Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 18-01-2017 Uruchomiony przez Paulinka (20-01-2017 14:47:15) Uruchomiony z C:\Users\Paulinka\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2013-02-17 21:56:30) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-3453456924-2562164534-3920574783-500 - Administrator - Disabled) Gość (S-1-5-21-3453456924-2562164534-3920574783-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3453456924-2562164534-3920574783-1002 - Limited - Enabled) Paulinka (S-1-5-21-3453456924-2562164534-3920574783-1000 - Administrator - Enabled) => C:\Users\Paulinka ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Kaspersky Internet Security (Disabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B} AS: Kaspersky Internet Security (Disabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Disabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-3453456924-2562164534-3920574783-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.) Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.1 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.144 - Adobe Systems Incorporated) Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Aktualizacje NVIDIA 17.12.8 (Version: 17.12.8 - NVIDIA Corporation) Hidden Any Video Converter 5.8.5 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) ArtRage Studio (HKLM-x32\...\{C017CDD4-CDC7-4D08-8622-E89CF2D36304}) (Version: 3.5.11 - Ambient Design) AutoCAD 2011 - Polski (HKLM\...\AutoCAD 2011 - Polski) (Version: 18.1.49.0 - Autodesk) AutoCAD 2011 - Polski (Version: 18.1.49.0 - Autodesk) Hidden AutoCAD 2011 Language Pack - Polski (Version: 18.1.49.0 - Autodesk) Hidden Autodesk Material Library 2011 (HKLM-x32\...\{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}) (Version: 2.0.0.49 - Autodesk) Autodesk Material Library 2011 Base Image library (HKLM-x32\...\{CD1E078C-A6B9-47DA-B035-6365C85C7832}) (Version: 2.0.0.49 - Autodesk) CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform) Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{51DD370C-6690-424E-9674-5F14468B323F}) (Version: 15.0.0.487 - Corel Corporation) Corel Graphics - Windows Shell Extension (x32 Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0.0.486 - Corel Corporation) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0156 - Disc Soft Ltd) Deer Hunter - The 2005 Season (HKLM-x32\...\Deer Hunter 2005_is1) (Version: - Atari, Inc.) Dolby Control Center (HKLM\...\{20387B45-18A4-4D48-ABD9-A23D2CBE42B3}) (Version: 2.2.1 - Dolby) e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 7.0.3 - Ministerstwo Finansow) e-Deklaracje Desktop (x32 Version: 7.0.3 - Ministerstwo Finansow) Hidden Fallout2 (HKLM-x32\...\Fallout2) (Version: - ) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FIFA 13 (HKLM-x32\...\{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}) (Version: 1.8.0.0 - Electronic Arts) Google SketchUp Pro 8 (HKLM-x32\...\{3AB65E95-37D6-4DD7-8862-29AED3AFD54B}) (Version: 3.0.3117 - Google, Inc.) Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - ) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{F0932859-AA60-459E-B843-0BDECA34E2C7}) (Version: 2.0.0.0086 - Intel Corporation) ipla 2.8.4 (HKLM-x32\...\ipla) (Version: 2.8.4 - Redefine Sp z o.o.) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 7.0.0723 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 7.0.0723 - CyberLink Corp.) Hidden LG United Mobile Drivers (HKLM-x32\...\{0C1879C1-B74A-4C6D-8880-E3F54B78E816}) (Version: 3.7.1.0 - LG Electronics) Malwarebytes Anti-Malware wersja 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Matroska Pack (HKLM-x32\...\Matroska Pack) (Version: - ) Metric Collection SDK 35 (x32 Version: 1.2.0010.