Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:10-01-2015 01 Uruchomiony przez User (2016-01-14 20:06:36) Uruchomiony z D:\pulpit\logi forum wir Windows 7 Home Premium Service Pack 1 (X64) (2014-10-06 11:44:21) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-3744674034-1829455987-1226542453-500 - Administrator - Disabled) Gość (S-1-5-21-3744674034-1829455987-1226542453-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3744674034-1829455987-1226542453-1007 - Limited - Enabled) User (S-1-5-21-3744674034-1829455987-1226542453-1000 - Administrator - Enabled) => C:\Users\User ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Norton Internet Security (Enabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Enabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66} FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-3744674034-1829455987-1226542453-1000\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Photoshop CS3 (HKLM-x32\...\Adobe_678cd98c8365a5647f9a2e539d120a8) (Version: 10.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) ALLPlayer V6.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) Assassin's Creed III (HKLM-x32\...\Assassin's Creed III_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) Assassin's Creed III 1.01 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft) Assassin's Creed Revelations (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.00 - Ubisoft) ATI Catalyst Install Manager (HKLM\...\{FB07515A-48AC-9996-16EE-3A3DC8CF8D8E}) (Version: 3.0.790.0 - ATI Technologies, Inc.) AutoCAD 2013 – Polski (Polish) (HKLM\...\AutoCAD 2013 – Polski (Polish)) (Version: 19.0.55.0 - Autodesk) AutoCAD 2013 – Polski (Polish) (Version: 19.0.55.0 - Autodesk) Hidden AutoCAD 2013 Language Pack – Polski (Polish) (Version: 19.0.55.0 - Autodesk) Hidden Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.0.84.0 - Autodesk) Autodesk Content Service (x32 Version: 3.0.84.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.0.84.0 - Autodesk) Hidden Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk) Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk) Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.) ccc-core-static (x32 Version: 2010.0909.1412.23625 - Nazwa firmy) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform) CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) DAEMON Tools Toolbar (HKLM-x32\...\DAEMON Tools Toolbar) (Version: 1.0.8.0552 - DT Soft Ltd) <==== UWAGA Deus Ex GOTY (HKLM-x32\...\GOGPACKDEUSEX_is1) (Version: 2.0.0.11 - GOG.com) Dishonored - Game of the Year Edition (HKLM-x32\...\Dishonored - Game of the Year Edition_is1) (Version: - ) f.lux (HKU\S-1-5-21-3744674034-1829455987-1226542453-1000\...\Flux) (Version: - ) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Far Cry 2 (HKLM-x32\...\{F2835483-37F2-4123-B4FE-0E77D58447F2}) (Version: 1.00.00 - Ubisoft) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: - ) HP DVB-T TV Tuner 8.0.64.43 (HKLM-x32\...\HP DVB-T TV Tuner) (Version: 8.0.64.43 - ) HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version: - ) HP SimplePass Identity Protection (HKLM\...\{5BF97E02-2F6A-412A-BB4D-B6E2DC65FCA7}) (Version: 5.20.233 - DigitalPersona, Inc.) HP Software Framework (HKLM-x32\...\{91CB7149-DD2C-48C7-8DEC-D32EDA2F69F3}) (Version: 4.0.59.1 - Hewlett-Packard Company) HP Tone Control (HKLM\...\{9207D4A1-586E-49CA-A002-FC9F475AB1A3}) (Version: 2.0.2 - Hewlett-Packard Company) hppLaserJetService (x32 Version: 001.003.000145 - Hewlett-Packard) Hidden hppM1130M1210SeriesLaserJetService (x32 Version: 001.003.00073 - Hewlett-Packard) Hidden hppusgM1130M1210Series (x32 Version: 1.0.0.2 - Hewlett-Packard) Hidden HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6292.0 - IDT) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation) Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation) Kan H2O - Deinstalacja programu (HKLM-x32\...\Kan H2O 1.5_is1) (Version: wersja 1.5 - SANKOM Sp. z o.o.) Kan OZC - Deinstalacja programu (HKLM-x32\...\Kan OZC 4.0_is1) (Version: wersja 4.0 - SANKOM Sp. z o.o.) K-Lite Codec Pack 10.8.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.0 - ) Malwarebytes Anti-Malware wersja 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden Mass Effect (HKLM-x32\...\Mass Effect_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Norma Pro - wersja edukacyjna (HKLM-x32\...\{670D6292-74C1-4BFD-A0E1-38E9D58AC644}) (Version: - ) Norton Internet Security (HKLM-x32\...\NIS) (Version: 22.5.5.15 - Symantec Corporation) NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Opera Stable 34.0.2036.25 (HKLM-x32\...\Opera 34.0.2036.25) (Version: 34.0.2036.25 - Opera Software) PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP) Spolszczenie do The Wolf Among Us Sezon I (HKLM-x32\...\Spolszczenie do The Wolf Among Us) (Version: 1.5 - GrajPoPolsku) Spotify (HKU\S-1-5-21-3744674034-1829455987-1226542453-1000\...