Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja: 10.02.2018 02
Uruchomiony przez euro (11-02-2018 22:36:43)
Uruchomiony z C:\Users\euro\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2010-08-11 11:25:04)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-2092716530-3474641769-2676177707-500 - Administrator - Disabled)
euro (S-1-5-21-2092716530-3474641769-2676177707-1000 - Administrator - Enabled) => C:\Users\euro
Gość (S-1-5-21-2092716530-3474641769-2676177707-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2092716530-3474641769-2676177707-1002 - Limited - Enabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

7-Zip 16.02 (HKLM\...\{23170F69-40C1-2701-1602-000001000000}) (Version: 16.02.00.0 - Igor Pavlov)
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
ABBYY FineReader 10 Corporate Edition (HKLM\...\{F1000000-0001-0000-0000-074957833700}) (Version: 10.501.154.7211 - ABBYY)
ABBYY FineReader 5.0 Sprint (HKLM\...\{D1696920-9794-4BBC-8A30-7A88763DE5A2}) (Version: 5.0.0.2961 - ABBYY Software House)
ABBYY FineReader 6.0 (HKLM\...\{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}) (Version: 6.0.518.2554 - ABBYY Software House)
Adobe Acrobat Reader DC - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated)
Adobe Flash Player 10 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 22 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version:  - Microsoft)
Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version:  - Microsoft)
Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version:  - Microsoft)
Alice Greenfingers (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
Armageddon (HKLM\...\Armageddon) (Version:  - )
Asystent rejestracji usługi Windows Live (HKLM\...\{51958BA7-21E4-4A8B-9098-CD8375BD17B2}) (Version: 5.000.818.5 - Microsoft Corporation)
Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.2.1119 - Atheros)
BatteryLifeExtender (HKLM\...\{74A579FB-EB06-497D-B194-01590D6FE51A}) (Version: 1.0.5 - Samsung)
Bezpieczeństwo rodzinne usługi Windows Live (HKLM\...\{F88335A8-CA7B-41DE-B37D-81306C73B507}) (Version: 14.0.8093.805 - Microsoft Corporation) Hidden
Bonbon Quest (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111768557}) (Version:  - Oberon Media)
Cake Mania (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}) (Version:  - Oberon Media)
calibre (HKLM\...\{BED35097-6053-4E51-B9EC-A779CCCDEE72}) (Version: 2.15.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 2.35 - Piriform)
CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.)
CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.)
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.)
CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.)
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.)
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3625 - CyberLink Corp.)
Daycare Nightmare (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113128447}) (Version:  - Oberon Media)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{34B76DCB-BF7C-440F-B058-C84172C1E338}) (Version: 4.2.8 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung)
Flip Words (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}) (Version:  - Oberon Media)
FreeCommander XE (HKLM\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)
Gadu-Gadu 10 (HKLM\...\Gadu-Gadu 10) (Version:  - GG Network S.A.)
Galapago (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version:  - Oberon Media)
Galeria fotografii usługi Windows Live (HKLM\...\{9CDEAEC9-2F14-4D39-8541-C1EEC4B5D1CB}) (Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Game Pack (HKLM\...\{D1F6FBBB-B204-459A-9BF8-D06FFAB96CCC}_is1) (Version: 6.3.1.1 - Oberon Media, Inc.)
Gem Shop (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110521483}) (Version:  - Oberon Media)
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Insaniquarium Deluxe (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793}) (Version:  - Oberon Media)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.2202 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Junk Mail filter update (HKLM\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Konserwacja programu Samsung ML-1660 Series (HKLM\...\Samsung ML-1660 Series) (Version:  - Samsung Electronics Co., Ltd.)
Mahjong Escape Ancient China (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}) (Version:  - Oberon Media)
Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell)
Microsoft .NET Framework 4.7 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
MPC-HC 1.6.5.6366 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.6.5.6366 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Narzędzie do przekazywania usługi Windows Live (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Nero 7 Essentials (HKLM\...\{BC61F51E-8AF7-46B9-AF20-B33B5EE81045}) (Version: 7.03.0188 - Nero AG)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC41}) (Version: 4.0.5 - dotPDN LLC)
Poczta usługi Windows Live (HKLM\...\{C35FE07E-24B5-410F-85B7-122087A0C7DD}) (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM\...\{9862473C-E063-4C68-A161-2CDE0E8048A5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 15.0) (Version: 15.0.6 - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6003 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)
Samsung Support Center (HKLM\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.0.2 - Samsung)
Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
Slingo (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733}) (Version:  - Oberon Media)
Sony Ericsson PC Companion 2.00.146 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.00.146 - Sony Ericsson)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
Vividas Player Plugin v4.1 (HKLM\...\Vividas Player Plugin_is1) (Version: 4.1 - Vividas Asia Pacific Pty Ltd)
Windows Live Sync (HKLM\...\{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}) (Version: 14.0.8089.726 - Microsoft Corporation)
YoutubedownloadPRO 1.0 (HKLM\...\YoutubedownloadPRO) (Version: 1.0 - DaSoft)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{010833F3-751A-402F-9FCC-C365B6A12E41}\localserver32 -> C:\Users\euro\Desktop\BESTplayer.exe => Brak pliku
CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{04EBE69E-2DED-44F6-9854-9A3988F751ED}\InprocServer32 -> C:\Users\euro\AppData\Local\Dropbox\Update\1.3.51.1\psuser.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\euro\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{2027D000-8CEB-4191-9620-15DD2561855F}\InprocServer32 -> C:\Users\euro\AppData\Local\Dropbox\Update\1.3.57.1\psuser.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{647ACBB2-D272-2D22-A147-4C7A9FB201FC}\InprocServer32 -> C:\windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\euro\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => Brak pliku
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  -> Brak pliku
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers1: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-05-04] (Nero AG)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers1: [FineReader10ContextMenu] -> {bc5e1455-02ca-4b30-8eed-91d52a38da75} => C:\Program Files\ABBYY FineReader 10\FRIntegration.dll [2009-12-20] (ABBYY.)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\windows\system32\igfxpph.dll [2011-02-11] (Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers6: [FineReader] -> {AC0DD14A-8F29-4F88-BE1D-0F0ED1B06C9F} => C:\Program Files\ABBYY\FineReader 6.0\FECMenu.dll [2002-06-24] (ABBYY (BIT Software))
ContextMenuHandlers6: [FineReader10ContextMenu] -> {bc5e1455-02ca-4b30-8eed-91d52a38da75} => C:\Program Files\ABBYY FineReader 10\FRIntegration.dll [2009-12-20] (ABBYY.)

