office\Office15\lync.exe FirewallRules: [{D982D199-19F3-45E0-896B-73D4160AA8CB}] => (Allow) E:\Programy\Office\Office15\lync.exe FirewallRules: [{413FF530-91B6-4543-ABC6-4CCEA7F7E2F3}] => (Allow) E:\Programy\Office\Office15\UcMapi.exe FirewallRules: [{13CD0144-4EBF-4A62-9F05-1075E0505B00}] => (Allow) E:\Programy\Office\Office15\UcMapi.exe FirewallRules: [{01B9F83E-B93A-408B-ACF7-09850334A045}] => (Allow) E:\Programy\AVG\avgmfapx.exe FirewallRules: [{B5362F1F-5AAC-46BD-906D-0AD134B69973}] => (Allow) E:\Programy\AVG\avgmfapx.exe FirewallRules: [{7196CC8A-ACE5-4F78-971C-F97985D3D0F5}] => (Allow) E:\Programy\AVG\avgnsa.exe FirewallRules: [{E57ED798-936E-4E30-84A6-3DFE2B53A8F1}] => (Allow) E:\Programy\AVG\avgnsa.exe FirewallRules: [{CCA0127E-7093-4A2E-95AE-C4F58F18A7FD}] => (Allow) E:\Programy\AVG\avgdiagex.exe FirewallRules: [{E39104DD-DD3C-4807-9EE4-BC3E6CB9BDEA}] => (Allow) E:\Programy\AVG\avgdiagex.exe FirewallRules: [{17B8770F-4515-45BD-970D-45C864E8B6BB}] => (Allow) E:\Programy\AVG\avgemca.exe FirewallRules: [{669501EA-9AD5-45E6-B934-BB1213706419}] => (Allow) E:\Programy\AVG\avgemca.exe FirewallRules: [TCP Query User{5E55028C-2B53-43AB-9EFD-E4CA6487DB32}F:\wow\wowslauncher.exe] => (Allow) F:\wow\wowslauncher.exe FirewallRules: [UDP Query User{5BD534D1-6EC5-432D-A19E-1BF23B01E100}F:\wow\wowslauncher.exe] => (Allow) F:\wow\wowslauncher.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/08/2015 11:33:22 AM) (Source: System Restore) (EventID: 8210) (User: ) Description: Wystąpił nieokreślony błąd podczas przywracania systemu: (Operacja przywracania). Informacje dodatkowe: 0x80070005. Error: (07/08/2015 11:14:33 AM) (Source: System Restore) (EventID: 8210) (User: ) Description: Wystąpił nieokreślony błąd podczas przywracania systemu: (Zaplanowany punkt kontrolny). Informacje dodatkowe: 0x80070005. Error: (07/08/2015 10:56:48 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Nie można zainicjować indeksu. Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Nie można zainicjować aplikacji. Kontekst: aplikacja Windows Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Nie można zainicjować obiektu programu zbierającego. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować wtyczki w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 3057) (User: ) Description: Nie można zainicjować menedżera wtyczek . Kontekst: aplikacja Windows Szczegóły: (HRESULT : 0x8e5e0210) (0x8e5e0210) Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: The catalog is corrupt. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. 0xc0041801 (0xc0041801) Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Usługa wyszukiwania wykryła uszkodzone pliki danych w indeksie {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)}. Usługa podejmie próbę automatycznego rozwiązania tego problemu przez odbudowanie indeksu. Szczegóły: 0x8e5e0210 (0x8e5e0210) System errors: ============= Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Error: (07/08/2015 11:42:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa listy sieci zakończyła działanie; wystąpił następujący błąd: %%127 Microsoft Office: ========================= Error: (07/08/2015 11:33:22 AM) (Source: System Restore) (EventID: 8210) (User: ) Description: Operacja przywracania0x80070005 Error: (07/08/2015 11:14:33 AM) (Source: System Restore) (EventID: 8210) (User: ) Description: Zaplanowany punkt kontrolny0x80070005 Error: (07/08/2015 10:56:48 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Kontekst: aplikacja Windows Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Error: (07/08/2015 10:38:40 AM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć określonego obiektu. Określ nazwę istniejącego obiektu. (HRESULT : 0x80040d06) (0x80040d06) Search.TripoliIndexer Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 3057) (User: ) Description: Kontekst: aplikacja Windows Szczegóły: (HRESULT : 0x8e5e0210) (0x8e5e0210) Search.TripoliIndexer Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Szczegóły: Wykaz indeksów zawartości jest uszkodzony. 0xc0041801 (0xc0041801) The catalog is corrupt Error: (07/08/2015 10:38:39 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Szczegóły: 0x8e5e0210 (0x8e5e0210) 4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167) ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz Percentage of memory in use: 31% Total physical RAM: 4094.49 MB Available physical RAM: 2786.33 MB Total Virtual: 8190.49 MB Available Virtual: 6657.64 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:51.09 GB) (Free:21.75 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Dysk Lokalny) (Fixed) (Total:50.79 GB) (Free:19.15 GB) NTFS Drive e: (Dysk Lokalny) (Fixed) (Total:40.11 GB) (Free:12.61 GB) NTFS Drive f: (GRY) (Fixed) (Total:90.9 GB) (Free:64.18 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 1928E44E) Partition 1: (Active) - (Size=51.1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=50.8 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=40.1 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=90.9 GB) - (Type=07 NTFS) ==================== End of log ============================