Additional scan result of Farbar Recovery Scan Tool (x86) Version:27-09-2015 Ran by Krzysztof (2015-09-27 15:11:58) Running from C:\Documents and Settings\Krzysztof\My Documents\Downloads Microsoft Windows XP Home Edition Service Pack 3 (X86) (2010-08-05 03:04:41) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1960408961-682003330-839522115-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrator ASPNET (S-1-5-21-1960408961-682003330-839522115-1006 - Limited - Enabled) Gość (S-1-5-21-1960408961-682003330-839522115-1005 - Limited - Enabled) => %SystemDrive%\Documents and Settings\Gość Guest (S-1-5-21-1960408961-682003330-839522115-501 - Limited - Disabled) HelpAssistant (S-1-5-21-1960408961-682003330-839522115-1000 - Limited - Disabled) Krzysztof (S-1-5-21-1960408961-682003330-839522115-1004 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Krzysztof SUPPORT_388945a0 (S-1-5-21-1960408961-682003330-839522115-1002 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: 电脑管家系统防护 (Enabled - Up to date) {9AAC524A-BF34-49b0-91D2-71838CBB8110} AV: Emsisoft Anti-Malware (Enabled - Up to date) {0F8591BB-342B-4493-91C3-4E948ED21255} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 1500 (Version: 50.0.206.000 - Hewlett-Packard) Hidden 1500_Help (Version: 50.0.206.000 - Hewlett-Packard) Hidden 1500Trb (Version: 50.0.206.000 - Hewlett-Packard) Hidden Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Flash Player 19 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) AiO_Scan (Version: 50.0.206.000 - Hewlett-Packard) Hidden AiOSoftware (Version: 50.0.206.000 - Hewlett-Packard) Hidden Apple Mobile Device Support (HKLM\...\{8153ED9A-C94A-426E-9880-5E6775C08B62}) (Version: 4.0.0.97 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) BufferChm (Version: 53.0.13.000 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 3.14 - Piriform) CinemaP-1.9cV26.09 (HKLM\...\CinemaP-1.9cV26.09) (Version: 1.36.01.22 - Cinema PlusV26.09) <==== ATTENTION CinemaPlus-3.2cV26.09 (HKLM\...\CinemaPlus-3.2cV26.09) (Version: 1.36.01.22 - Cinema PlusV26.09) <==== ATTENTION Cisco Systems VPN Client 5.0.05.0290 (HKLM\...\{F3C1DE9E-5E16-4BA9-B854-7B53A45E3579}) (Version: 5.0.5 - Cisco Systems, Inc.) CP_Package_Variety1 (Version: 53.0.13.000 - Hewlett-Packard) Hidden CP_Package_Variety2 (Version: 53.0.13.000 - Hewlett-Packard) Hidden CP_Package_Variety3 (Version: 53.0.13.000 - Hewlett-Packard) Hidden CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden Destinations (Version: 53.0.13.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden DocProc (Version: 5.2.0.0 - Hewlett-Packard) Hidden Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 10.0 - Emsisoft Ltd.) eReg (Version: 1.20.138.34 - Logitech, Inc.) Hidden eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden Facebook Update Helper (Version: 1.2.205.0 - Google Inc.) Hidden Fax (Version: 50.0.206.000 - Hewlett-Packard) Hidden FoxArc Screen Capture V1.2 (HKLM\...\FoxArc Screen Capture) (Version: - ) Free Sound Recorder v10.5.2 (HKLM\...\Free Sound Recorder_is1) (Version: - Copyright(C) 2005-2015 FreeSoundRecorder Technologies, Inc.) GoHD (HKLM\...\GoHD) (Version: 1.36.01.22 - InstallMoon) <==== ATTENTION Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.99 - Google Inc.) Google Talk Plugin (HKLM\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden HP Extended Capabilities 5.3 (HKLM\...\HPExtendedCapabilities) (Version: 5.3 - HP) HP Image Zone Express (HKLM\...\{FE64AE29-0883-4C70-8388-DC026019C900}) (Version: 1.5.1.29 - Hewlett-Packard) HP Imaging Device Functions 5.3 (HKLM\...\HP Imaging Device Functions) (Version: 5.3 - HP) HP PSC & OfficeJet 5.3.B (HKLM\...\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}) (Version: - HP) HP Solution Center & Imaging Support Tools 5.3 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 5.3 - HP) HP Support Solutions Framework (HKLM\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HPProductAssistant (Version: 53.0.13.000 - Hewlett-Packard) Hidden J2SE Development Kit 5.0 Update 12 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0150120}) (Version: 1.5.0.120 - Sun Microsystems, Inc.) J2SE Runtime Environment 5.0 Update 12 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0150120}) (Version: 1.5.0.120 - Sun Microsystems, Inc.) Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle) kED 2.1.4.0 (HKLM\...\kED_is1) (Version: - ) K-Lite Codec Pack 8.4.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 8.4.0 - ) Lame ACM MP3 Codec (HKLM\...\LameACM) (Version: - ) MarketResearch (Version: 53.0.13.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Polish Language Pack (HKLM\...\{64CB2553-C109-4132-AA51-1F421B515FD1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft Automated Troubleshooting Services Shim (HKLM\...\{c9920352-04e6-469d-bab8-e2b9c7c75415}.sdb) (Version: - ) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Ultimate 2007 (HKLM\...\ULTIMATER) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft XNA Framework Redistributable 3.1 (HKLM\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mozilla Firefox 38.0 (x86 pl) (HKLM\...\Mozilla Firefox 38.0 (x86 pl)) (Version: 38.0 - Mozilla) Mozilla Firefox 40.0.3 (x86 en-US) (HKLM\...\Mozilla Firefox 40.0.3 (x86 en-US)) (Version: 40.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 6 Service Pack 2 (KB973686) (HKLM\...\{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}) (Version: 6.20.2003.0 - Microsoft Corporation) NewCopy (Version: 50.0.206.000 - Hewlett-Packard) Hidden NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9682 - NVIDIA Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation) NVIDIA nView Desktop Manager (HKLM\...\NVIDIA nView Desktop Manager) (Version: 6.14.10.00 - NVIDIA Corporation) Obsługa programów Apple (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) OpenVPN Connect (HKLM\...\{3D9A5267-3236-4BCC-AA45-2CE16F531187}) (Version: 2.0.8.106 - OpenVPN Technologies) ProductContext (Version: 50.0.206.000 - Hewlett-Packard) Hidden Readme (Version: 50.0.206.000 - Hewlett-Packard) Hidden Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5936 - Realtek Semiconductor Corp.) Scan (Version: 5.2.0.0 - Hewlett-Packard) Hidden ScannerCopy (Version: 5.2.0.0 - Hewlett-Packard) Hidden Skype™ 7.5 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.) SolutionCenter (Version: 50.0.152.000 - Hewlett-Packard) Hidden Status (Version: 53.0.13.000 - Hewlett-Packard) Hidden swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TrayApp (Version: 53.0.13.000 - Hewlett-Packard) Hidden TuneUp Utilities 2012 (Version: 12.0.2040.9 - TuneUp Software) Hidden TuneUp Utilities Language Pack (en-US) (Version: 12.0.2040.9 - TuneUp Software) Hidden Unload (Version: 5.0.0 - Hewlett-Packard) Hidden Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Usługi Boot Camp (HKLM\...\{B56ACF7B-D7B5-442B-8E1D-6B41347D88B2}) (Version: 3.2.0 - Apple Inc.) VpnProxy 1.0 (HKLM\...\VpnProxy_is1) (Version: - Initex Software) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden WebReg (Version: 53.0.13.000 - Hewlett-Packard) Hidden Windows Driver Package - Apple Inc. (applebt) Bluetooth (03/01/2010 3.0.0.5) (HKLM\...\31BC243044B2C02B454ECDA8F5B44427F3754DD0) (Version: 03/01/2010 3.0.0.5 - Apple Inc.) Windows Driver Package - Apple Inc. (AppleUSBEthernet) Net (01/11/2008 3.4.3.18) (HKLM\...\AD3493E108434977125BBF78F47699626F8AF64B) (Version: 01/11/2008 3.4.3.18 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Bluetooth Enabler (06/27/2007 2.0.0.1) (HKLM\...\5F8BE32FAE3D6BC77B512F7B0624D7B6C8A26EFB) (Version: 06/27/2007 2.0.0.1 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Broadcom Bluetooth (03/01/2010 3.1.0.3) (HKLM\...\5D1F13EEF9A42CC17001EAFFC701D57AF8D13E9D) (Version: 03/01/2010 3.1.0.3 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Built-in iSight (10/25/2007 2.0.1.0) (HKLM\...\9324ED54E32F5399037F87E076CA01C6CEB92830) (Version: 10/25/2007 2.0.1.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Display (01/23/2009 3.0.0.0) (HKLM\...\C5CE3BA75A23622D2140C5D5D0998C07DDC4CF1C) (Version: 01/23/2009 3.0.0.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple IR Receiver (02/21/2008 2.0.4.0) (HKLM\...