Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja:09-12-2015 Uruchomiony przez Kynek (2015-12-10 22:02:12) Uruchomiony z C:\Users\Kynek\Downloads Microsoft Windows 7 Professional Service Pack 1 (X86) (2012-06-14 16:00:59) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-723901156-3610343680-1132429655-500 - Administrator - Disabled) Gość (S-1-5-21-723901156-3610343680-1132429655-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-723901156-3610343680-1132429655-1002 - Limited - Enabled) Kynek (S-1-5-21-723901156-3610343680-1132429655-1001 - Administrator - Enabled) => C:\Users\Kynek ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKLM\...\uTorrent) (Version: 3.1.3 - ) 32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated) ATI Catalyst Install Manager (HKLM\...\{46E02508-11F2-ED1A-5983-E274F18849BC}) (Version: 3.0.769.0 - ATI Technologies, Inc.) AVG (HKLM\...\AvgZen) (Version: 1.22.1.40089 - AVG Technologies) AVG Zen (Version: 1.22.1 - AVG Technologies) Hidden BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden Bulk Crap Uninstaller (HKLM\...\{f4fef76c-1aa9-441c-af7e-d27f58d898d1}_is1) (Version: 3.1.0.0 - Marcin Szeniak) ccc-core-static (Version: 2010.0406.2133.36843 - Nazwa firmy) Hidden CDDRV_Installer (Version: 1.00.0000 - Logitech) Hidden ChomikBox (HKLM\...\{4F7B7598-88EA-4442-A54E-65EADCF06D97}) (Version: 2.0.4.3 - Chomikuj.pl) DJ_AIO_03_F2200_Software_Min (Version: 130.0.365.000 - Hewlett-Packard) Hidden F2200 (Version: 130.0.365.000 - Hewlett-Packard) Hidden FMW 1 (Version: 1.32.2 - AVG Technologies) Hidden Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 5.3.1.606 - Foxit Corporation) GG (HKU\S-1-5-21-723901156-3610343680-1132429655-1001\...\GG) (Version: 11 - GG Network S.A.) Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden HD Tune 2.55 (HKLM\...\HD Tune_is1) (Version: - EFD Software) Heroes of Might and Magic V - Dzikie Hordy (HKLM\...\{0CF77150-B480-4F9F-8100-FF410AC86EE3}) (Version: 1.00.0000 - Ubisoft) Heroes of Might and Magic V - Kuźnia Przeznaczenia (HKLM\...\{76D49B56-C2E1-455A-848A-15ECC5E77D27}) (Version: 1.00.0000 - Ubisoft) Heroes of Might and Magic V (HKLM\...\{C0086B27-8E52-42D4-8393-236391EF18F6}) (Version: 1.00.0000 - Ubisoft) HP Deskjet F2200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{3690900F-85EA-447F-BAD1-5CA25AA9B627}) (Version: 13.0 - HP) HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard) HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) KhalInstallWrapper (Version: 4.00.126 - Logitech) Hidden LockCrypt Account Manager (HKLM\...\LockCrypt) (Version: - ) Logitech SetPoint (HKLM\...\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}) (Version: 4.00 - Logitech) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Might & Magic Heroes VI (HKLM\...\{745D37C2-26F4-4B65-BA13-F9840EBFA75B}) (Version: 1.6 - Ubisoft) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MXAir Tutorial (HKLM\...\{1439F7FF-6389-4593-8227-76E7BE4730C9}) (Version: 1.00.01 - Logitech) NapiProjekt (2.0.0.2151) (HKLM\...\NapiProjekt_is1) (Version: - ) Origin (HKLM\...\Origin) (Version: 9.4.21.2812 - Electronic Arts, Inc.) Paragon Partition Manager™ 11 SE Personal (HKLM\...\{986A654F-F1E4-11DD-9FCA-005056C00008}) (Version: 90.00.0003 - Paragon Software) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.4.0 - Frank Heindörfer, Philip Chinery) Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Pro Evolution Soccer 2013 (HKLM\...\{C2523AE6-F335-4D0B-BC15-1C07E4ACE629}) (Version: 1.00.0000 - KONAMI) Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Sp5 (Version: 5.1.4324.0 - Microsoft) Hidden Sp5Intl (Version: 5.1.4324.0 - Microsoft) Hidden Sp5TTInt (Version: 5.1.4324.0 - Microsoft) Hidden SpCommon (Version: 5.1.4324.0 - Microsoft) Hidden SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - ) SpPhones (Version: 6.0.3122.0 - Microsoft) Hidden Stickies 7.1d (HKLM\...\ZhornStickies) (Version: - Zhorn Software) Test Drive Unlimited 2 (HKLM\...\Test Drive Unlimited 2_is1) (Version: - Atari) The KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: - ) The Sims 2: Ultimate Collection (HKLM\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts) The Sims Średniowiecze (HKLM\...