Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja:14-12-2015 Uruchomiony przez Magda (2015-12-14 18:36:31) Uruchomiony z E:\FRST Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) (2010-06-08 13:42:21) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1690032049-1338340778-4026156367-500 - Administrator - Disabled) Gość (S-1-5-21-1690032049-1338340778-4026156367-501 - Limited - Disabled) Magda (S-1-5-21-1690032049-1338340778-4026156367-1006 - Administrator - Enabled) => C:\Users\Magda ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation) 7-Zip 15.12 (HKLM\...\{23170F69-40C1-2701-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov) 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Acronis True Image Home 2011 (HKLM\...\{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}) (Version: 14.0.6857 - Acronis) Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden ActiveCheck component for HP Active Support Library (Version: 3.0.0.2 - Hewlett-Packard) Hidden Adobe Color Common Settings (HKLM\...\Adobe_6c8e2cb4fd241c55406016127a6ab2e) (Version: 1.0.1 - Adobe Systems Incorporated) Adobe ExtendScript Toolkit 2 (HKLM\...\Adobe_3e054d2218e7aa282c2369d939e58ff) (Version: 2.0.2 - Adobe Systems Incorporated) AHV content for Acrobat and Flash (Version: 1 - Adobe Systems Incorporated) Hidden Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_PROHYBRIDR_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_PROHYBRIDR_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_PROHYBRIDR_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Application Installer 4.00.B13 (HKLM\...\{70CEFEBA-F757-4DBE-8A21-027C326137CE}) (Version: 4.00.B13 - Hewlett-Packard Company) AQQ (HKLM\...\AQQ) (Version: 2.6.0.50 - Myportal - Daniel Zaborowski) Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2245 - AVAST Software) Business Contact Manager z dodatkiem SP2 dla programu Outlook 2007 (HKLM\...\Business Contact Manager) (Version: 3.0.8619.1 - Microsoft Corporation) Business Contact Manager z dodatkiem SP2 dla programu Outlook 2007 (Version: 3.0.8619.1 - Microsoft Corporation) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.36.7.61 - Conexant) Dodaj lub usuń Adobe Creative Suite 3 Design Standard (HKLM\...\Adobe_a18cee2e2cf22b4f7830ba2daa06cd4) (Version: 1.0 - Adobe Systems Incorporated) ESU for Microsoft Vista (HKLM\...\{FADF5E4C-8E26-4CA3-8D79-2E4C8A14963E}) (Version: 1.0.15.1 - Hewlett-Packard) HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: - ) HP Customer Experience Enhancements (HKLM\...\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}) (Version: 5.3.0.2325 - Hewlett-Packard) HP Doc Viewer (HKLM\...\{082702D5-5DD8-4600-BCE5-48B15174687F}) (Version: 1.01.0005 - Hewlett-Packard) HP Easy Setup - Frontend (HKLM\...\{BBE5C83E-4DC5-494F-8A23-3AAE242E94C2}) (Version: 5.3.0.2325 - Hewlett-Packard) HP Notebook Accessories Product Tour (HKLM\...\{521F72F4-FFE4-4959-AA88-EED06125211F}) (Version: 13.0.0 - Hewlett-Packard) HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP User Guides 0077 (HKLM\...\{B51C3024-333B-4FB6-B1EC-49ECE2DE6056}) (Version: 1.02.0000 - Hewlett-Packard) HP Wireless Assistant (HKLM\...\{D32067CD-7409-4792-BFA0-1469BCD8F0C8}) (Version: 3.00 F1 - Hewlett-Packard) HPAsset component for HP Active Support Library (Version: 3.0.2.2 - Hewlett-Packard) Hidden Instalator Menedżera Kopii Zapasowej i Odzyskiwania HP (HKLM\...\{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}) (Version: 3.0.17 - Hewlett-Packard Company) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - ) Intel(R) PRO Network Connections Drivers (HKLM\...\PROSet) (Version: - ) InterVideo DVD Check (HKLM\...\{5D97A4A7-C274-4B63-86D9-07A33435F505}) (Version: - ) InterVideo Register Manager (Version: 1.0.4.0 - InterVideo Inc.) Hidden InterVideo WinDVD (HKLM\...\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}) (Version: 5.0-B11.1145 - InterVideo Inc.) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 Polish Language Pack (HKLM\...\{64CB2553-C109-4132-AA51-1F421B515FD1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - ) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2000 Standard (HKLM\...\{00020415-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM\...\{90A40415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 42.0 (x86 pl) (HKLM\...