Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:31-12-2015 Uruchomiony przez mediamarkt (2016-01-02 16:01:33) Uruchomiony z C:\Users\mediamarkt\Desktop\czyszczenie Windows 8.1 (X64) (2014-10-08 19:16:03) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= admin (S-1-5-21-2568246086-2447926606-4193830083-1003 - Administrator - Enabled) => C:\Users\admin Administrator (S-1-5-21-2568246086-2447926606-4193830083-500 - Administrator - Disabled) Gość (S-1-5-21-2568246086-2447926606-4193830083-501 - Limited - Disabled) mediamarkt (S-1-5-21-2568246086-2447926606-4193830083-1002 - Administrator - Enabled) => C:\Users\mediamarkt UpdatusUser (S-1-5-21-2568246086-2447926606-4193830083-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B} AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 64 Bit HP CIO Components Installer (Version: 8.2.1 - Hewlett-Packard) Hidden Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Reader X (10.1.7) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.7 - Adobe Systems Incorporated) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden daugava 2.0.0.701 (HKLM\...\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1) (Version: 2.0.0.701 - daugava) Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.4 - Samsung Electronics CO.,LTD.) E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.) ETDWare PS/2-X64 11.7.2.1_WHQL (HKLM\...\Elantech) (Version: 11.7.2.1 - ELAN Microelectronic Corp.) FilesFrog Update Checker (HKLM-x32\...\FilesFrog Update Checker) (Version: - ) <==== UWAGA Firebird 2.5.1 (x64) (HKLM\...\FBDBServer_2_5_x64_is1) (Version: 2.5.1 - ProgMan) Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Help Desk (HKLM\...\{C85A891D-7AB4-46AE-84F0-B0C3FAC82280}) (Version: 1.0.4 - Samsung Electronics CO., LTD.) IB Updater 2.0.0.578 (HKLM\...\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1) (Version: 2.0.0.578 - IncrediBar) <==== UWAGA IB Updater Service (HKLM\...\WNLT) (Version: 2.0.1.1 - ) <==== UWAGA Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33070) (Version: 3.6.1.33070.11 - Intel) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36702 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0004 - SweetIM Technologies Ltd.) Hidden <==== UWAGA Internet Manager (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation) Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 43.0.3 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0.3 (x86 pl)) (Version: 43.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.3.5835 - Mozilla) Nero BurningROM 2015 (HKLM-x32\...\{6A4B15CC-4E95-45A1-807A-AB7267B02959}) (Version: 16.0.02000 - Nero AG) Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG) Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.45 - Symantec Corporation) Norton Online Backup ARA (x32 Version: 4.1.0.11 - Symantec Corporation) Hidden NVIDIA Graphics Driver 305.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 305.46 - NVIDIA Corporation) NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation) Poczta usługi Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Prerequisite installer (x32 Version: 16.0.0003 - Nero AG) Hidden Progman Finanse (HKLM-x32\...\{362D7EC8-F57D-422E-B7E2-2A983DA6C52F}) (Version: 10.2.0 - Wolters Kluwer SA) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.0 - Samsung Electronics CO., LTD.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6699 - Realtek Semiconductor Corp.) Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.4.0 - Samsung Electronics CO., LTD.) S Agent (Version: 1.0.7 - Samsung Electronics CO., LTD.) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.) Support Center (HKLM\...\{332518C0-0D31-4FFA-9D15-24C9C3D70B08}) (Version: 2.0.7 - Samsung Electronics CO., LTD.) Support Center FAQ (x32 Version: 1.0.0 - Samsung Electronics CO., LTD.) Hidden SW Update (HKLM-x32\...\{3B4E6027-AED5-4169-B030-B450E5A0F396}) (Version: 2.0.14 - Samsung Electronics CO., LTD.) SweetIM Bundle by SweetPacks (HKLM-x32\...\SweetIM Bundle by SweetPacks) (Version: 1.0.0.0 - SweetPacks LTD) <==== UWAGA SweetIM for Messenger 3.7 (x32 Version: 3.7.0007 - SweetIM Technologies Ltd.) Hidden <==== UWAGA SweetPacks bundle uninstaller (HKLM-x32\...\{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}) (Version: 1.0.0000 - SweetIM Technologies Ltd.) <==== UWAGA TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer) Unity Web Player (HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS) Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008 - SweetIM Technologies Ltd.) Hidden <==== UWAGA User Guide (HKLM-x32\...