==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {06D14446-CA15-469A-A9AE-CE93393399A8} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.)
Task: {1385F18D-1816-43D9-87B5-D3415622FC58} - System32\Tasks\{A3A4BBE9-4F17-4463-82B5-BA4D659CF57A} => C:\windows\system32\pcalua.exe -a "C:\Program Files\ESET\ESET NOD32 Antivirus\callmsi.exe" -c /i {85DCB3AA-90D3-444B-880C-C72951252E55}
Task: {172F70D8-8282-414C-87BE-F5A0FBC2D60E} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-10-13] (Samsung Electronics Co., Ltd.)
Task: {4DEF7D91-B422-4672-A002-0365E01ED152} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2018-02-08] (AVAST Software)
Task: {566A0CFA-B1CA-493C-AD5C-319EA1C42434} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2010-05-06] (SAMSUNG Electronics)
Task: {6C2C63C0-A9B4-4D71-BACC-F457D492F19C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-16] (Adobe Systems Incorporated)
Task: {853E969B-D76B-4B10-B551-F62003CB230A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {BD22BB9C-3595-4118-A21B-5B71506D2A13} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()
Task: {C2D2EFDB-5820-4CCC-857D-897901071A08} - System32\Tasks\RunAsStdUser => C:\Program Files\Desk 365\desk365.exe <==== UWAGA
Task: {CF04E45F-5486-484F-9A2F-8893E3A3FAE1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2092716530-3474641769-2676177707-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {E0E65F70-0FF4-495B-8669-B270AE21DBA2} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {E6489AAD-9A80-4FF1-A7E9-3FB8EAC78054} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-06-01] (Samsung Electronics. Co. Ltd.)
Task: {FAED8D7C-34A0-4842-9829-CB922071719B} - System32\Tasks\{C6AF3497-4EDA-452C-90AF-EAA4745D5700} => C:\windows\system32\pcalua.exe -a C:\Users\euro\Desktop\ArmageddonChess.exe -d C:\Users\euro\Desktop
Task: {FBD20BCC-7732-4CAC-9518-4743D7CDC199} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2092716530-3474641769-2676177707-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {FDA0FB14-B902-4EC0-97A0-C53E7E59A0B1} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Skróty & WMI ========================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)