\4D00971668041EDAD7097C5827D1739F03B9E5D7) (Version: 02/21/2008 2.0.4.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Keyboard (01/12/2010 3.1.0.2) (HKLM\...\84865EBF11DAD18A6FD975327C8DBD66D7090BAD) (Version: 01/12/2010 3.1.0.2 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Multitouch (02/11/2010 3.1.0.0) (HKLM\...\60B5F87397EB801AB1BAB3E940CE0E077830B153) (Version: 02/11/2010 3.1.0.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Multitouch (10/05/2010 3.2.0.1) (HKLM\...\AEB482706002E9220FBFB86D4A1D24257F71A3D4) (Version: 10/05/2010 3.2.0.1 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Multitouch Mouse (02/11/2010 3.1.0.0) (HKLM\...\5A9DF61C17938C73DCC75C9B4B3A4DE3C74D38ED) (Version: 02/11/2010 3.1.0.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Multitouch Mouse (10/05/2010 3.2.0.1) (HKLM\...\A7A7D84907D2DCB34930D77C6BA911E3834C1E34) (Version: 10/05/2010 3.2.0.1 - Apple Inc.) Windows Driver Package - Apple Inc. Apple ODD (01/17/2008 2.0.2.2) (HKLM\...\B4AC4F962DDC0DD6B71FCF20B8F2F694214FAE69) (Version: 01/17/2008 2.0.2.2 - Apple Inc.) Windows Driver Package - Apple Inc. Apple ODD (05/17/2010 3.1.0.0) (HKLM\...\2E2B6DCC02509BB8D2629A009DE8B5C3055B6779) (Version: 05/17/2010 3.1.0.0 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Trackpad (07/13/2009 3.0.0.1) (HKLM\...\A0DAD483951AB3046050D68A2A1D8CEB4A7C61EE) (Version: 07/13/2009 3.0.0.1 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Trackpad Enabler (07/13/2009 3.0.0.1) (HKLM\...\111E266FDD1556398EFC13BE47678F96E8497682) (Version: 07/13/2009 3.0.0.1 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Wireless Mouse (11/30/2009 3.0.0.6) (HKLM\...\DE32692B1421420518B0CA8EEDD6DF2A494F279F) (Version: 11/30/2009 3.0.0.6 - Apple Inc.) Windows Driver Package - Apple Inc. Apple Wireless Trackpad (08/24/2010 3.1.0.7) (HKLM\...\CFC3D985EA69596C8BE0A30313010FCC8CE2C70F) (Version: 08/24/2010 3.1.0.7 - Apple Inc.) Windows Driver Package - Apple Inc. System (08/22/2008 2.1.1.1) (HKLM\...\F24CB85E5983448F6319803791DEACED91E6565B) (Version: 08/22/2008 2.1.1.1 - Apple Inc.) Windows Driver Package - Atheros (AR5416) Net (11/18/2009 7.7.0.429) (HKLM\...\059B155261B840AB89EA7581CAFC636EEB1D4364) (Version: 11/18/2009 7.7.0.429 - Atheros) Windows Driver Package - Broadcom (b57w2k) Net (05/29/2009 12.2.0.2) (HKLM\...\E3DBAC6F911B4848B65E4B1B83BEF7CED25B4928) (Version: 05/29/2009 12.2.0.2 - Broadcom) Windows Driver Package - Broadcom (BCM43XX) Net (08/25/2009 5.60.18.9) (HKLM\...\E90BBBBF2BC7869A101909EA920E455DC7354A38) (Version: 08/25/2009 5.60.18.9 - Broadcom) Windows Driver Package - CirrusLogic (HdAudAddService) MEDIA (03/12/2010 1.0.0.30) (HKLM\...\CC44F1D94CD4A86602CBF93E4023E7A7658636FB) (Version: 03/12/2010 1.0.0.30 - CirrusLogic) Windows Driver Package - CirrusLogic (HdAudAddService) MEDIA (04/28/2010 1.0.0.32) (HKLM\...\F7D4BBE83ED347867851C05163103672591D5E3C) (Version: 04/28/2010 1.0.0.32 - CirrusLogic) Windows Driver Package - Intel (E1000) Net (11/07/2007 8.10.1.0) (HKLM\...\627745F8E8BB901B043047C3E308B4A76C1194FE) (Version: 11/07/2007 8.10.1.0 - Intel) Windows Driver Package - Intel (e1express) Net (02/06/2008 9.12.18.0) (HKLM\...\78C67451B87511098A9A0EC86E75B99B12298F5C) (Version: 02/06/2008 9.12.18.0 - Intel) Windows Driver Package - Intel (e1kexpress) Net (07/22/2008 10.3.45.0) (HKLM\...\675AAC36E980D647C94EAFFB2F929F247E711708) (Version: 07/22/2008 10.3.45.0 - Intel) Windows Driver Package - Intel (e1qexpress) Net (08/05/2008 10.3.49.0) (HKLM\...\7BD968405DE73C7E0F8E489DB5A5853A6CCB8D1D) (Version: 08/05/2008 10.3.49.0 - Intel) Windows Driver Package - Intel (e1yexpress) Net (06/13/2008 9.52.9.0) (HKLM\...\A06888013552B918232820F81FDBA706F5CAAD39) (Version: 06/13/2008 9.52.9.0 - Intel) Windows Driver Package - Intel Net (01/08/2008 8.3.9.0) (HKLM\...\2AC97D2605162B73D046D68013D1030CB7CFB87E) (Version: 01/08/2008 8.3.9.0 - Intel) Windows Driver Package - Intel Net (02/06/2008 9.12.17.0) (HKLM\...\B345101E6CC8B2FD9765620B9C7BCD3D7002BE6D) (Version: 02/06/2008 9.12.17.0 - Intel) Windows Driver Package - Intel Net (07/16/2008 9.52.10.0) (HKLM\...