\Spotify) (Version: 1.0.20.94.g8f8543b3 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Sunrise Seven 1.1.54 (HKLM-x32\...\{AB0DBC9A-422A-4888-A8E5-A32EC1779E68}_is1) (Version: - Sunrise Software) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) The Walking Dead Season 2 Episode 5 Only [AmGaD-SaLaH] version 1.0.8.0 (HKLM-x32\...\The Walking Dead Season 2 Episode 5 Only [AmGaD-SaLaH]_is1) (Version: 1.0.8.0 - TeRM!NaToR) The Wolf Among Us (HKLM-x32\...\The Wolf Among Us_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) Tomb Raider: Underworld 1.0 (HKLM-x32\...\Tomb Raider: Underworld) (Version: - ) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Validity Sensors DDK (HKLM\...\{426FAE9F-7373-496E-A215-9DB7EF4398CF}) (Version: 4.1.139.0 - Validity Sensors, Inc.) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3744674034-1829455987-1226542453-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> D:\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3744674034-1829455987-1226542453-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> D:\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3744674034-1829455987-1226542453-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> D:\Autodesk\AutoCAD 2013\pl-PL\acadficn.dll (Autodesk, Inc.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {06B46958-45F2-49DE-AAF3-19BFFCBF10AF} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation) Task: {14D9077B-3B46-4B9C-AB16-0AF0ABE00705} - System32\Tasks\{22A0FF9C-B9C0-4D08-9516-B38D8F02A3BE} => pcalua.exe -a "D:\pulpit\Gry\Worms World Party\RegSetup.exe" -d "D:\pulpit\Gry\Worms World Party" Task: {3B08853D-49E3-4E32-A9CF-3B83DBE9E468} - System32\Tasks\{60CB3D42-744D-43ED-B489-78AF39AB1EB6} => pcalua.exe -a D:\pulpit\sterowniki\sp52354.exe -d D:\pulpit\sterowniki Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {5FA31742-271E-459E-9A47-CA4645075757} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3744674034-1829455987-1226542453-1000Core => C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-02] (Facebook Inc.) Task: {61AE9EB7-2218-4D3E-81D9-20FBFC5C242C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-02] (Adobe Systems Incorporated) Task: {675B073E-EC25-4038-B907-81741D42BC5D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd) Task: {BDA58164-103F-41B1-944D-991A434513B6} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-01-06] (Symantec Corporation) Task: {D39EDAB5-7A55-4D15-87EF-7373DB310CEA} - System32\Tasks\Opera scheduled Autoupdate 1412777379 => C:\Program Files (x86)\Opera\launcher.exe [2015-12-04] (Opera Software) Task: {D5528A14-82E7-480A-8253-C1837A7412AB} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation) Task: {DCAE29DC-91F9-4096-A24B-6F5B685137F9} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe [2016-01-06] (Symantec Corporation) Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {E30ADDF3-D76A-45E1-94E4-72C0F00E2619} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3744674034-1829455987-1226542453-1000UA => C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-02] (Facebook Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3744674034-1829455987-1226542453-1000Core.job => C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3744674034-1829455987-1226542453-1000UA.job => C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1419625588&from=smt&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E54EL010EL010 ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1419625588&from=smt&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E54EL010EL010 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 12.17 1863.lnk -> C:\Program Files\Opera x64\opera.exe (Opera Software) -> hxxp://www.mystartsearch.com/?type=sc&ts=1419625588&from=smt&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E54EL010EL010 ==================== Załadowane moduły (filtrowane) ============== 2014-10-14 14:15 - 2012-09-29 12:25 - 00409088 _____ () C:\Windows\System32\HPM1210LM.DLL 2014-10-14 14:15 - 2012-09-29 12:25 - 00074240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\HPM1210PP.dll 2014-10-23 16:26 - 2014-10-23 16:26 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2010-09-09 14:50 - 2010-09-09 14:50 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-09 13:11 - 2010-09-09 13:11 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-10-14 14:15 - 2012-09-29 12:26 - 03120128 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\hpm1210su.dll 2014-10-14 14:15 - 2012-09-29 12:53 - 01038336 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\HPM1210GC.dll 2014-10-14 14:15 - 2012-09-29 12:25 - 00363008 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\hpm1210sd.dll 2016-01-14 18:54 - 2016-01-14 18:54 - 00380416 _____ () D:\pulpit\logi forum wir\67sl15o8.exe 2009-10-15 10:13 - 2009-10-15 10:13 - 00061440 _____ () C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll 2009-10-15 10:13 - 2009-10-15 10:13 - 00964096 _____ () C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll 2012-12-24 05:53 - 2012-12-24 05:53 - 00082944 _____ () C:\Windows\system32\mvusbews.DLL 2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DpHost => ""="Service" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3744674034-1829455987-1226542453-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\startupreg: ALLPlayer WiFi Remote => C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe MSCONFIG\startupreg: ALLUpdate => "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" MSCONFIG\startupreg: Napisy24Update => "C:\Program Files (x86)\Napisy24\Napisy24Update.exe" "sleep" MSCONFIG\startupreg: Spotify => "C:\Users\User\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe" MSCONFIG\startupreg: uTorrent => "C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{A6C49B4F-F53E-4247-86A2-1FE6ACC6017B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{47EF7D47-F8C8-4357-9486-DEABB190DC20}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{E507B4B7-BAE9-458B-83C6-D630D9CC9075}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{98BBA267-E910-4A39-98C6-71A30CB1CDB6}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{32EAECAF-3438-4773-89B1-28186587F998}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{609D3608-825A-45A2-867D-864BFA2398F4}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{9A6785F0-B14A-47CC-A551-08B2B00BB40F}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{9DC91991-9662-41B9-8BAE-FD97402EE85D}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{D4D05797-8028-4041-A8B9-C3461A262C69}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{2E6AF297-9EFE-4CC6-A551-9CBB5723D1D7}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{FE75B577-D273-46D6-9B04-2C416A9B478A}] => (Allow) LPort=50248 FirewallRules: [{75F77F69-0B0B-45AD-9024-B3FF05C5BEE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{B59C9613-BB47-4F60-A122-19D05EF26A34}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{61EB663A-11F5-4FF0-8D5A-E13A0DB46689}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{E90677D4-BFB4-4DF9-8C58-930B04264FF0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{EF70E1C1-0DCF-4177-9DC5-32E1740E86E6}] => (Allow) C:\Users\User\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{B3D96B49-535C-49A2-8817-539C15134733}] => (Allow) D:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{42FB53BD-2892-41E4-980F-7A8DFA6F2FD2}] => (Allow) D:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{6E5AD4E7-0426-4D64-ADE2-1578F400B6A8}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{CEFA0DB3-412D-4DE3-A73A-E0D3EB350E38}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{73D837E1-1B4A-4E8C-97F3-12DB19DDBA8B}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A25756B1-70E1-4490-A87A-213ED6FE25B1}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{BC870A4D-0FC8-4FAF-8B97-12C860B00895}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{12ABB451-320D-44CD-89DF-4811E8BD557D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{1D29E4CF-65AB-49D7-9E76-F8BE98C2781D}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe FirewallRules: [{8B178F40-A902-49F1-B601-9903B3B410DF}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe FirewallRules: [{6197661E-B7C6-4D9F-9353-16305A4299CC}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Launcher.exe FirewallRules: [{6F157B34-439C-4DB8-AA83-D128F35F2FF7}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Launcher.exe FirewallRules: [{282F28F8-7A70-4F62-B52A-5F639092F8E6}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Editor.exe FirewallRules: [{01CCA24B-4AC4-4B7E-81D0-C506946A6B60}] => (Allow) D:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Editor.exe FirewallRules: [TCP Query User{72CBBC5B-187C-4639-ADDF-4A73C97B2BBC}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{65FEF514-AFBF-4E52-A79A-62B79EB3168D}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe FirewallRules: [{9E2C47B8-F8AF-4A9D-B8C1-7DC6BC8AEE21}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{E4B7A1E8-D103-41D0-AEF7-2C30E3CC03B5}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{B8599131-EEF4-414E-ACA9-CEBA39EFEBAD}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe FirewallRules: [{052187BB-9CA6-412E-9B80-F75878198C82}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe FirewallRules: [{544BB164-D264-48B7-BC33-897D4425C3E1}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe FirewallRules: [{730967E2-9AE1-4D68-BBD5-9E661E4E489C}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe FirewallRules: [{C819ED84-3D21-4632-A08F-3F52F558EA41}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe FirewallRules: [{C4F9D3B8-307C-4A66-9A11-489D5BA62C27}] => (Allow) D:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe FirewallRules: [TCP Query User{2E822E03-53A3-49A0-A819-C6926DC5269B}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{1A69474C-56AD-4C58-979F-DCE264698EE6}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{0C666D75-CD60-4D1D-A0BC-44BD2AC3E4EB}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{88B66B4F-1BB3-4523-9F99-665F4BA3DECF}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{EF65D94A-9261-41EA-9701-87A3CDA08318}C:\program files (x86)\utorrent\utorrent.exe] => (Allow) C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [UDP Query User{16960D4B-91E3-4A43-B5F7-CFE4952BC50F}C:\program files (x86)\utorrent\utorrent.exe] => (Allow) C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [TCP Query User{38503B46-9EFF-4339-99AC-28C31D5D3586}D:\pulpit\gry\mortal kombat komplete edition\disccontentpc\mkke.exe] => (Block) D:\pulpit\gry\mortal kombat komplete edition\disccontentpc\mkke.exe FirewallRules: [UDP Query User{5850342E-0439-4760-B1DB-9BABD4597281}D:\pulpit\gry\mortal kombat komplete edition\disccontentpc\mkke.exe] => (Block) D:\pulpit\gry\mortal kombat komplete edition\disccontentpc\mkke.exe FirewallRules: [TCP Query User{CC6047D4-24C4-4057-955C-AE7D108021B9}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{0AD8CF12-5133-4E7F-A12B-E114CC8C7A5D}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe ==================== Punkty Przywracania systemu ========================= 27-12-2015 15:43:01 Zaplanowany punkt kontrolny 03-01-2016 23:52:21 Zaplanowany punkt kontrolny 13-01-2016 11:46:58 Zaplanowany punkt kontrolny 13-01-2016 23:52:44 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/14/2016 06:44:25 PM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.34209 - Wystąpił błąd podczas inicjacji infrastruktury dołączania interfejsu API profilowania. Ten proces nie zezwoli na dołączenie profilera. HRESULT: 0x80004005. Identyfikator procesu (liczba dziesiętna): 7628. Identyfikator komunikatu: [0x2509]. Error: (01/14/2016 09:59:14 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80004005 Error: (01/14/2016 09:07:11 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/13/2016 01:52:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/13/2016 01:16:26 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80004005 Error: (01/13/2016 07:55:50 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: atieclxx.exe, wersja: 6.14.11.1069, sygnatura czasowa: 0x4c892701 Nazwa modułu powodującego błąd: atiadlxx.dll, wersja: 6.14.10.1054, sygnatura czasowa: 0x4c891f0c Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001f468 Identyfikator procesu powodującego błąd: 0x5e4 Godzina uruchomienia aplikacji powodującej błąd: 0xatieclxx.exe0 Ścieżka aplikacji powodującej błąd: atieclxx.exe1 Ścieżka modułu powodującego błąd: atieclxx.exe2 Identyfikator raportu: atieclxx.exe3 Error: (01/13/2016 07:31:32 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/12/2016 06:14:05 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80004005 Error: (01/12/2016 12:19:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/11/2016 05:22:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Dziennik System: ============= Error: (01/13/2016 01:49:31 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/11/2016 11:15:29 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/11/2016 05:20:43 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 17:19:36 na ‎2016-‎01-‎11 było nieoczekiwane. Error: (01/11/2016 05:11:51 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 17:10:52 na ‎2016-‎01-‎11 było nieoczekiwane. Error: (01/11/2016 05:04:06 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 17:03:12 na ‎2016-‎01-‎11 było nieoczekiwane. Error: (01/11/2016 12:08:21 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 80. Error: (01/11/2016 01:02:07 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/10/2016 12:32:03 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/09/2016 04:57:07 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/07/2016 11:56:12 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5 CPU M 450 @ 2.40GHz Procent pamięci w użyciu: 59% Całkowita pamięć fizyczna: 3893.86 MB Dostępna pamięć fizyczna: 1573.15 MB Całkowita pamięć wirtualna: 7785.93 MB Dostępna pamięć wirtualna: 5249.56 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:146.39 GB) (Free:84.3 GB) NTFS Drive d: () (Fixed) (Total:785.03 GB) (Free:36.69 GB) NTFS Drive f: () (Removable) (Total:14.44 GB) (Free:14.43 GB) FAT32 ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9D3B2C3D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=146.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=785 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 14.5 GB) (Disk ID: 5A597052) Partition 1: (Not Active) - (Size=14.5 GB) - (Type=0C) ==================== Koniec Addition.txt ============================