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.6.01055 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.81 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.81 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 10.1.1.35466 - Electronic Arts, Inc.) Panel sterowania NVIDIA 341.81 (Version: 341.81 - NVIDIA Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PeerBlock 1.1 (r518) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.1.0.518 - PeerBlock, LLC) PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Potplayer-64 bit (HKLM\...\PotPlayer64) (Version: - Kakao Corp.) PowerISO (HKLM-x32\...\PowerISO) (Version: 6.7 - Power Software Ltd) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6002 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SubEdit - Vista WMP Patch (HKLM-x32\...\SubEdit - Vista WMP Patch_is1) (Version: 1 - Artur Sikora) SubEdit-Player (HKLM-x32\...\SubEdit-Player_is1) (Version: 4072 - Artur Sikora) Tablet Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.6-3 - Wacom Technology Corp.) V-Ray for SketchUp (HKLM-x32\...\V-Ray for SketchUp 1.49.01) (Version: 1.49.01 - ASGVIS) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WinRAR 4.20 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Paulinka\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => Brak pliku CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-3453456924-2562164534-3920574783-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2011\acadficn.dll (Autodesk, Inc.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {1CB730A9-F45E-494B-B167-7E346714B91A} - System32\Tasks\{1BB78386-6C7B-41D7-BCE9-5C8BE8D44BDF} => pcalua.exe -a "C:\Program Files (x86)\GC_3D_PLUS\Odinstaluj.exe" Task: {313BFD36-87C9-4796-8038-2B41374C154D} - System32\Tasks\{8ABE5302-AE42-4267-9401-FC754BAF969C} => pcalua.exe -a C:\Users\Paulinka\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=cor Task: {46C6858C-C835-4867-BDBF-CE9622DC601E} - System32\Tasks\{240A8A45-39A2-4554-9DCC-9ADE7DF15B01} => pcalua.exe -a "D:\sterowniki do laptopa\Networking Wireless LAN\IN1WLN10WW6.exe" -d "D:\sterowniki do laptopa\Networking Wireless LAN" Task: {4CC710AE-7326-4EAF-952D-1C3987E37C57} - System32\Tasks\{070F2CAA-70F0-47E7-9C5D-138DE4668351} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Zone-La\uninstall.exe" -c shuz -f "C:\Program Files (x86)\Common Files\Zone-La\uninstall.dat" -a uninstallme 6484BA23-A802-4386-BEC1-4ECC276320F2 DeviceId=2914c279-73b5-d9f6-59f9-022cc315c318 BarcodeId=50127003 ChannelId=3 DistributerName=APSFImali Task: {4E5F1A5B-36DD-432D-8C97-5B5DB2809F58} - System32\Tasks\AdobeAAMUpdater-1.0-Malutka-Paulinka => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {580ECBC0-6D37-4B3E-8057-F28806827103} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd) Task: {6324BF94-D192-4074-842D-D2C0A6757A6D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe Task: {6E0641BD-93B4-489B-8440-B071BA12DED4} - System32\Tasks\UCBrowserSecureUpdater => C:\Program Files (x86)\UCBrowser\Security\uclauncher.exe [2017-01-16] (UC Web Inc.) <==== UWAGA Task: {7C65F3EA-52A3-4019-8FA3-786112A203D1} - System32\Tasks\e-pity2015_styczen => C:\Program Files (x86)\e-file\e-pity2014\Assets\signxml.exe Task: {8740F721-CF95-4014-82DB-DB1B8B54BF7E} - System32\Tasks\{EFCEF5C0-59C7-4E32-A4B1-018DA93752F5} => pcalua.exe -a "C:\Program Files (x86)\SubEdit-Player\unins000.exe" Task: {C99FB0B3-31BF-4EF2-B18A-C4279DDD3FE9} - System32\Tasks\UCBrowserUpdaterCore => C:\Program Files (x86)\UCBrowser\Application\update_task.exe [2017-01-16] (UCWeb Inc) <==== UWAGA Task: {D4F96357-7C2A-42A0-9179-090AF59F9581} - System32\Tasks\{EB7B0348-F2B1-4CAC-BC7D-BCFC638A8D3C} => pcalua.exe -a "C:\Program Files (x86)\GC_3D_PLUS\Odinstaluj.exe" Task: {DF8E43A9-F414-428A-B9A6-692E3C1BA9D3} - System32\Tasks\e-pity2015_kwiecien => C:\Program Files (x86)\e-file\e-pity2014\Assets\signxml.exe Task: {E36A39D7-1BD2-43F3-A143-E07046D5F3B6} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe [2017-01-16] (UCWeb Inc) <==== UWAGA Task: {F4D4EB95-92E6-4A68-A4A7-67F4A55BD3A5} - System32\Tasks\{06839A5B-26F8-4F80-97E7-7542F89E4E86} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Trippledex\uninstall.exe" -c