\{039EA659-E421-45C6-8913-BED5D69B5536}) (Version: 1.1.00 - Samsung Electronics CO., LTD.) Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.) Wyposazenie DDJ (HKLM-x32\...\{C915E45B-BCAE-42F2-B2FB-8D1B407A6738}) (Version: 6.1000 - ProgMan) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {01F17B40-C629-4F8E-81DA-73593E834B41} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {0CC6FA9C-93C1-40FF-9CEB-22031AA1BAD3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29] (Adobe Systems Incorporated) Task: {12CC0974-8150-48D5-991F-C2DE29CA106E} - System32\Tasks\Cawlez => C:\Program Files\daugava\Irosioe.bat [2015-07-22] () Task: {17DF6AB2-66EA-4508-855A-C6C15525E42A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: {2AAA2E89-4593-418F-A449-8FF37763AB31} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe Task: {2F4E4BD7-406A-49FD-B9BF-079632BF942B} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG) Task: {45CE0D03-2C0C-460E-931A-DBFB6799C870} - System32\Tasks\{3A585412-3990-4861-B4DB-4B25966924AE} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.0.106/pl/go/help.faq.installer?source=lightinstaller&LastError=1603 Task: {5427284F-5C82-48AC-B723-7EA7784D72D9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {61E2FE82-B695-4083-B8F5-3C4A2C06EE94} - System32\Tasks\{CEF4BE7E-FE91-4436-955E-E336C0C5C28B} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.0.106/pl/go/help.faq.installer?source=lightinstaller&LastError=1603 Task: {79F1C2ED-785D-43E9-B6C9-17AC258C6594} - System32\Tasks\{0C3F37F0-C80D-4F7C-BDBF-558EDFA33BE0} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.0.106/pl/go/help.faq.installer?source=lightinstaller&LastError=1603 Task: {85D72D7C-216D-47E2-AA34-5287CE68F270} - System32\Tasks\SWUpdateAgent => C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2012-08-22] (Samsung Electronics CO., LTD.) Task: {88AA51A9-BEBB-43D2-A966-EEDDBCB8E5F4} - System32\Tasks\{767865AF-DE98-4EB2-9797-E56BCAF64B1C} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.0.106/pl/abandoninstall?source=lightinstaller&page=tsPlugin Task: {B2048791-3C0A-404B-96F8-EFBDDFCB08E3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-10] (Microsoft Corporation) Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {C1FB5625-5AA2-4FBE-933B-BA09DBF9FD06} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: {C2237374-AFB0-43CA-B0C1-AE5804CDD802} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.3.12\SymErr.exe Task: {C6F8ED6C-10AA-47AC-80BB-B4E5FE3E27B9} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2012-08-17] (Samsung Electronics CO., LTD.) Task: {DD2D60F0-1B15-4160-883A-6BBB250FF525} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-08-26] (Samsung Electronics CO., LTD.) Task: {F20239AD-6A5A-483D-B816-FBFC9A375F1B} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-08-15] (SEC) Task: {F65C6160-4B3A-44DF-B686-2785C83C5EC0} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.3.12\SymErr.exe (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\Public\Desktop\Internet Manager.lnk -> C:\Program Files (x86)\Internet Manager\LaunchWebUI.exe () -> hxxp://uFi.home ==================== Załadowane moduły (filtrowane) ============== 2015-03-12 15:06 - 2015-09-28 05:39 - 00657920 _____ () C:\WINDOWS\system32\DNSAPI.dll 2015-03-12 15:06 - 2015-09-28 05:39 - 00657920 _____ () c:\windows\system32\DNSAPI.dll 2015-03-12 15:06 - 2015-09-28 05:39 - 00657920 _____ () C:\WINDOWS\System32\DNSAPI.dll 2014-12-23 11:00 - 2012-08-31 15:03 - 00288768 _____ () C:\WINDOWS\System32\HP1100LM.DLL 2009-07-13 14:00 - 2009-07-13 14:00 - 00059904 _____ () C:\WINDOWS\System32\R2E6AM.DLL 2014-12-23 11:00 - 2012-08-31 15:02 - 00074240 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\HP1100PP.DLL 2014-12-23 11:00 - 2012-08-31 15:02 - 01038336 _____ () C:\WINDOWS\system32\spool\DRIVERS\x64\3\HP1100GC.dll 2014-12-23 11:00 - 2012-08-31 15:03 - 03034112 _____ () C:\WINDOWS\system32\spool\DRIVERS\x64\3\hp1100su.dll 2013-02-27 16:45 - 2013-01-29 14:30 - 00188760 _____ () C:\Program Files\IB Updater\ExtensionUpdaterService.exe 2012-08-26 10:48 - 2012-08-26 10:48 - 00076920 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe 2015-03-12 15:06 - 2015-09-28 05:39 - 00657920 _____ () C:\WINDOWS\SYSTEM32\DNSAPI.dll 2012-08-10 10:28 - 2012-08-10 10:28 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll 2012-08-10 10:23 - 2012-08-10 10:23 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\pl-PL\BtTray.pl-PL.dll 2014-01-29 22:02 - 2015-06-01 20:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-08-22 09:45 - 2012-08-16 15:12 - 00669696 _____ () C:\Program Files\Samsung\Recovery\Clonix.UC.