Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-07-2015 Ran by Artur at 2015-07-11 15:51:27 Running from C:\Users\Artur\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3698236117-931745765-820054799-500 - Administrator - Disabled) Artur (S-1-5-21-3698236117-931745765-820054799-1001 - Administrator - Enabled) => C:\Users\Artur Guest (S-1-5-21-3698236117-931745765-820054799-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3698236117-931745765-820054799-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D} AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3698236117-931745765-820054799-1001\...\uTorrent) (Version: 3.4.1.30768 - BitTorrent Inc.) 32 Bit HP CIO Components Installer (Version: 16.1.1 - Hewlett-Packard) Hidden 7-Zip 9.38 beta (HKLM\...\7-Zip) (Version: - ) Adobe Acrobat Reader DC - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 18.0.0.144 - Adobe Systems Incorporated) Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.203 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.203 - Adobe Systems Incorporated) AviSynth 2.5 (HKLM\...\AviSynth) (Version: - ) Bitdefender Internet Security 2015 (HKLM\...\Bitdefender) (Version: 18.23.0.1604 - Bitdefender) CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5666 - CDBurnerXP) CoreAVC Professional Edition (remove only) (HKLM\...\CoreAVC Professional Edition) (Version: - ) CryptoPrevent (HKLM\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: - Foolish IT LLC) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden e-Deklaracje Desktop (HKLM\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 7.0.3 - Ministerstwo Finansow) e-Deklaracje Desktop (Version: 7.0.3 - Ministerstwo Finansow) Hidden Febooti fileTweak Hash and CRC (HKLM\...\{DE1DDAC8-0451-4F16-B63D-B72FBCBC9BF6}) (Version: 3.0.0 - Febooti Software) ffdshow v1.3.4532 [2014-07-17] (HKLM\...\ffdshow_is1) (Version: 1.3.4532.0 - ) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Haali Media Splitter (HKLM\...\HaaliMkx) (Version: - ) Intel® SSD Toolbox (HKLM\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.3.0.400 - Intel Corporation) Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Komunikator WTW 1.10.0.4680 (HKLM\...\{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}) (Version: 1.10.0.4680 - K2T.eu) Leawo Blu-ray Player version 1.9.0.3 (HKLM\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.0.3 - leawo Software) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden Network Activity Indicator for Windows 7 (HKLM\...\NetworkIndicator_is1) (Version: 1.6 - IT Samples) Nokia Connectivity Cable Driver (HKLM\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia) Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia) Nokia PC Suite (Version: 7.1.180.94 - Nokia) Hidden NVIDIA 3D Vision Controller Driver 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation) NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.44 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation) NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation) Opera 12.16 (HKLM\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA) Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Pakiet sterowników systemu Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia) Panda USB Vaccine 1.0.1.4 (HKLM\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security) Panel sterowania NVIDIA 341.44 (Version: 341.44 - NVIDIA Corporation) Hidden PC Connectivity Solution (HKLM\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia) Poczta usługi Windows Live (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Podstawowe programy Windows Live (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden Subtitle Workshop 2.51 (HKLM\...\SubtitleWorkshop) (Version: - ) UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.0.6 - uvnc bvba) Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Watchtower Library 2014 - wydanie polskie (HKLM\...\{F72C5095-7309-410E-A520-FBB518E03D78}) (Version: 16.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.) WOT dla przegladarki Internet Explorer (HKLM\...\{373B90E1-A28C-434C-92B6-7281AFA6115A}) (Version: 13.9.2.0 - WOT Services Oy) Wtyczka e-Deklaracje (HKLM\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: 4.1.0 - Ministerstwo Finansów) Youtube Downloader HD v. 2.9.9.23 (HKLM\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3698236117-931745765-820054799-1001_Classes\CLSID\{1BBF13E0-551E-42DD-91F4-1A547443FFDA}\InprocServer32 -> C:\Users\Artur\AppData\Local\Tbccint\Community Alerts\Alert.dll (ClientConnect Ltd.) ==================== Restore Points ========================= ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0C503413-12FE-4E93-8A4C-59AB5D5BF86E} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe [2015-07-05] (Bitdefender) Task: {1CE57F8E-67B8-4E03-97D8-6E42E5052C47} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation) Task: {20F5B5A8-A955-42CC-B01C-697121DF7280} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation) Task: {2194CDD9-41EA-473B-B120-199A8F2BDA80} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd) Task: {3AFB7A4D-98A3-43A4-90C8-C5A56FD978BE} - System32\Tasks\{DB41AEC3-87E4-4B1A-89AA-647A6D184C54} => C:\Users\Artur\Desktop\NokiaSoftwareUpdaterSetup_PL.exe [2015-07-06] () Task: {43808DFB-7E6F-4691-AE94-99A41CDD351A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3698236117-931745765-820054799-1001 Task: {4538FE65-D0B8-45BC-BCC1-D1D17DAAD455} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {6201B47E-5101-4D25-8735-F3BA172241A8} - System32\Tasks\{C7D912B2-ACC7-4AD4-BABA-9022857B15FA} => C:\Program Files\Intel\Intel(R) SSD Toolbox\Intel SSD Toolbox.exe [2015-05-05] (Intel) Task: {9CBB9434-6CB8-4D50-933D-197B385B4900} - System32\Tasks\PandaUSBVaccine => C:\Program Files\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] () Task: {C130320F-8942-4E6A-ABD4-48F600458CFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-09] (Adobe Systems Incorporated) Task: {E0852E66-B637-4DB9-9691-9044F5953A3A} - System32\Tasks\{CDDF1EF5-9029-420B-ACE4-18E7E31F1005} => C:\Users\Artur\Desktop\NokiaSoftwareUpdaterSetup_PL.exe [2015-07-06] () (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (Whitelisted) ============== 2015-07-05 16:39 - 2014-08-27 16:30 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll 2015-07-05 16:39 - 2013-09-03 14:29 - 00095088 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll 2014-10-25 16:38 - 2015-06-22 16:22 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui 2015-07-05 16:39 - 2012-10-29 14:22 - 00130656 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll 2015-07-05 16:45 - 2015-07-05 16:45 - 00682736 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00242_005\ashttpbr.mdl 2015-07-05 16:45 - 2015-07-05 16:45 - 00603432 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00242_005\ashttpdsp.mdl 2015-07-05 16:45 - 2015-07-05 16:45 - 02207112 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00242_005\ashttpph.mdl 2015-07-05 16:45 - 2015-07-05 16:45 - 01131304 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00242_005\ashttprbl.mdl 2014-04-12 19:23 - 2015-02-04 04:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Artur\Desktop\36j6d8v6.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\blurayplayer_setup.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\CryptoPreventSetup.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\DVDFabPasskey8241.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\FreeScreenVideoRecorder.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\FRST.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\NokiaSoftwareUpdaterSetup_PL.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\Nokia_PC_Suite_pol_web.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\UltraVNC_1_2_06_X86_Setup.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\youtube-downloader-portable.exe:BDU AlternateDataStreams: C:\Users\Artur\Desktop\youtube_downloader_hd_setup.exe:BDU ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3698236117-931745765-820054799-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Artur\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 62.179.1.63 - 62.179.1.62 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{8E063C5F-5E8C-443A-BB5F-9E95A40AABB3}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{077C7CD2-355A-49FD-9AE8-603DFC084BA2}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{DCB34DF4-9172-4C08-8F6E-D68FC77DF734}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{BE01B1BB-A2EF-4593-89EF-B479FF6810C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{117ACE65-4C4B-41F7-932E-DF94C49CE4D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{1B0E5AEE-3FBC-4FEB-B9BB-A3B879CE90D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{1ACE510B-AB4C-4D0E-BF8F-310EA7EEFEAA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{0A8CF354-7413-4B47-85DD-D8E1A948BA4A}] => (Allow) C:\Program Files\Opera\opera.exe FirewallRules: [{3EA40A3F-935C-4152-94A8-C83460474090}] => (Allow) C:\Program Files\Opera\opera.exe FirewallRules: [{204C8344-D674-4C0D-AD71-B98BB087A1A6}] => (Allow) LPort=5900 FirewallRules: [{DF12C315-D226-4092-8FA2-365DF176FBFC}] => (Allow) LPort=5800 FirewallRules: [{17949567-8D9C-40A6-90B3-61DC9DD47614}] => (Allow) C:\Users\Artur\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{06E389D2-6579-4376-A22E-9E81DCE36280}] => (Allow) C:\Users\Artur\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3964D11A-5CC0-4BC7-B120-AA039B0F758D}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe FirewallRules: [{82E5D409-C5CD-4C5E-A6FC-C121EE6662D2}] => (Allow) LPort=2869 FirewallRules: [{033ACA64-10C5-4DB9-AFD8-DD8E81179E14}] => (Allow) LPort=1900 FirewallRules: [{F89C84D3-E02B-455F-AF32-8BC1DA39D0DC}] => (Allow) C:\Program Files\K2T\WTW\wtw.exe FirewallRules: [{79F02072-5C83-4B9A-9619-3B92A606A65C}] => (Allow) C:\Program Files\K2T\WTW\wtw.exe FirewallRules: [{06EB3480-C030-4D45-A788-7441EF3746EC}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe FirewallRules: [{95754CBB-3399-4DE7-8E6F-62AC22CC7901}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe FirewallRules: [{3F000F10-AE8E-456F-AA19-26C12DB4A16A}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe FirewallRules: [{FBD21F35-2129-48AE-A8F6-7D7179F30127}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/11/2015 03:47:17 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 03:45:53 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: Publikowanie usługi zarządzania kluczami w systemie DNS w domenie „” nie powiodło się. Informacje: 0x80070057 Error: (07/11/2015 03:45:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Nazwa modułu powodującego błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000b057c Identyfikator procesu powodującego błąd: 0x8a0 Godzina uruchomienia aplikacji powodującej błąd: 0xNvNetworkService.exe0 Ścieżka aplikacji powodującej błąd: NvNetworkService.exe1 Ścieżka