\065B919FD23D12E588F6E2BFB21F7836E2F0E704) (Version: 07/16/2008 9.52.10.0 - Intel) Windows Driver Package - Intel Net (07/22/2008 10.3.45.0) (HKLM\...\9747248FCA6A074E791AABC17F527823A8225756) (Version: 07/22/2008 10.3.45.0 - Intel) Windows Driver Package - Intel Net (08/05/2008 10.3.49.0) (HKLM\...\1E934494E1FDB938ED1D9B958D5D5D465A07F06A) (Version: 08/05/2008 10.3.49.0 - Intel) Windows Driver Package - Intel System (07/20/2007 1.2.76.0) (HKLM\...\82BE89CA9B7493FA05D2D4D32B415CF07EA08B47) (Version: 07/20/2007 1.2.76.0 - Intel) Windows Driver Package - Marvell (yukonwxp) Net (03/23/2007 10.12.7.3) (HKLM\...\6AB59209597E0F6B986EC8E976521FDF0A696C9D) (Version: 03/23/2007 10.12.7.3 - Marvell) Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation) Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation) Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation) Windows PowerShell(TM) 1.0 (HKLM\...\KB926139-v2) (Version: 2 - Microsoft Corporation) WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - ) WinSCP 4.2.8 (HKLM\...\winscp3_is1) (Version: 4.2.8 - Martin Prikryl) Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1960408961-682003330-839522115-1004_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Documents and Settings\Krzysztof\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) CustomCLSID: HKU\S-1-5-21-1960408961-682003330-839522115-1004_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Documents and Settings\Krzysztof\Local Settings\Application Data\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.) CustomCLSID: HKU\S-1-5-21-1960408961-682003330-839522115-1004_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Documents and Settings\Krzysztof\Local Settings\Application Data\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CustomCLSID: HKU\S-1-5-21-1960408961-682003330-839522115-1004_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Documents and Settings\Krzysztof\Application Data\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) ==================== Restore Points ========================= 29-06-2015 08:56:16 System Checkpoint 01-07-2015 22:51:50 System Checkpoint 03-07-2015 07:38:42 System Checkpoint 06-07-2015 14:01:03 System Checkpoint 16-07-2015 09:24:14 Removed HP Software Update 16-07-2015 09:46:30 Installed HP Product Assistant 17-07-2015 19:46:02 System Checkpoint 20-07-2015 18:47:19 System Checkpoint 29-07-2015 19:28:28 System Checkpoint 07-08-2015 19:45:12 System Checkpoint 13-08-2015 17:59:12 System Checkpoint 18-08-2015 08:37:27 System Checkpoint 26-08-2015 08:50:32 System Checkpoint 01-09-2015 16:28:54 System Checkpoint 04-09-2015 09:13:29 System Checkpoint 07-09-2015 20:09:56 System Checkpoint 11-09-2015 17:16:07 System Checkpoint 16-09-2015 16:29:58 System Checkpoint 18-09-2015 20:09:57 System Checkpoint 23-09-2015 17:08:00 System Checkpoint 23-09-2015 22:20:29 Usunięto HP Update. 24-09-2015 14:44:02 Installed Windows Media Format 9 Series Runtime Setup 26-09-2015 21:34:20 Uniblue SpeedUpMyPC installation 26-09-2015 21:35:24 Removed Microsoft Visual Studio Tools for Applications 2.0 - ENU 27-09-2015 11:37:57 Restore Operation ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-02-28 14:00 - 2015-05-26 09:56 - 00001002 ____C C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 69.74.69.107 emvm10.emedia.cv.net 167.206.4.106 stg-uwc.webmail.optimum.net 127.94.0.1 client.openvpn.net 127.94.0.2 openvpn-client.vpn.netstellar.com 127.0.0.1 dkj.local ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\469fcbcc-315d-4dd5-9804-212abb2e3cb9-1-6.job => C:\Program Files\GoHD\469fcbcc-315d-4dd5-9804-212abb2e3cb9-1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-1-6.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-10_user.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-10.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-3.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-3.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-5.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-6.