Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-01-2014 02 Ran by Wojciech at 2014-01-22 21:55:06 Running from C:\Users\Wojciech\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: Zapora osobista ESET (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Installed Programs ====================== 32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) - Polish (Version: 10.1.9 - Adobe Systems Incorporated) BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden CCleaner (Version: 4.09 - Piriform) Conexant HD Audio (Version: 4.36.10.0 - Conexant) Content Transfer (Version: 1.2.0.07300 - Sony Corporation) Copy (Version: 130.0.366.000 - Hewlett-Packard) Hidden Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden DJ_AIO_06_F4500_SW_MIN (Version: 130.0.406.000 - Hewlett-Packard) Hidden ESET Smart Security (Version: 7.0.302.26 - ESET, spol s r. o.) F4500 (Version: 130.0.406.000 - Hewlett-Packard) Hidden Google Earth Plug-in (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden HDAUDIO Soft Data Fax Modem with SmartCP (Version: - ) HP Customer Participation Program 13.0 (Version: 13.0 - HP) HP Deskjet F4500 Printer Driver Software 13.0 Rel .6 (Version: 13.0 - HP) HP Imaging Device Functions 13.0 (Version: 13.0 - HP) HP Print Projects 1.0 (Version: 1.0 - HP) HP Smart Web Printing 4.5 (Version: 4.5 - HP) HP Solution Center 13.0 (Version: 13.0 - HP) HP Update (Version: 4.000.011.006 - Hewlett-Packard) HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden hpPrintProjects (Version: 130.0.303.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden hpWLPGInstaller (Version: 130.0.303.000 - Hewlett-Packard) Hidden Intel(R) Graphics Media Accelerator Driver (Version: - ) MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 3.5 Language Pack SP1 - plk (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile PLK Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 pl) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Network (Version: 130.0.572.000 - Hewlett-Packard) Hidden NWZ-S540 WALKMAN Guide (Version: 2.0.00.07010 - Sony Corporation) OpenOffice.org 3.4.1 (Version: 3.41.9593 - Apache Software Foundation) Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK (Version: - Microsoft Corporation) PLAY ONLINE (Version: 21.005.11.17.264 - Huawei Technologies Co.,Ltd) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden Shop for HP Supplies (Version: 13.0 - HP) Skype™ 6.9 (Version: 6.9.106 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden WinRAR 4.20 (32-bit) (Version: 4.20.0 - win.rar GmbH) ==================== Restore Points ========================= 23-12-2013 20:42:13 Zaplanowany punkt kontrolny 24-12-2013 10:42:05 Windows Update 27-12-2013 15:59:28 Windows Update 31-12-2013 14:27:33 Windows Update 03-01-2014 15:36:52 Windows Update 08-01-2014 18:18:10 Windows Update 16-01-2014 04:42:53 Windows Update 17-01-2014 04:15:31 Windows Update 22-01-2014 20:06:04 Windows Update ==================== Hosts content: ========================== 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {09130E94-8CB5-4260-A2E5-46AB323C66E5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {2377E6C4-4A47-4181-BE92-E036943336A7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-01] (Google Inc.) Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {AA4C51F5-C189-420A-90B1-9DB8CB1B36F1} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {DC14D36C-9F58-4D1A-92D8-CB00ED701E68} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-01] (Google Inc.) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {FB49DF37-D863-48CF-88D6-F1905E63FC79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-18 12:20 - 2013-01-18 12:20 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll 2014-01-22 21:41 - 2014-01-22 21:41 - 00107008 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_hashlib.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00034304 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\win32api.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00052736 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\pywintypes27.dll 2014-01-22 21:41 - 2014-01-22 21:41 - 00112128 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\pythoncom27.dll 2014-01-22 21:41 - 2014-01-22 21:41 - 00072192 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\win32com.shell.shell.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00020480 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_socket.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00270336 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_ssl.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00033792 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_ctypes.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00034816 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\win32file.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00013312 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_multiprocessing.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00018944 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\msgpack._packer.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00020480 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\msgpack._unpacker.