shuz -f "C:\Program Files (x86)\Common Files\Trippledex\uninstall.dat" -a uninstallme F21897D3-73BC-42B9-892E-53DD84671141 DeviceId=2914c279-73b5-d9f6-59f9-022cc315c318 BarcodeId=51557003 ChannelId=3 DistributerName=APSFWemonetize Task: {F714C547-A9C6-4918-A005-6FF236E0310D} - System32\Tasks\Readaleanernert Client => C:\Program Files (x86)\Progesplerherle\plagadom.exe [2017-01-17] (Glarysoft Ltd) Task: {F9EE94CD-5788-4BC3-9517-96EB7CDE4D72} - System32\Tasks\{DBE72EC4-19E0-493A-ACD0-94F668FAD522} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Viva-It\uninstall.exe" -c shuz -f "C:\Program Files (x86)\Common Files\Viva-It\uninstall.dat" -a uninstallme B38A1F11-3C70-4EEB-B0DD-7598D2388463 DeviceId=2914c279-73b5-d9f6-59f9-022cc315c318 BarcodeId=51107003 ChannelId=3 DistributerName=APSFClickMeIn (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== UWAGA Task: C:\Windows\Tasks\UCBrowserUpdaterCore.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== UWAGA ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-11-07 17:21 - 2015-08-18 01:07 - 00115376 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2014-10-08 20:51 - 2013-06-06 03:09 - 01185048 ____N () C:\Program Files\Tablet\Wacom\libxml2.dll 2017-01-19 04:01 - 2017-01-19 04:01 - 00230400 _____ () C:\Program Files (x86)\abc0eec0-51f4-45e8-9b7f-32b7c5d5286f1484588692\proD09B.tmp 2017-01-20 13:28 - 2017-01-20 13:28 - 00433664 _____ () C:\Program Files (x86)\abc0eec0-51f4-45e8-9b7f-32b7c5d5286f1484588692\kns406B.tmp 2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-01-17 21:54 - 2017-01-17 21:54 - 00138240 _____ () c:\program files (x86)\progesplerherle\plmcache.dll 2017-01-16 18:45 - 2017-01-16 18:45 - 00224256 ____H () C:\Program Files (x86)\IVT Corporation\IVTCorporationLGElectronics.dll 2017-01-16 20:14 - 2017-01-16 20:14 - 00224256 ____H () C:\Program Files (x86)\Bagiph\KLiteCodecPackBagiph.dll 2017-01-17 21:58 - 2017-01-17 21:58 - 00224256 ____H () C:\Program Files (x86)\Progesplerherle\MirillisProgesplerherle.dll 2016-09-08 18:54 - 2016-09-20 17:45 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652] AlternateDataStreams: C:\Windows\system32\drivers:x64 [1479458] AlternateDataStreams: C:\Windows\system32\drivers:x86 [1205026] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) HKU\S-1-5-21-3453456924-2562164534-3920574783-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2017-01-20 11:58 - 00008405 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com 34.195.153.94 469ba60d9681f961064c-3cca6631dac1b4997db921c060b712f6.r30.cf2.rackcdn.com 34.195.153.94 a.bf-ad.net 34.195.153.94 a.visualrevenue.com 34.195.153.94 a1.vdna-assets.com 34.195.153.94 a248.e.akamai.net 34.195.153.94 aax.amazon-adsystem.com 34.195.153.94 ad.crwdcntrl.net 34.195.153.94 ad.mail.ru 34.195.153.94 ade.clmbtech.com 34.195.153.94 ads.adfox.ru 34.195.153.94 ads.pubmatic.com 34.195.153.94 apis.google.com 34.195.153.94 asset.pagefair.net 34.195.153.94 assets.adobedtm.com 34.195.153.94 assets.flocktory.com 34.195.153.94 autocontext.begun.ru 34.195.153.94 b.grvcdn.com 34.195.153.94 b.ns1p.net 34.195.153.94 b.scorecardresearch.com 34.195.153.94 b.wal.co Wykryto więcej niż wyliczono: 128 linii. ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3453456924-2562164534-3920574783-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Paulinka\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == MSCONFIG\startupfolder: C:^Users^Paulinka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: IPLA! => C:\Program Files (x86)\ipla\ipla.exe /autorun ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [TCP Query