==================== Załadowane moduły (filtrowane) ==============

2011-06-22 06:47 - 2011-06-22 06:47 - 000024064 _____ () C:\windows\System32\ssp7ml3.dll
2016-09-15 08:19 - 2016-09-15 06:19 - 000027160 _____ () C:\windows\System32\us005lm.dll
2010-06-14 05:23 - 2010-04-20 13:26 - 000300912 _____ () C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
2010-06-14 05:23 - 2010-04-16 13:11 - 000155648 _____ () C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll
2010-06-14 05:28 - 2009-07-07 19:23 - 000247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe
2009-06-03 12:59 - 2009-06-03 12:59 - 000619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-06-03 12:59 - 2009-06-03 12:59 - 000013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2010-09-18 18:30 - 2010-01-06 08:03 - 000618496 _____ () C:\Windows\Samsung\PanelMgr\SSMMgr.exe

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)

AlternateDataStreams: C:\ProgramData\Temp:8530A643 [124]

==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)


==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)


==================== Hosts - zawartość: ===============================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 000000824 _____ C:\windows\system32\Drivers\etc\hosts


==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-2092716530-3474641769-2676177707-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\euro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 31.11.202.254 - 37.8.214.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

MSCONFIG\Services: Sony Ericsson PCCompanion => 3
MSCONFIG\startupreg: Sony Ericsson PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background

==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{CAA3F959-7031-4D58-A304-A3B9FA92EA24}] => (Allow) C:\Program Files\CyberLink\PowerDirector\PDR.EXE
FirewallRules: [{CF74CFFE-9571-43B5-8B03-E428B1F18C27}] => (Allow) C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE
FirewallRules: [{FD8F0A50-22EE-43CA-AC83-57F46EAF4CF2}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9FBD8BAE-201A-47A6-8C67-396D13F81360}] => (Allow) svchost.exe
FirewallRules: [{B7308E63-3AD0-451D-9F0A-42306D3EE1C1}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{269CBAAE-EF55-4B09-B5AB-C55224E6EE29}C:\program files\gadu-gadu 10\gg.exe] => (Allow) C:\program files\gadu-gadu 10\gg.exe
FirewallRules: [UDP Query User{DF85F974-C6C6-44A6-A583-1C1C96A8E917}C:\program files\gadu-gadu 10\gg.exe] => (Allow) C:\program files\gadu-gadu 10\gg.exe
FirewallRules: [TCP Query User{43F4D6DE-E0C8-43CA-875F-169D8BE55712}C:\program files\gadu-gadu 10\gg.exe] => (Block) C:\program files\gadu-gadu 10\gg.exe
FirewallRules: [UDP Query User{9B442500-D6DE-49E8-9660-E164CB461431}C:\program files\gadu-gadu 10\gg.exe] => (Block) C:\program files\gadu-gadu 10\gg.exe
FirewallRules: [TCP Query User{980EA063-E9E6-4D51-8CEB-6F0ABD123E25}C:\program files\ibm\spss\statistics\19\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\19\jre\bin\javaw.exe
FirewallRules: [UDP Query User{2B0D9CB2-6313-4F3B-9CBD-D62115CEE396}C:\program files\ibm\spss\statistics\19\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\19\jre\bin\javaw.exe
FirewallRules: [{E0CCE59E-8C92-4D65-B39D-E15B51E6DEF7}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\stats.exe
FirewallRules: [{3BCD550D-D41A-4EC3-81EC-D503FEAA5D0D}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\stats.com
FirewallRules: [{C106A48B-800E-4B84-BDC9-03A46D8F9C6D}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\WinWrapIDE.exe
FirewallRules: [{43C8F0FB-9F93-41EC-B8DF-853F923F3A1E}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\stats.exe
FirewallRules: [{86539CBE-4669-436D-8C3C-5ABEE581D249}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\stats.com
FirewallRules: [{5C24D48E-F221-4ABE-BE2B-0B0B3655DBA4}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\20\WinWrapIDE.exe
FirewallRules: [TCP Query User{37741BC6-C999-4A0B-8CA4-F6A6C4415F43}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe
FirewallRules: [UDP Query User{C2892795-4D48-4E53-815F-82678FBAA7E7}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe
FirewallRules: [TCP Query User{EBA11162-D849-4362-8E6C-20A618B96CAB}C:\users\euro\desktop\gadu-gadu 10\gg.exe] => (Allow) C:\users\euro\desktop\gadu-gadu 10\gg.exe
FirewallRules: [UDP Query User{FFD95486-4B2A-41BF-AA3E-74D42E48D1E6}C:\users\euro\desktop\gadu-gadu 10\gg.exe] => (Allow) C:\users\euro\desktop\gadu-gadu 10\gg.exe
FirewallRules: [TCP Query User{66F302F9-A727-4D56-84CB-985DB641AAC2}C:\users\euro\desktop\gadu-gadu 10\gg.exe] => (Block) C:\users\euro\desktop\gadu-gadu 10\gg.exe
FirewallRules: [UDP Query User{A6FAF05B-EA27-42E5-8100-277ACA36F36E}C:\users\euro\desktop\gadu-gadu 10\gg.exe] => (Block) C:\users\euro\desktop\gadu-gadu 10\gg.exe
FirewallRules: [{72568440-AE30-4BF2-9917-874256653C68}] => (Allow) C:\Users\euro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{2E567B0A-0A85-45C9-A549-E6A8C1AE800E}] => (Allow) C:\Users\euro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{988F9FEB-EA09-4FF3-9B9E-CAEC3DBB5653}C:\users\euro\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\euro\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{825DA333-0CFD-42E8-86DB-733F9BFD5565}C:\users\euro\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\euro\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{4DDCA3F9-9ECC-404C-8270-9EE69900C0B8}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{C20B530D-5932-432B-8352-86DC0A201267}C:\users\euro\desktop\systemy\gadu-gadu 10\gg.exe] => (Block) C:\users\euro\desktop\systemy\gadu-gadu 10\gg.exe
FirewallRules: [UDP Query User{1A38B22A-21F5-41DD-B83A-7B08E97ED186}C:\users\euro\desktop\systemy\gadu-gadu 10\gg.exe] => (Block) C:\users\euro\desktop\systemy\gadu-gadu 10\gg.exe
FirewallRules: [TCP Query User{E2796D75-6176-41F5-972E-BBA689762E67}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe
FirewallRules: [UDP Query User{F6931B5A-9878-4FEC-A2D9-A73C6767B25A}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe

==================== Punkty Przywracania systemu =========================

07-02-2018 12:41:48 Windows Update
08-02-2018 20:14:01 Windows Update
09-02-2018 22:38:25 Windows Update
09-02-2018 22:59:51 Windows Update
09-02-2018 23:20:09 Windows Update

==================== Wadliwe urządzenia w Menedżerze urządzeń =============

Name: WebCam SCB-0350M
Description: Urządzenie wideo USB
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================
Error: (02/11/2018 10:36:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.

Error: (02/11/2018 10:36:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Zainicjowanie bazy danych wykazu przez Usługi kryptograficzne nie powiodło się. Błąd ESENT: -583.


Dziennik System:
=============
Error: (02/11/2018 10:36:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 5.

Error: (02/11/2018 10:36:43 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-2147217025.

Error: (02/11/2018 09:34:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 4.

Error: (02/11/2018 09:34:36 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-2147217025.

Error: (02/11/2018 09:34:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 3.

Error: (02/11/2018 09:34:10 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-2147217025.

Error: (02/11/2018 09:34:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.

Error: (02/11/2018 09:34:02 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-2147217025.

Error: (02/11/2018 09:33:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.

Error: (02/11/2018 09:32:41 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-2147217025.


==================== Statystyki pamięci =========================== 

Procesor: Celeron(R) Dual-Core CPU T3300 @ 2.00GHz
Procent pamięci w użyciu: 46%
Całkowita pamięć fizyczna: 2008.61 MB
Dostępna pamięć fizyczna: 1073.11 MB
Całkowita pamięć wirtualna: 4017.21 MB
Dostępna pamięć wirtualna: 3018.51 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:106.39 GB) (Free:31.35 GB) NTFS
Drive d: () (Fixed) (Total:106.39 GB) (Free:58.72 GB) NTFS
Drive f: (CRUZER 14GB) (Removable) (Total:14.55 GB) (Free:10.28 GB) FAT32

\\?\Volume{365f9e6d-77f1-11df-8eb6-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{365f9e6c-77f1-11df-8eb6-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:20 GB) (Free:6.87 GB) NTFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 1C17C5D5)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=106.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=106.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 14.6 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Koniec  Addition.txt ============================