Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015 Ran by Kamil at 2015-12-31 10:44:10 Running from C:\Users\Kamil\Desktop\logi Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKLM-x32\...\uTorrent) (Version: 3.0.0 - ) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Reader XI (11.0.01) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.01 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{D1FE6D8B-E5EE-5205-3E53-CDA000257D99}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Drive (HKLM-x32\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.) Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google) Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation) K-Lite Mega Codec Pack 9.6.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.6.5 - ) Komputerowy Słownik Niemiecko-Polski 0.8.2 (HKLM-x32\...\Komputerowy Słownik Niemiecko-Polski_is1) (Version: - Maciej Pańków) Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) NapiProjekt 2.0.0 (build 2151) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Pakiet sterowników systemu Windows - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Profesor Henry 6.0 Słownictwo poziom 1 i 2 (HKLM-x32\...\slow_12_60_is1) (Version: - ) Profesor Henry 6.0 Słownictwo poziom 3 i 4 (HKLM-x32\...\slow_34_60_is1) (Version: - ) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) S Agent (Version: 1.1.51 - Samsung Electronics CO., LTD.) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 7.14 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.14.106 - Skype Technologies S.A.) Słownik angielsko-polski wersja 2.25 (HKLM-x32\...\Słownik angielsko-polski_is1) (Version: - Ajt Soft) Support Center FAQ (x32 Version: 1.0.5 - Samsung Electronics CO., LTD.) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.0.0 - Synaptics Incorporated) Tzar - The Burden of the Crown (HKLM-x32\...\GOGPACKTZAR_is1) (Version: 2.0.0.8 - GOG.com) UniPDF 1.0.5 (HKLM-x32\...\UniPDF) (Version: 1.0.5 - UniPDF.com) VBA (3821b) (x32 Version: 6.01.00.1234 - Microsoft Corporation) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.26.7\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1577275202-546194520-1271563289-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Kamil\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.) ==================== Restore Points ========================= 16-11-2015 16:52:02 Windows Update 21-11-2015 16:08:50 Windows Update 30-11-2015 23:10:33 Zaplanowany punkt kontrolny 13-12-2015 10:57:59 Windows Update 18-12-2015 21:41:47 Windows Update 31-12-2015 09:38:01 Windows Update 31-12-2015 10:12:37 Removed Bonjour 31-12-2015 10:20:45 Removed Evolution. 31-12-2015 10:35:54 Removed Quick Starter ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2012-07-26 06:26 - 2015-12-14 18:46 - 00000888 ____A C:\WINDOWS\system32\Drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com 0.0.0.1 mssplus.mcafee.com ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {016C4F02-977E-401A-A5EF-DC316E352AE4} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\CompatTelRunner.exe [2015-09-19] (Microsoft Corporation) Task: {0DF20010-6F58-47C7-A295-B71713A47CA9} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-10-29] (Samsung Electronics CO., LTD.) Task: {22C38800-E319-46B6-92A7-9056DD326474} - System32\Tasks\SUPatchForW10Up => %programdata%\Samsung\SamsungUpdatePatch\SUPatchForW10Up.exe Task: {23AC5949-11DA-4047-A742-ADEE5B1DCDB7} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {2BF33126-F6D7-40B2-9AA0-CFBD00F25B0B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-09-24] (Microsoft Corporation) Task: {4C0BB951-64F4-489E-8E73-B7F393CCDDC4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1577275202-546194520-1271563289-1001Core => C:\Users\Kamil\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {528ACBE5-DD0E-4C4B-8B8A-569BAB58A4BE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-5d => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {677D60C1-3645-4E99-A528-EB92589422CF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {6C0C1B1C-FFB9-4D0B-A629-4016B60B70BD} - System32\Tasks\Price Fountain => C:\Users\Kamil\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {73A2D4CA-6267-4B26-B27E-42C30A1E7029} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-09-24] (Microsoft Corporation) Task: {7B13610E-7EAE-4BFC-B2F8-17FA41E0E444} - System32\Tasks\KamilThudsWincerV2 => Rundll32.exe RefloweringReactivation.dll,main 7 1 Task: {7F3E72ED-8C46-4BAD-A2F7-2F3956F8CEE0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1577275202-546194520-1271563289-1001UA => C:\Users\Kamil\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {826DC892-A31C-4BD1-A1EB-1A3A5060FF43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {84969C08-0239-4424-A15F-95C8E3EC9AD5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {9727C434-E901-45FE-B497-A44277889C59} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {976A1C7E-523E-47E8-BB84-93A1E13196D1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-15] (Microsoft Corporation) Task: {9B4B171F-DDA2-4999-8DC8-44BF5BFFA80D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {9D47D16B-5DB6-4007-A936-C3BE37F2EC68} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {C416FE3E-589B-43C9-B65A-37D645EF5893} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => C:\Windows\system32\GWX\GWX.exe [2015-09-24] (Microsoft Corporation) Task: {CAAF8BAD-0A7F-444E-ACEC-1881C271B9E1} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation) Task: {CEA3EB6D-2FA4-4F38-A841-5F8C0CAF20A9} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-15] (Microsoft Corporation) Task: {D24FFB43-7EAD-4CAA-8058-7F21806ABF37} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-09-24] (Microsoft Corporation) Task: {D39265B7-6C5D-4AA1-92BF-B4E80B9299D1} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28] (Adobe Systems Incorporated) Task: {D5CB259C-341A-4765-9370-34612FF1C200} - System32\Tasks\MakeMarkerFile => %ProgramData%\MakeMarkerFile.exe Task: {DB2800C7-948D-4107-8695-6BC3ED3C053E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-09-24] (Microsoft Corporation) Task: {FD480D27-63A3-466C-B9E5-195A77A8B333} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1577275202-546194520-1271563289-1001Core.job => C:\Users\Kamil\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1577275202-546194520-1271563289-1001UA.job => C:\Users\Kamil\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\WINDOWS\Tasks\Price Fountain.job => C:\Users\Kamil\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ==================== Loaded Modules (whitelisted) ============== 2013-09-04 23:17 - 2013-09-04 23:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-20 14:23 - 2010-10-20 14:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2014-10-29 16:19 - 2014-10-29 16:19 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll 2015-12-01 05:40 - 2015-12-01 05:40 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\65ab5ad0d4eb2393fbe01f49897af024\PSIClient.ni.dll 2012-11-26 04:57 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\WINDOWS\system32\Drivers\eiqibtsv.sys:changelist ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1577275202-546194520-1271563289-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kamil\Desktop\Nowy folder\P1050425.JPG DNS Servers: Media is not connected to internet. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-1577275202-546194520-1271563289-500 - Administrator - Disabled) Gość (S-1-5-21-1577275202-546194520-1271563289-501 - Limited - Disabled) Kamil (S-1-5-21-1577275202-546194520-1271563289-1001 - Administrator - Enabled) => C:\Users\Kamil ==================== Faulty Device Manager Devices ============= Name: Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Description: Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Qualcomm Atheros Communications Service: BTHUSB Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Event log errors: ========================= Application errors: ================== Error: (12/31/2015 10:23:31 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MakeMarkerFile.exe, wersja: 1.0.0.2, sygnatura czasowa: 0x5021e5e8 Nazwa modułu powodującego błąd: MakeMarkerFile.exe, wersja: 1.0.0.2, sygnatura czasowa: 0x5021e5e8 Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x000000000014d7cc Identyfikator procesu powodującego błąd: 0xb80 Godzina uruchomienia aplikacji powodującej błąd: 0xMakeMarkerFile.exe0 Ścieżka aplikacji powodującej błąd: MakeMarkerFile.exe1 Ścieżka modułu powodującego błąd: MakeMarkerFile.exe2 Identyfikator raportu: MakeMarkerFile.exe3 Pełna nazwa pakietu powodującego błąd: MakeMarkerFile.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MakeMarkerFile.exe5 Error: (12/31/2015 10:11:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MakeMarkerFile.exe, wersja: 1.0.0.2, sygnatura czasowa: 0x5021e5e8 Nazwa modułu powodującego błąd: MakeMarkerFile.exe, wersja: 1.0.0.2, sygnatura czasowa: 0x5021e5e8 Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x000000000014d7cc Identyfikator procesu powodującego błąd: 0xeac Godzina uruchomienia aplikacji powodującej błąd: 0xMakeMarkerFile.exe0 Ścieżka aplikacji powodującej błąd: MakeMarkerFile.exe1 Ścieżka modułu powodującego błąd: MakeMarkerFile.exe2 Identyfikator raportu: MakeMarkerFile.exe3 Pełna nazwa pakietu powodującego błąd: MakeMarkerFile.