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00028280 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 01015416 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00026232 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00029816 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll 2012-08-26 10:48 - 2012-08-26 10:48 - 00091768 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-2568246086-2447926606-4193830083-1001\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\mediamarkt\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp DNS Servers: Urządzenie nie jest podłączone do internetu. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [UDP Query User{9A8D3489-6E6A-4E08-AC28-4C8ABCFF580E}C:\windows\system32\spool\drivers\x64\3\r2e6asdc.exe] => (Allow) C:\windows\system32\spool\drivers\x64\3\r2e6asdc.exe FirewallRules: [TCP Query User{D6586B13-A17C-4EE7-825B-1E1A09E4ADF0}C:\windows\system32\spool\drivers\x64\3\r2e6asdc.exe] => (Allow) C:\windows\system32\spool\drivers\x64\3\r2e6asdc.exe FirewallRules: [UDP Query User{D96BC450-63DA-4C95-88D1-0B1F86C3DA32}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe FirewallRules: [TCP Query User{C46BE2EE-86A0-4687-B960-B6C11D1B150C}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe FirewallRules: [UDP Query User{D46892BA-8148-4978-8D61-F3EBD086C01B}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe FirewallRules: [TCP Query User{8F126BD5-0217-476F-8CC5-F5356E88E9F6}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe FirewallRules: [{EDB7090C-A693-42CA-A420-4D3928DFDA5C}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{BB8F796D-4F24-48EE-80D9-3010FF88EA0D}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{062340B7-A292-4755-8494-CA9DFCF357E2}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{01AE37DF-059D-454E-8FB4-0FE2452D6C82}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{7429E7F7-A7F4-4FEB-A46D-D80B0146EB5A}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{4BE0B7E1-B9E0-4DD0-8D6E-2DF966869BBB}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{492973BC-07A9-47BA-9DBC-B19003055139}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{7C2466C2-8E2D-4844-8F0D-714CCB5BE4E2}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [UDP Query User{E23CE469-98EC-490A-A415-077934830BB9}D:\gry\ac3\assassins creed iii\ac3sp.exe] => (Allow) D:\gry\ac3\assassins creed iii\ac3sp.exe FirewallRules: [TCP Query User{65145837-3079-459D-8F88-7070AD3EBCBD}D:\gry\ac3\assassins creed iii\ac3sp.exe] => (Allow) D:\gry\ac3\assassins creed iii\ac3sp.exe FirewallRules: [{59C330BD-A7ED-4959-9668-511A7B7B86C2}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{B30045D9-7C62-49EE-BA35-CEC0E26D5EB1}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{86A952FC-7D1D-4921-920E-A41A815D6037}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{469CC992-6820-40C9-9286-588DFD166496}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{0F27452D-D91A-439B-8982-53229E685D06}] => (Allow) LPort=1900 FirewallRules: [{ACAA08E9-6241-4F15-AE78-3220B0DA9CF7}] => (Allow) LPort=2869 FirewallRules: [{B368F3B5-DCF4-4B81-BBF5-DD26D332F12B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{B6E013D5-B421-4D22-8D30-7CA1D10128CA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{940DD896-107E-4598-B741-958E1D897A0A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{309A7EE4-0C66-4414-8701-6D1CAA16CD7C}] => (Allow) C:\Users\mediamarkt\AppData\Local\Temp\7zSFDEC.tmp\SymNRT.exe FirewallRules: [{787C72AA-4EEA-4406-A63C-BB14866183D6}] => (Allow) C:\Users\mediamarkt\AppData\Local\Temp\7zSFDEC.tmp\SymNRT.exe FirewallRules: [{169CA283-B252-4C3F-90E4-D31BA6B74BB3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{53F79B52-0C7A-48FF-B603-E5DE043FF863}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{595DF25D-F927-4C2C-9059-A7CC33643EAC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{86C27DE9-E36A-48D1-8ABD-30D7CDCDFCBC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{F6CA8EF4-7094-423B-BC97-C956764A22DA}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe FirewallRules: [{1E7BC113-C197-4950-BE31-9B58BB6B16CE}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe FirewallRules: [{A667C534-A005-4D32-B6FA-D6D21E2BAEBB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{2C1C0AA5-B259-4F87-AEDF-1475D4CB3E58}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{1330DAF2-6A44-4B19-B94D-E348D016566D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{02876651-ADFF-442A-810E-CB7A1F43BF01}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{10B7ED03-D984-443D-9DA9-7FE9ABDE5C31}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1A0B20A7-DBD6-492A-9C16-ECDBD8092595}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Punkty