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00013824 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\pyHook._cpyHook.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00043520 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\win32gui.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00009728 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\select.pyd 2014-01-22 21:41 - 2014-01-22 21:41 - 00018944 _____ () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\_psutil_mswindows.pyd 2013-12-20 17:54 - 2013-12-20 17:54 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: HP Deskjet F4500 Description: HP Deskjet F4500 Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Hewlett-Packard Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Deskjet F4500 series Description: Deskjet F4500 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (01/22/2014 09:54:38 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0x5e0, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:50:12 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0xb7c, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:42:35 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0xdbc, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:27:40 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0x1090, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:27:37 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0x1150, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:25:59 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0x10c0, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:24:51 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0xf48, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:21:04 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd minerd.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d, identyfikator procesu 0x8c0, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:18:42 PM) (Source: Application Error) (User: ) Description: Aplikacja powodująca błąd explorer.exe, wersja 0.0.0.0, sygnatura czasowa 0x5213ca44, moduł powodujący błąd ntdll.dll, wersja 6.0.6002.18881, sygnatura czasowa 0x51da3e27, kod wyjątku 0xc0000022, przesunięcie błędu 0x00009f5d, identyfikator procesu 0xf74, godzina rozpoczęcia aplikacji 0xexplorer.exe0. Error: (01/22/2014 09:13:18 PM) (Source: EventSystem) (User: ) Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} System errors: ============= Error: (01/22/2014 09:43:09 PM) (Source: Service Control Manager) (User: ) Description: PLAY ONLINE. OUC%%1053 Error: (01/22/2014 09:43:09 PM) (Source: Service Control Manager) (User: ) Description: 30000PLAY ONLINE. OUC Error: (01/22/2014 09:43:09 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (01/22/2014 09:16:05 PM) (Source: Service Control Manager) (User: ) Description: PLAY ONLINE. OUC%%1053 Error: (01/22/2014 09:16:05 PM) (Source: Service Control Manager) (User: ) Description: 30000PLAY ONLINE. OUC Error: (01/22/2014 09:16:05 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (01/22/2014 09:04:00 PM) (Source: Service Control Manager) (User: ) Description: PLAY ONLINE. OUC%%1053 Error: (01/22/2014 09:04:00 PM) (Source: Service Control Manager) (User: ) Description: 30000PLAY ONLINE. OUC Error: (01/22/2014 09:04:00 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (01/22/2014 05:29:14 AM) (Source: Service Control Manager) (User: ) Description: PLAY ONLINE. OUC%%1053 Microsoft Office Sessions: ========================= Error: (01/22/2014 09:54:38 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5d5e001cf17b42927657c Error: (01/22/2014 09:50:12 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5db7c01cf17b38990242c Error: (01/22/2014 09:42:35 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5ddbc01cf17b278d051bc Error: (01/22/2014 09:27:40 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5d109001cf17b0641f9b43 Error: (01/22/2014 09:27:37 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5d115001cf17b0623fee63 Error: (01/22/2014 09:25:59 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5d10c001cf17b028c15573 Error: (01/22/2014 09:24:51 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5df4801cf17affe699cb3 Error: (01/22/2014 09:21:04 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44minerd.dll6.0.6002.1888151da3e27c000013500009f5d8c001cf17af76991683 Error: (01/22/2014 09:18:42 PM) (Source: Application Error)(User: ) Description: explorer.exe0.0.0.05213ca44ntdll.dll6.0.6002.1888151da3e27c000002200009f5df7401cf17aed808fc63 Error: (01/22/2014 09:13:18 PM) (Source: EventSystem)(User: ) Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} ==================== Memory info =========================== Percentage of memory in use: 54% Total physical RAM: 2037.67 MB Available physical RAM: 926.2 MB Total Pagefile: 4312.64 MB Available Pagefile: 3061.94 MB Total Virtual: 2047.88 MB Available Virtual: 1900.36 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:100.59 GB) (Free:64.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:197.5 GB) (Free:161.74 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 3871BC93) Partition 1: (Active) - (Size=101 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=198 GB) - (Type=07 NTFS) ==================== End Of Log ============================