User{25A70E71-49FF-4623-8292-64D35224B0CC}C:\users\paulinka\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\paulinka\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{E8C6BD54-A56E-465F-A293-8EEBDB2F883F}C:\users\paulinka\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\paulinka\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{61A8A503-8361-4484-A475-B796417C3667}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{3E63E2A9-8C1B-4354-A627-67C38080B07B}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{8B49B3E7-CDD0-4014-94C7-527439DB3A17}] => C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe FirewallRules: [{1B18F998-6804-4FFA-A087-6F801BCADAE4}] => C:\Program Files (x86)\Origin Games\FIFA 13\Game\fifa13.exe FirewallRules: [{913237CA-FB6E-4D48-871B-43F69823B22B}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{06FC8B0A-C028-4B4E-A3B5-8DB77D894B9D}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1DDC8860-905F-4428-8AAA-227D4CE6D044}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{D22CBA2F-438A-4A5C-9051-9AB1FBCC3207}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{98FC21E9-D693-4C57-81CD-031349C9E68D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{6EDE0C33-22FF-42AF-A251-8FF0B87A1512}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{489E6FD9-3A96-4295-831A-20C38C9B99D3}] => D:\Steam\Steam.exe FirewallRules: [{28481065-EDF0-4959-910B-BFCB13A5BA5E}] => D:\Steam\Steam.exe FirewallRules: [{37DD6424-1F0F-469D-9455-3E72BBCF2174}] => D:\Steam\bin\steamwebhelper.exe FirewallRules: [{0CA78B4C-ED78-4929-8190-3B7F49C359F5}] => D:\Steam\bin\steamwebhelper.exe FirewallRules: [{832C317A-DC53-43E8-B44D-0ADE96655434}] => C:\Users\Paulinka\AppData\Roaming\Nox\bin\Nox.exe FirewallRules: [{DEFB4ABA-1C43-4D61-BC60-708014DB5A48}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe FirewallRules: [{F664A1AD-DA48-4109-A776-5BDF4E42C33D}] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe FirewallRules: [{73EBBF94-3D4B-4661-9F0D-F7FF415843D0}] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe FirewallRules: [{59257D13-E093-44EF-96B3-AC42535A99FE}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{01468FF9-F521-467F-B3FB-395425B57B1D}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4228A531-339B-472F-B553-B5B2A7627073}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{60BDC086-749C-4FA6-A1AE-3D792E0D3DC4}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{9FCFBC34-BFB1-40BE-8434-E23294C6C3E0}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3F4F8D4B-2F0E-473B-B48A-A288C13FFD90}] => C:\Users\Paulinka\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{8AD136BE-5542-4DF2-BD21-A1A50E5645FC}] => C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{B1C1E485-1D6E-4B24-9CF2-1933A6E5C9F2}] => C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{E99BA99E-EC6F-4747-A0EE-717657291DF1}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2236CB68-3797-412D-8402-AD6DD66AE3A5}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D4B923FE-C6AD-4403-B7FB-9533C8FD7AC3}] => C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe FirewallRules: [{F3C5E369-E395-4516-98F4-3642790FA814}] => C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe FirewallRules: [{4A6EB87C-C1AD-47BF-B601-161DCCFB231E}] => C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe FirewallRules: [{CB6A9782-F516-4515-ADEC-36D1B013BB54}] => C:\Program Files (x86)\Maoha\MaohaAP\MaohaWifiSvr.exe ==================== Punkty Przywracania systemu ========================= ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/20/2017 02:24:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/20/2017 02:16:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/20/2017 11:29:33 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/19/2017 10:13:22 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/19/2017 12:13:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mbamservice.exe, wersja: 3.2.21.0, sygnatura czasowa: 0x56bd3616 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc00000fd Przesunięcie błędu: 0x7515e4e4 Identyfikator procesu powodującego błąd: 0x8a0 Godzina uruchomienia aplikacji powodującej błąd: 0x01d271deb7a6ea18 