Przywracania systemu ========================= ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/02/2016 03:55:27 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program Explorer.EXE w wersji 6.3.9600.17667 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: c18 Godzina rozpoczęcia: 01d1456cc1905222 Godzina zakończenia: 0 Ścieżka aplikacji: C:\WINDOWS\Explorer.EXE Identyfikator raportu: cc08dd5c-b160-11e5-81ec-50b7c32c82be Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (01/02/2016 03:50:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji Microsoft.BingFinance_8wekyb3d8bbwe!AppexFinance nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:50:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji Microsoft.BingSports_8wekyb3d8bbwe!AppexSports nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:46:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:46:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:46:22 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:46:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:46:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:43:11 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail nie powiodła się. Błąd: -2147024891. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (01/02/2016 03:41:21 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: mm) Description: Aktywacja aplikacji Microsoft.BingFinance_8wekyb3d8bbwe!AppexFinance nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Dziennik System: ============= Error: (01/02/2016 03:58:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Intel(R) Management and Security Application User Notification Service zależy od usługi Intel(R) Management and Security Application Local Management Service, której nie można uruchomić z powodu następującego błędu: %%1053 Error: (01/02/2016 03:58:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Intel(R) Management and Security Application Local Management Service z powodu następującego błędu: %%1053 Error: (01/02/2016 03:58:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Management and Security Application Local Management Service. Error: (01/02/2016 03:56:31 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa NVIDIA Update Service Daemon zawiesiła się podczas uruchamiania. Error: (01/02/2016 03:55:57 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (01/02/2016 03:55:19 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (01/02/2016 03:54:05 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa Norton Online Backup zawiesiła się podczas uruchamiania. Error: (01/02/2016 03:51:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Intel(R) Management and Security Application Local Management Service z powodu następującego błędu: %%1053 Error: (01/02/2016 03:51:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Management and Security Application Local Management Service. Error: (01/02/2016 03:46:32 PM) (Source: DCOM) (EventID: 10000) (User: mm) Description: C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}5{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} CodeIntegrity: =================================== Date: 2015-01-15 09:55:37.041 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-15 09:55:36.885 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-15 09:55:36.760 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-12 05:27:48.940 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-12 05:27:48.143 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-12 05:27:47.018 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-11 23:43:05.508 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-11 23:43:04.738 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-11 23:43:04.472 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-01-11 23:43:04.222 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Pentium(R) CPU B970 @ 2.30GHz Procent pamięci w użyciu: 46% Całkowita pamięć fizyczna: 3795.54 MB Dostępna pamięć fizyczna: 2037.2 MB Całkowita pamięć wirtualna: 4435.54 MB Dostępna pamięć wirtualna: 2836.29 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:138.03 GB) (Free:91.14 GB) NTFS Drive d: (BIG) (Fixed) (Total:134.05 GB) (Free:115.67 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 298.1 GB) (Disk ID: 6B3FE404) Partition: GPT. ==================== Koniec Addition.txt ============================