\Mozilla Firefox 42.0 (x86 pl)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) MSCU for Microsoft Vista (HKLM\...\{4D78E819-D633-43AF-A594-A7645E53EC3C}) (Version: 1.0.1.5 - Hewlett-Packard) OpenOffice 4.0.1 (HKLM\...\{DA0106A3-216E-48DE-9CF6-655DA8FC1D22}) (Version: 4.01.9714 - Apache Software Foundation) Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - plk) (Version: - Microsoft Corporation) PDF Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden Roxio Creator Audio (HKLM\...\{83FFCFC7-88C6-41c6-8752-958A45325C82}) (Version: 3.3.0 - Roxio) Roxio Creator Basic v9 (HKLM\...\{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}) (Version: 3.3.0 - Roxio) Roxio Creator Copy (HKLM\...\{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}) (Version: 3.3.0 - Roxio) Roxio Creator Data (HKLM\...\{0D397393-9B50-4c52-84D5-77E344289F87}) (Version: 3.3.0 - Roxio) Roxio Creator Tools (HKLM\...\{0394CDC8-FABD-4ed8-B104-03393876DFDF}) (Version: 3.3.0 - Roxio) Roxio Express Labeler 3 (HKLM\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 2.1.0 - Roxio) Składniki łączności pakietu Microsoft Office Small Business (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation) Sonic Activation Module (Version: 1.0 - Sonic Solutions) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.0.7.0 - Synaptics) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Vista Default Settings (HKLM\...\{3577EF87-A4AE-4D4B-86EC-A5DF197D7F2A}) (Version: 1.00 A1 - Hewlett-Packard) Vit Registry Fix 9.5.9 (remove only) (HKLM\...\Vit Registry Fix) (Version: - VITSOFT) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun) Wtyczka e-Deklaracje (HKLM\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: 4.1.0 - Ministerstwo Finansów) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{05716308-1784-4166-942E-0A09F1DE83D1}\localserver32 -> C:\Program Files\Acronis\TrueImageHome\aszbrowsehelper.exe (Acronis) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\shlxthdl.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{30A2652A-DDF7-45e7-ACA6-3EAB26FC8A4E}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\shlxthdl.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{41662FC2-0D57-4aff-AB27-AD2E12E7C273}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{43887C67-4D5D-4127-BAAC-87A288494C7C}\InprocServer32 -> E:\OFFICE\Open Office\program\xmergesync.dll () CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{448BB771-CFE2-47C4-BCDF-1FBF378E202C}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\shlxthdl.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> E:\OFFICE\Open Office\program\so_activex.dll () CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{7B342DC4-139A-4a46-8A93-DB0827CCEE9C}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\ooofilt.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{7FA8AE11-B3E3-4D88-AABF-255526CD1CE8}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{82154420-0FBF-11d4-8313-005004526AB4}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\propertyhdl.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{BDD611C3-7BAB-460F-8711-5B9AC9EF6020}\InprocServer32 -> E:\OFFICE\Open Office\program\xmergesync.dll () CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> E:\OFFICE\Open Office\program\shlxthdl\shlxthdl.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{C6AB3E74-9F4F-4370-8120-A8A6FABB7A7C}\InprocServer32 -> E:\OFFICE\Open Office\program\xmergesync.dll () CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{CB43F086-838D-4FA4-B5F6-3406B9A57439}\InprocServer32 -> E:\OFFICE\Open Office\program\xmergesync.dll () CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{D0484DE6-AAEE-468a-991F-8D4B0737B57A}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{D2D59CD1-0A6A-4D36-AE20-47817077D57C}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{E5A0B632-DFBA-4549-9346-E414DA06E6F8}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{EE5D1EA4-D445-4289-B2FC-55FC93693917}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006_Classes\CLSID\{F616B81F-7BB8-4F22-B8A5-47428D59F8AD}\localserver32 -> E:\OFFICE\Open Office\program\soffice.exe (Apache Software Foundation) ==================== Punkty Przywracania systemu ========================= 10-12-2015 10:03:10 Windows Update 11-12-2015 16:42:22 Zaplanowany punkt kontrolny 13-12-2015 16:44:11 Zaplanowany punkt kontrolny 14-12-2015 17:18:15 Removed Adobe Acrobat 9 Pro - English, Français, Deutsch. 