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 5109cace-de38-11e6-83fc-0c6076a107a4 Error: (01/19/2017 12:01:32 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/18/2017 10:10:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/18/2017 09:30:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/18/2017 12:30:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: IEXPLORE.EXE, wersja: 11.0.9600.18538, sygnatura czasowa: 0x582749db Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x80b9742f Identyfikator procesu powodującego błąd: 0x1f60 Godzina uruchomienia aplikacji powodującej błąd: 0x01d271788017687e Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 89f51d3f-dd71-11e6-9c12-0c6076a107a4 Error: (01/18/2017 11:47:23 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: DH2005.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4137977e Nazwa modułu powodującego błąd: d3d8.dll, wersja: 6.1.7600.16385, sygnatura czasowa: 0x4a5bd9a7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0004a179 Identyfikator procesu powodującego błąd: 0x17d4 Godzina uruchomienia aplikacji powodującej błąd: 0x01d271739d327e81 Ścieżka aplikacji powodującej błąd: D:\Program Files (x86)\Atari\Deer Hunter 2005\DH2005.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\d3d8.dll Identyfikator raportu: 7dc18b94-dd6b-11e6-9c12-0c6076a107a4 Dziennik System: ============= Error: (01/20/2017 02:24:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (01/20/2017 02:24:06 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error: (01/20/2017 02:23:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Grimaght zakończyła działanie; wystąpił następujący błąd: Nie można odnaleźć określonego modułu. Error: (01/20/2017 02:20:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa MirillisProgesplerherle niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/20/2017 02:20:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa KLiteCodecPackBagiph niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/20/2017 02:20:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa IVTCorporationLGElectronics niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/20/2017 02:15:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (01/20/2017 02:15:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error: (01/20/2017 02:15:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi CryptSvc. Error: (01/20/2017 02:14:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Grimaght zakończyła działanie; wystąpił następujący błąd: Nie można odnaleźć określonego modułu. CodeIntegrity: =================================== Date: 2017-01-20 14:24:47.413 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:24:45.438 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:24:45.315 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:24:45.182 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:15:51.578 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:15:51.188 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:15:50.954 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 14:15:50.813 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 11:28:36.584 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-20 11:28:36.412 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz Procent pamięci w użyciu: 62% Całkowita pamięć fizyczna: 3066.6 MB Dostępna pamięć fizyczna: 1158.88 MB Całkowita pamięć wirtualna: 6131.39 MB Dostępna pamięć wirtualna: 3760.24 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:102.68 GB) (Free:3.77 GB) NTFS Drive d: () (Fixed) (Total:195.31 GB) (Free:42.81 GB) NTFS Drive i: (DH2005) (CDROM) (Total:0.59 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: AAD13451) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=102.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS) Could not read MBR for disk 1. ==================== Koniec Addition.txt ============================