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MakeMarkerFile.exe5 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6640 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6640 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 13656 Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 13656 Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 08:09:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 10811468 Error: (12/30/2015 08:09:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 10811468 System errors: ============= Error: (12/31/2015 10:39:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa ihpmServer niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/31/2015 10:18:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 z powodu następującego błędu: %%1053 Error: (12/31/2015 10:18:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0. Error: (12/30/2015 03:24:07 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 12:00:45 na ‎2015-‎12-‎30 było nieoczekiwane. Error: (12/30/2015 11:12:23 AM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera DESKTOP-IC1EPMR. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{77B99754-0C1A-44A2-91CE-425112E04856}. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (12/29/2015 03:10:41 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (12/29/2015 00:44:30 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Nie można zarejestrować nazwy „WORKGROUP :1d” w interfejsie o adresie IP 192.168.1.108. Komputer o adresie IP 192.168.1.103 nie zezwolił na przejęcie tej nazwy przez ten komputer. Error: (12/26/2015 09:57:48 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 16:37:31 na ‎2015-‎12-‎25 było nieoczekiwane. Error: (12/25/2015 04:37:31 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 16:16:59 na ‎2015-‎12-‎25 było nieoczekiwane. Error: (12/25/2015 03:51:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Ochrona oprogramowania z powodu następującego błędu: %%1053 Microsoft Office Sessions: ========================= Error: (12/31/2015 10:23:31 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: MakeMarkerFile.exe1.0.0.25021e5e8MakeMarkerFile.exe1.0.0.25021e5e8c0000417000000000014d7ccb8001d143ac29212edeC:\ProgramData\MakeMarkerFile.exeC:\ProgramData\MakeMarkerFile.exe283c3407-afa0-11e5-bfc3-208984120641 Error: (12/31/2015 10:11:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: MakeMarkerFile.exe1.0.0.25021e5e8MakeMarkerFile.exe1.0.0.25021e5e8c0000417000000000014d7cceac01d143ab039e6837C:\ProgramData\MakeMarkerFile.exeC:\ProgramData\MakeMarkerFile.exe6c9be236-af9e-11e5-bfc2-208984120641 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6640 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6640 Error: (12/31/2015 10:04:46 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 13656 Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 13656 Error: (12/30/2015 08:10:09 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 08:09:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 10811468 Error: (12/30/2015 08:09:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 10811468 CodeIntegrity Errors: =================================== Date: 2015-12-25 16:21:36.333 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 16:17:04.993 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 16:13:48.669 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 15:52:27.479 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 15:52:27.315 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 14:19:23.944 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 13:58:26.777 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-25 13:44:13.731 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2015-12-25 13:44:13.727 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2015-12-25 13:44:13.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz Percentage of memory in use: 58% Total physical RAM: 1939.42 MB Available physical RAM: 800.74 MB Total Pagefile: 2771.42 MB Available Pagefile: 1516.79 MB Total Virtual: 131072 MB Available Virtual: 131071.78 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:670.87 GB) (Free:206.66 GB) NTFS Drive d: (Mój dysk) (CDROM) (Total:2.34 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 698.6 GB) (Disk ID: 008246AD) Partition: GPT Partition Type. ==================== End Of Log ============================