14-12-2015 17:38:52 Removed Adobe Reader 8 14-12-2015 17:43:15 Removed Java 7 Update 55 14-12-2015 17:55:11 Punkt przywracania przed Uszkodzone klucze rejestru poprawki 14-12-2015 18:02:26 Google Update Helper 14-12-2015 18:11:57 Restore Point Created by FRST ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {18DFD9FC-082E-4E9B-8285-5F21D2B4EDAE} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {4B884655-0FDB-4321-AA6D-6ECEB440AE39} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-06-15] () Task: {60E860E4-0653-4BF3-829E-EA1CC8CA88E7} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-06-05] (Hewlett-Packard) Task: {68785F10-0B2C-4B5E-9FA4-9FA08FB5AF07} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-09] (AVAST Software) Task: {9644AF43-1FC4-4256-80B7-1083574A65B7} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation) Task: {C70DC65F-ABC5-4046-B69F-6547552DF6A5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-04-26 20:34 - 2015-12-09 11:54 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-04-26 20:34 - 2015-12-09 11:54 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-12-14 15:20 - 2015-12-14 15:20 - 02803712 _____ () C:\Program Files\AVAST Software\Avast\defs\15121400\algo.dll 2015-12-09 11:54 - 2015-12-09 11:54 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2007-08-24 13:28 - 2007-08-24 13:28 - 00249856 _____ () C:\Windows\system32\igfxTMM.dll 2015-03-13 21:11 - 2015-12-09 11:54 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2007-09-29 01:22 - 2007-05-16 09:12 - 00671744 _____ () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1690032049-1338340778-4026156367-1006\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\img27.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [{5EA8894B-040B-4376-824B-0FCB55964D6F}] => (Allow) LPort=3703 FirewallRules: [{712A3267-B160-427E-B812-6F3D3C0D9A31}] => (Allow) LPort=3704 FirewallRules: [{B5F35593-E5F4-4F2A-9E93-6FD4E69E6EAA}] => (Allow) LPort=50900 FirewallRules: [{2884B632-6F85-4E8D-9476-B0D793AFE290}] => (Allow) LPort=50901 FirewallRules: [{819EBE3B-7CD8-4988-9D86-BAF518E6762E}] => (Allow) C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe FirewallRules: [{39579C32-F13F-4582-91CD-BDD32C372005}] => (Allow) C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe FirewallRules: [{12455A29-52FD-4B17-87D8-A8259F3151E7}] => (Allow) LPort=80 FirewallRules: [{ACF39960-8198-432F-8073-16BC168416F0}] => (Allow) LPort=80 FirewallRules: [{6010E1B7-ACEF-4600-81E4-2E2046EE9592}] => (Allow) LPort=80 FirewallRules: [{D28971E8-04B6-4312-AB79-5DC3F124E86D}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{6D597574-8801-4844-9B97-F450F4B74E5D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{78AACB97-3983-4DB8-8F73-C16DCADEAA18}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{414EE75B-F030-47EE-A17B-296FECDD330B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{B22EE24A-1306-4382-B811-E7C1F28360D2}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{2CB7D723-6274-42A1-A90C-D19797D5AB93}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{20AAA82F-2B95-48D6-BF86-FC2EA9C4DA37}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Karta Microsoft ISATAP #2 Description: Karta Microsoft ISATAP Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/14/2015 06:13:41 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Nie można zaktualizować pozycji na mapie mieszania. Kontekst: aplikacja , wykaz SystemIndex Szczegóły: Urządzenie podłączone do komputera nie działa. (0x8007001f) Error: (12/14/2015 06:12:05 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service AeLookupSvc since QueryServiceConfig API failed System Error: Funkcja ładowania zasobów nie może odnaleźć pliku MUI. Error: (12/14/2015 06:11:56 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas szukania interfejsu IVssWriterCallback. hr = 0x80070005. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {1cb3bd47-dbfb-4a3e-acb3-466f174e5720} Error: (12/14/2015 06:02:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service AeLookupSvc since QueryServiceConfig API failed System Error: Funkcja ładowania zasobów nie może odnaleźć pliku MUI. Error: (12/14/2015 06:02:26 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas szukania interfejsu IVssWriterCallback. hr = 0x80070005. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {1cb3bd47-dbfb-4a3e-acb3-466f174e5720} Error: (12/14/2015 05:55:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service AeLookupSvc since QueryServiceConfig API failed System Error: Funkcja ładowania zasobów nie może odnaleźć pliku MUI. Error: (12/14/2015 05:55:03 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas szukania interfejsu IVssWriterCallback. hr = 0x80070005. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {1cb3bd47-dbfb-4a3e-acb3-466f174e5720} Error: (12/14/2015 05:43:16 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service AeLookupSvc since QueryServiceConfig API failed System Error: Funkcja ładowania zasobów nie może odnaleźć pliku MUI. Error: (12/14/2015 05:39:29 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service AeLookupSvc since QueryServiceConfig API failed System Error: Funkcja ładowania zasobów nie może odnaleźć pliku MUI. Error: (12/14/2015 05:38:44 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Nie można zaktualizować pozycji na mapie mieszania. Kontekst: aplikacja , wykaz SystemIndex Szczegóły: Urządzenie podłączone do komputera nie działa. (0x8007001f) Dziennik System: ============= Error: (12/14/2015 06:12:26 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: 1Uruchom usługę ponownieWindows Search%%1056 Error: (12/14/2015 06:11:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Licencjonowanie oprogramowania11200001Uruchom usługę ponownie Error: (12/14/2015 06:11:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Windows Search1300001Uruchom usługę ponownie Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: IviRegMgr1 Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: WdMan Service1 Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: MBAMService1 Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: hpqwmiex1 Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: HP Health Check Service1600001Uruchom usługę ponownie Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Instalator Windows11200001Uruchom usługę ponownie Error: (12/14/2015 06:11:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Com4QLBEx1 CodeIntegrity: =================================== Date: 2015-12-14 18:36:22.182 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:21.839 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:21.480 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:21.121 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:04.663 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:04.320 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:03.961 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:36:03.602 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:32:21.334 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:32:20.975 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) Duo CPU T2400 @ 1.83GHz Procent pamięci w użyciu: 56% Całkowita pamięć fizyczna: 2038.66 MB Dostępna pamięć fizyczna: 880.08 MB Całkowita pamięć wirtualna: 4316.59 MB Dostępna pamięć wirtualna: 2596.28 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:44.33 GB) (Free:2.66 GB) NTFS ==>[dysk z komponentami startowymi (pozyskano odczytując BCD)] Drive e: (Programy) (Fixed) (Total:14.65 GB) (Free:10.95 GB) NTFS Drive f: (Dane_2) (Fixed) (Total:9.76 GB) (Free:3.68 GB) NTFS Drive g: (HP_RECOVERY) (Fixed) (Total:7.81 GB) (Free:0.45 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive h: (DANE) (Fixed) (Total:35.24 GB) (Free:9.76 GB) NTFS Drive j: (MAGDA_01) (Fixed) (Total:80 GB) (Free:34.83 GB) NTFS Drive k: (MAGDA_02) (Fixed) (Total:79.99 GB) (Free:47.25 GB) NTFS Drive l: (MAGDA_03) (Fixed) (Total:305.76 GB) (Free:14.41 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 111.8 GB) (Disk ID: FA658B6F) Partition 1: (Active) - (Size=44.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=7.8 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=35.2 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=24.4 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 00029A87) Partition 1: (Not Active) - (Size=80 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=385.8 GB) - (Type=OF Extended) ==================== Koniec Addition.txt ============================