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\50278e6d-151b-4cf5-9e8d-31ed23fbc614-7.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\6d0ac05c-4429-4e4d-bcea-abd79f29b20e-1-6.job => C:\Program Files\CinemaP-1.9cV26.09\6d0ac05c-4429-4e4d-bcea-abd79f29b20e-1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-1-6.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-1-7.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-1-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-4.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-4.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-5.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-6.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7ac4ca75-d021-44c5-ba78-4c00550bafe6-7.job => C:\Program Files\Object Browser\7ac4ca75-d021-44c5-ba78-4c00550bafe6-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_19_0_0_185_pepper.exe Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\Advanced System~Protector.job => C:\Program Files\ASP\AspManager.exe Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\Cukoqje4zpacXzv1vzrLABj8CQG.job => C:\Documents and Settings\Krzysztof\Application Data\Cukoqje4zpacXzv1vzrLABj8CQG.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\IaKVQlxEQ3T35j.job => C:\Documents and Settings\Krzysztof\Application Data\IaKVQlxEQ3T35j.exe Task: C:\WINDOWS\Tasks\PKFkn4RDDh2SIS8ZZ.job => C:\Documents and Settings\Krzysztof\Application Data\PKFkn4RDDh2SIS8ZZ.exe Task: C:\WINDOWS\Tasks\SimpleFiles Update Service.job => C:\Program Files\SimpleFilesUpdater\SimpleFilesUpdater.exehttp:/simple-files.com Task: C:\WINDOWS\Tasks\temp_50278e6d-151b-4cf5-9e8d-31ed23fbc614-10_user.job => C:\Program Files\CinemaPlus-3.2cV26.09\50278e6d-151b-4cf5-9e8d-31ed23fbc614-10.exe <==== ATTENTION ==================== Loaded Modules (Whitelisted) ============== 2006-02-28 14:00 - 2006-02-28 14:00 - 00015360 ____C () C:\WINDOWS\system32\tsd32.dll 2014-06-05 11:34 - 2014-06-05 11:34 - 00024064 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\capiws.exe 2011-02-26 11:33 - 2011-02-26 11:33 - 00027648 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd 2011-02-27 10:12 - 2011-02-27 10:12 - 00110080 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll 2011-02-26 11:32 - 2011-02-26 11:32 - 00040960 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd 2011-02-26 11:33 - 2011-02-26 11:33 - 00096768 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd 2011-02-26 11:32 - 2011-02-26 11:32 - 00017408 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32profile.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00153088 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd 2010-08-24 18:47 - 2010-08-24 18:47 - 00040448 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00720896 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd 2011-02-26 11:32 - 2011-02-26 11:32 - 00110080 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd 2011-02-26 11:34 - 2011-02-26 11:34 - 00354304 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pythoncom26.dll 2011-02-26 11:38 - 2011-02-26 11:38 - 00265728 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32com.shell.shell.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00019968 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00286208 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00073728 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00011776 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\select.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00010240 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00061440 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00039424 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd 2011-02-26 11:32 - 2011-02-26 11:32 - 00035840 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00007680 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd 2014-06-05 08:39 - 2014-06-05 08:39 - 00007168 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pyovpnc.pyd 2011-02-26 11:31 - 2011-02-26 11:31 - 00112128 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd 2011-02-26 11:31 - 2011-02-26 11:31 - 00017408 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd 2011-02-26 11:32 - 2011-02-26 11:32 - 00023552 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd 2010-08-24 18:48 - 2010-08-24 18:48 - 00585728 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\unicodedata.pyd 2011-02-26 11:33 - 2011-02-26 11:33 - 00022528 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32ts.pyd 2001-07-31 11:17 - 2001-07-31 11:17 - 00094274 _____ () C:\WINDOWS\system32\HPBHealr.dll 2011-09-27 08:23 - 2011-09-27 08:23 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 08:22 - 2011-09-27 08:22 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-09-22 12:37 - 2015-09-22 12:37 - 17592008 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll 2015-09-27 15:04 - 2015-09-27 15:04 - 00380416 _____ () C:\Documents and Settings\Krzysztof\My Documents\Downloads\qkj7l9es.exe ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:2CB9631F AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:7FA0D639 AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:CB959782 ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup => ""="Driver Group" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WdfLoadGroup => ""="Driver Group" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-1960408961-682003330-839522115-1004\...\optimum.net -> hxxps://stg-uwc.webmail.optimum.net ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1960408961-682003330-839522115-1004\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Krzysztof\Local Settings\Application Data\Microsoft\Wallpaper1.bmp DNS Servers: 192.168.0.1 Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\WINDOWS\pss\McAfee Security Scan Plus.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^VPN Client.lnk => C:\WINDOWS\pss\VPN Client.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^IMVU.lnk => C:\WINDOWS\pss\IMVU.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^Logitech . Rejestracja produktu.lnk => C:\WINDOWS\pss\Logitech . Rejestracja produktu.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\WINDOWS\pss\OpenOffice.org 3.2.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^OptimumLink.lnk => C:\WINDOWS\pss\OptimumLink.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^OptimumPCtoTV.lnk => C:\WINDOWS\pss\OptimumPCtoTV.lnkStartup MSCONFIG\startupfolder: C:^Documents and Settings^Krzysztof^Start Menu^Programs^Startup^ybcrlnsnniggidoderh.lnk => C:\WINDOWS\pss\ybcrlnsnniggidoderh.lnkStartup MSCONFIG\startupreg: Apple_KbdMgr => C:\Program Files\Boot Camp\Bootcamp.exe MSCONFIG\startupreg: BluetoothAuthenticationAgent => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent MSCONFIG\startupreg: CTFMON.EXE => C:\WINDOWS\system32\ctfmon.exe MSCONFIG\startupreg: EvtMgr6 => MSCONFIG\startupreg: GG => "C:\Documents and Settings\Krzysztof\Local Settings\Application Data\GG\Application\gghub.exe" MSCONFIG\startupreg: Google Update => "C:\Documents and Settings\Krzysztof\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: Jing => C:\Program Files\TechSmith\Jing\Jing.exe MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet MSCONFIG\startupreg: MSMSGS => "C:\Program Files\Messenger\msmsgs.exe" /background MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup MSCONFIG\startupreg: NvMediaCenter => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit MSCONFIG\startupreg: nwiz => nwiz.exe /installquiet MSCONFIG\startupreg: ORAHSSSessionManager => "C:\Program Files\Livebox\SessionManager\SessionManager.exe" MSCONFIG\startupreg: QuickTime Task => MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: TP-Link USB Printer Controller => C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe -mini ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCmgrInstallGuide.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCTray.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCMgr.exe] => Enabled:????-??? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCRTP.exe] => Enabled:????-?????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMDL.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\bugreport.exe] => Enabled:????-crash?? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCFileOpen.exe] => Enabled:????-?????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCLeakScan.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPConfig.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSoftMgr.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\plugins\QMNetMon\QQPCNetFlow.exe] => Enabled:????-?????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCBTU.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCClinic.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCLaunch.exe] => Enabled:????-QQPCLaunch DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMUpdate\QQPCMgrUpdate.exe] => Enabled:????-????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSoftGame.exe] => Enabled:????-QQPCSoftGame DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSysOptimize.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCUpdateAVLib.exe] => Enabled:????-????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQRepair.exe] => Enabled:????-??? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\Uninst.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCPatch.exe] => Enabled:????-QQPCPatch DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\TpkUpdate.exe] => Enabled:????-????????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMRouterMgr.exe] => Enabled:????-????? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMAccountProtection.exe] => Enabled:????-??? DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMAdBlock.exe] => Enabled:????-???? DomainProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\bugreport_xf.exe] => Enabled:腾讯产品下载组件Crash上报 DomainProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\Tencentdl.exe] => Enabled:腾讯产品下载组件 StandardProfile\AuthorizedApplications: [C:\Program Files\Google\Chrome\Application\chrome.exe] => Enabled:Google Chrome StandardProfile\AuthorizedApplications: [C:\Program Files\Skype\Phone\Skype.exe] => Enabled:Skype StandardProfile\AuthorizedApplications: [C:\Documents and Settings\Krzysztof\My Documents\Firefox\38\firefox.exe] => Enabled:Firefox (C:\Documents and Settings\Krzysztof\My Documents\Firefox\38) StandardProfile\AuthorizedApplications: [C:\Documents and Settings\Krzysztof\My Documents\Firefox\29b\firefox.exe] => Enabled:Firefox (C:\Documents and Settings\Krzysztof\My Documents\Firefox\29b) StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCmgrInstallGuide.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCTray.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCMgr.exe] => Enabled:????-??? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCRTP.exe] => Enabled:????-?????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMDL.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\bugreport.exe] => Enabled:????-crash?? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCFileOpen.exe] => Enabled:????-?????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCLeakScan.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPConfig.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSoftMgr.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\plugins\QMNetMon\QQPCNetFlow.exe] => Enabled:????-?????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCBTU.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCClinic.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCLaunch.exe] => Enabled:????-QQPCLaunch StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMUpdate\QQPCMgrUpdate.exe] => Enabled:????-????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSoftGame.exe] => Enabled:????-QQPCSoftGame StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCSysOptimize.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCUpdateAVLib.exe] => Enabled:????-????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQRepair.exe] => Enabled:????-??? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\Uninst.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QQPCPatch.exe] => Enabled:????