\{83BEEFB4-8C28-4F4F-8A9D-E0D1ADCE335B}) (Version: 1.0.0 - Electronic Arts) The Sims™ 4 Demo Stwórz Sima (HKLM\...\{6908ED99-F02B-4E99-A202-3FAC99C510ED}) (Version: 1.0.237.100 - Electronic Arts Inc.) Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TreeSize Free V2.4 (HKLM\...\TreeSize Free_is1) (Version: 2.4 - JAM Software) UltraISO Premium V9.53 (HKLM\...\UltraISO_is1) (Version: - ) UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden Winamp (HKLM\...\Winamp) (Version: 5.623 - Nullsoft, Inc) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-723901156-3610343680-1132429655-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Kynek\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) ==================== Punkty Przywracania systemu ========================= 10-12-2015 21:21:34 Restore Point Created by FRST ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:04 - 2012-09-18 15:01 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {106E54E9-1185-4002-A6D4-D0AC37C8FEFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated) Task: {29EDA1DF-6E6B-4A47-AC98-72BE3C5D7A0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-04] (Google Inc.) Task: {4564AC01-278B-403F-B6FC-11F65075079A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-04] (Google Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2015-12-10 14:35 - 2015-12-10 14:35 - 40500224 _____ () C:\Program Files\AVG\UiDll\2171\libcef.dll 2015-12-10 18:30 - 2015-12-04 22:32 - 01583432 _____ () C:\Program Files\Google\Chrome\Application\47.0.2526.80\libglesv2.dll 2015-12-10 18:30 - 2015-12-04 22:32 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\47.0.2526.80\libegl.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-723901156-3610343680-1132429655-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kynek\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk => C:\Windows\pss\Logitech SetPoint.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Kynek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Stickies.lnk => C:\Windows\pss\Stickies.lnk.Startup MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: GG => "C:\Users\Kynek\AppData\Local\GG\Application\gghub.exe" MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpqSRMon => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe MSCONFIG\startupreg: Kernel and Hardware Abstraction Layer => KHALMNPR.EXE MSCONFIG\startupreg: Logitech Hardware Abstraction Layer => KHALMNPR.EXE MSCONFIG\startupreg: OpwareSE4 => "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SSBkgdUpdate => "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Conexant 2388x Tuner (FM1216 MK3, 4 in 1) Description: Conexant 2388x Tuner (FM1216 MK3, 4 in 1) Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Conexant Service: CXTUNE Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Dziennik System: ============= Error: (12/10/2015 10:00:48 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera GOFINEK. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{5906F3E6-6E7D-4B18-80CA-122B15DD89. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (12/10/2015 09:35:28 PM) (Source: atikmdag) (EventID: 10261) (User: ) Description: Display is not active Error: (12/10/2015 09:35:28 PM) (Source: atikmdag) (EventID: 19468) (User: ) Description: CPLIB :: General - Invalid Parameter ==================== Statystyki pamięci =========================== Procesor: Genuine Intel(R) CPU 2140 @ 1.60GHz Procent pamięci w użyciu: 35% Całkowita pamięć fizyczna: 2046.49 MB Dostępna pamięć fizyczna: 1329.16 MB Całkowita pamięć wirtualna: 4092.98 MB Dostępna pamięć wirtualna: 3121.2 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:60.03 GB) (Free:11.48 GB) NTFS Drive d: (SYSTEM XP) (Fixed) (Total:30.01 GB) (Free:8.03 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive e: (MULTIMEDIA) (Fixed) (Total:119.03 GB) (Free:9.06 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 096E096E) Partition 1: (Not Active) - (Size=60 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=14.5 GB) - (Type=05) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 00000001) Partition 1: (Active) - (Size=30 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=OF Extended) ==================== Koniec Addition.txt ============================