modułu powodującego błąd: NvNetworkService.exe2 Identyfikator raportu: NvNetworkService.exe3 Error: (07/11/2015 03:42:04 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 03:40:41 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: Publikowanie usługi zarządzania kluczami w systemie DNS w domenie „” nie powiodło się. Informacje: 0x80070057 Error: (07/11/2015 03:40:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Nazwa modułu powodującego błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000b057c Identyfikator procesu powodującego błąd: 0x8a0 Godzina uruchomienia aplikacji powodującej błąd: 0xNvNetworkService.exe0 Ścieżka aplikacji powodującej błąd: NvNetworkService.exe1 Ścieżka modułu powodującego błąd: NvNetworkService.exe2 Identyfikator raportu: NvNetworkService.exe3 Error: (07/11/2015 01:50:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 01:49:38 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: Publikowanie usługi zarządzania kluczami w systemie DNS w domenie „” nie powiodło się. Informacje: 0x80070057 Error: (07/11/2015 01:49:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Nazwa modułu powodującego błąd: NvNetworkService.exe, wersja: 1.0.2.5, sygnatura czasowa: 0x52e70698 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000b057c Identyfikator procesu powodującego błąd: 0x8cc Godzina uruchomienia aplikacji powodującej błąd: 0xNvNetworkService.exe0 Ścieżka aplikacji powodującej błąd: NvNetworkService.exe1 Ścieżka modułu powodującego błąd: NvNetworkService.exe2 Identyfikator raportu: NvNetworkService.exe3 Error: (07/11/2015 12:32:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (07/11/2015 03:50:44 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (07/11/2015 03:45:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/11/2015 03:40:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/11/2015 01:49:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/11/2015 12:31:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/11/2015 12:21:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/11/2015 10:12:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/10/2015 07:07:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/09/2015 03:40:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/08/2015 05:04:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Microsoft Office: ========================= Error: (07/11/2015 03:47:17 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 03:45:53 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: 0x80070057 Error: (07/11/2015 03:45:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvNetworkService.exe1.0.2.552e70698NvNetworkService.exe1.0.2.552e70698c0000005000b057c8a001d0bbdfdbd21dd0C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exeC:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe229c1810-27d3-11e5-912c-001a4d90b28d Error: (07/11/2015 03:42:04 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 03:40:41 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: 0x80070057 Error: (07/11/2015 03:40:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvNetworkService.exe1.0.2.552e70698NvNetworkService.exe1.0.2.552e70698c0000005000b057c8a001d0bbdf2176b810C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exeC:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe683f81a0-27d2-11e5-92a5-001a4d90b28d Error: (07/11/2015 01:50:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2015 01:49:38 PM) (Source: Software Protection Platform Service) (EventID: 12293) (User: ) Description: 0x80070057 Error: (07/11/2015 01:49:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvNetworkService.exe1.0.2.552e70698NvNetworkService.exe1.0.2.552e70698c0000005000b057c8cc01d0bbcf96117800C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exeC:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exedcd7ff70-27c2-11e5-9b3b-001a4d90b28d Error: (07/11/2015 12:32:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2015-07-05 20:17:11.814 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\usp10.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-05 20:15:42.358 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\usp10.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.793 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.743 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.663 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.563 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.493 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.443 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.343 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2015-05-19 12:42:39.243 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ Percentage of memory in use: 66% Total physical RAM: 2047.55 MB Available physical RAM: 684.51 MB Total Virtual: 4095.09 MB Available Virtual: 2770.95 MB ==================== Drives ================================ Drive c: (SYSTEM) (Fixed) (Total:111.69 GB) (Free:12.46 GB) NTFS Drive e: (kapciora) (Fixed) (Total:60 GB) (Free:0.52 GB) NTFS Drive f: (szrotownia) (Fixed) (Total:400 GB) (Free:0.59 GB) NTFS Drive g: (for Luke) (Fixed) (Total:471.5 GB) (Free:2.13 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 1F291F29) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: C579C579) Partition 1: (Not Active) - (Size=60 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=871.5 GB) - (Type=OF Extended) ==================== End of log ============================