-QQPCPatch StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\TpkUpdate.exe] => Enabled:????-????????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMRouterMgr.exe] => Enabled:????-????? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMAccountProtection.exe] => Enabled:????-??? StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMAdBlock.exe] => Enabled:????-???? StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\bugreport_xf.exe] => Enabled:腾讯产品下载组件Crash上报 StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\Tencentdl.exe] => Enabled:腾讯产品下载组件 ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter Description: Cisco Systems VPN Adapter Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/27/2015 02:25:38 PM) (Source: LoadPerf) (EventID: 3011) (User: ) Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section. Error: (09/27/2015 02:25:38 PM) (Source: LoadPerf) (EventID: 3012) (User: ) Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section. Error: (09/27/2015 01:11:06 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application a2service.exe, version 10.0.0.5641, faulting module frme32.dll, version 1.0.0.478, fault address 0x00004bc4. Processing media-specific event for [a2service.exe!ws!] Error: (09/27/2015 12:06:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application plugin-container.exe, version 38.0.0.5606, faulting module mozalloc.dll, version 38.0.0.5606, fault address 0x00001aa1. Processing media-specific event for [plugin-container.exe!ws!] Error: (09/27/2015 11:45:16 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application taskmgr.exe, version 5.1.2600.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (09/27/2015 11:44:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application uninstall.exe, version 0.0.0.0, faulting module uninstall.exe, version 0.0.0.0, fault address 0x0000776c. Processing media-specific event for [uninstall.exe!ws!] Error: (09/27/2015 11:44:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application uninstall.exe, version 0.0.0.0, faulting module uninstall.exe, version 0.0.0.0, fault address 0x00007678. Processing media-specific event for [uninstall.exe!ws!] Error: (09/27/2015 11:43:42 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application uninstall.exe, version 0.0.0.0, faulting module uninstall.exe, version 0.0.0.0, fault address 0x00007238. Processing media-specific event for [uninstall.exe!ws!] Error: (09/27/2015 11:42:29 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application taskmgr.exe, version 5.1.2600.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (09/27/2015 11:42:14 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application taskmgr.exe, version 5.1.2600.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000. System errors: ============= Error: (09/27/2015 03:11:43 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:11:32 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:11:23 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:11:08 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:10:30 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:09:48 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:09:38 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:09:29 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:08:32 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (09/27/2015 03:08:13 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz Percentage of memory in use: 41% Total physical RAM: 2806.6 MB Available physical RAM: 1640.35 MB Total Virtual: 4694.34 MB Available Virtual: 3296.97 MB ==================== Drives ================================ Drive c: (BOOTCAMP) (Fixed) (Total:31.56 GB) (Free:6.22 GB) NTFS ==>[drive with boot components (Windows XP)] Drive g: (Macintosh HD) (Fixed) (Total:201 GB) (Free:148.88 GB) HFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 0000444D) Partition: GPT. Partition 2: (Not Active) - (Size=201 GB) - (Type=AF) Partition 3: (Active) - (Size=31.6 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================