Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014 01 Ran by User at 2014-02-11 10:45:08 Running from C:\Users\User\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Internet Security Business Edition (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG Internet Security Business Edition (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security Business Edition (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== µTorrent (x32 Version: 3.3.0.29677 - BitTorrent Inc.) Action! (x32 Version: 1.11.0 - Mirillis) Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (x32 Version: 10.1.9 - Adobe Systems Incorporated) Akamai NetSession Interface (HKCU Version: - Akamai Technologies, Inc) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Assassin's Creed Brotherhood (x32 Version: 1.00 - Ubisoft) Assassin's Creed II (x32 Version: 1.01 - Ubisoft) AVG (Version: 3460 - AVG Technologies) AVG 2013 (Version: 13.0.3462 - AVG Technologies) Hidden AVG 2013 (Version: 13.0.3697 - AVG Technologies) Hidden Battle.net (x32 Version: - Blizzard Entertainment) Bluetooth Stack for Windows by Toshiba (Version: v9.00.00(T) - TOSHIBA CORPORATION) Bonjour (Version: 3.0.0.10 - Apple Inc.) CCleaner (Version: 4.04 - Piriform) Cheat Engine 6.2 (x32 Version: - Dark Byte) ChomikBox (x32 Version: 2.0.5.0 - Chomikuj.pl) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd) Easy Wireless Net (x32 Version: 1.5.1.10 - AnyDATA.NET, Inc) Euro Truck Simulator 2 v1.8.2.5s (DLC Going East) (x32 Version: 1.8.2.5s - Friends in War) EVEREST Ultimate Edition v5.30 (x32 Version: 5.30 - Lavalys, Inc.) Farming Simulator 2013 (x32 Version: 1.0 - GIANTS Software) Flvto Youtube Downloader (x32 Version: 0.3.5 - Hotger) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2 - Microsoft Corporation) FormatFactory 3.1.1 (x32 Version: 3.1.1 - Free Time) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden High-Definition Video Playback (x32 Version: 11.1.10500.2.65 - Nero AG) Hidden Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 8.0.3.1427 - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.1.209 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.23.605.1 - Intel Corporation) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 30 (x32 Version: 6.0.300 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden League of Legends (x32 Version: 1.3 - Riot Games) Malwarebytes Anti-Malware wersja 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20513.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 23.0.1 (x86 pl) (x32 Version: 23.0.1 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden NapiProjekt (2.1.1.2314) (x32 Version: - ) Nero 11 Essentials (x32 Version: 11.0.00300 - Nero AG) Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero BackItUp 11 (x32 Version: 6.0.18000.19.100 - Nero AG) Hidden Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Backup Drivers (Version: 1.0.11100.8.0 - Nero AG) Nero BurnRights 11 (x32 Version: 5.0.10300.4.100 - Nero AG) Hidden Nero BurnRights 11 Help (CHM) (x32 Version: 11.0.10100 - Nero AG) Hidden Nero ControlCenter 11 (x32 Version: 11.0.12700.0.27 - Nero AG) Hidden Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Core Components 11 (x32 Version: 11.0.15500.1.16 - Nero AG) Hidden Nero Express 11 (x32 Version: 11.0.11900.24.100 - Nero AG) Hidden Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Kwik Media (x32 Version: 1.10.24800.146.100 - Nero AG) Hidden Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero Update (x32 Version: 11.0.11400.27.0 - Nero AG) Hidden nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden Obsługa programów Apple (x32 Version: 2.3.6 - Apple Inc.) Origin (x32 Version: 8.2.2.2413 - Electronic Arts, Inc.) Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2 - Microsoft Corporation) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2 - Microsoft Corporation) Pakiet sterowników systemu Windows - AnyDATA Corporation (adusbser) Modem (12/31/2007 2.0.4.0) (Version: 12/31/2007 2.0.4.0 - AnyDATA Corporation) Pakiet sterowników systemu Windows - AnyDATA Corporation (adusbser) Ports (12/31/2007 2.0.4.0) (Version: 12/31/2007 2.0.4.0 - AnyDATA Corporation) PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Premium Sound HD (Version: 1.12.1800 - SRS Labs, Inc.) PunkBuster Services (x32 Version: 0.990 - Even Balance, Inc.) Rainmeter (x32 Version: 3.0.2 r2161 - ) Rappelz (x32 Version: Rappelz - gPotato.eu) RealPlayer (x32 Version: - RealNetworks) Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6597 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7601.30130 - Realtek Semiconductor Corp.) Realtek WLAN Driver (x32 Version: 2.00.0016 - REALTEK Semiconductor Corp.) RtkClassFilter (x32 Version: 1.2.1.4 - REALTEK Semiconductor Corp) RtkClassFilter (x32 Version: 1.2.1.4 - REALTEK Semiconductor Corp) Hidden StarCraft II (x32 Version: - Blizzard Entertainment) Steam (x32 Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (Version: 15.3.38.2 - Synaptics Incorporated) System Requirements Lab CYRI (x32 Version: 6.0.8.0 - Husdawg, LLC) TeamSpeak 3 Client (HKCU Version: 3.0.11.1 - TeamSpeak Systems GmbH) The Sims™ 3 (x32 Version: 1.55.4 - Electronic Arts) The Sims™ 3 Cztery pory roku (x32 Version: 16.0.136 - Electronic Arts) The Sims™ 3 Kariera (x32 Version: 4.0.87 - Electronic Arts) The Sims™ 3 Nie z tego świata (x32 Version: 15.0.135 - Electronic Arts) The Sims™ 3 Po zmroku (x32 Version: 6.0.81 - Electronic Arts) The Sims™ 3 Rajska Wyspa (x32 Version: 19.0.101 - Electronic Arts) The Sims™ 3 Zostań gwiazdą (x32 Version: 12.0.273 - Electronic Arts) TOSHIBA Assist (x32 Version: 4.2.3.0 - TOSHIBA CORPORATION) TOSHIBA Disc Creator (Version: 2.1.0.11 for x64 - TOSHIBA Corporation) TOSHIBA eco Utility (Version: 1.3.10.64 - TOSHIBA Corporation) TOSHIBA Hardware Setup (x32 Version: 2.00.0020 - TOSHIBA) TOSHIBA HDD/SSD Alert (Version: 3.1.64.11 - TOSHIBA Corporation) Toshiba Manuals (x32 Version: 10.04 - TOSHIBA) TOSHIBA Media Controller (x32 Version: 1.0.87.5 - TOSHIBA CORPORATION) TOSHIBA Media Controller Plug-in (x32 Version: 1.0.7.7 - TOSHIBA CORPORATION) TOSHIBA Online Product Information (x32 Version: 4.01.0000 - TOSHIBA) TOSHIBA PC Health Monitor (Version: 1.7.15.64 - TOSHIBA Corporation) TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4 - TOSHIBA Corporation) TOSHIBA Recovery Media Creator (x32 Version: 2.1.6.52020009 - TOSHIBA CORPORATION) TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019 - TOSHIBA) TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019 - TOSHIBA) Hidden TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.1.2004 - TOSHIBA Corporation) TOSHIBA Service Station (x32 Version: 2.2.13 - TOSHIBA) TOSHIBA Supervisor Password (x32 Version: 2.00.0009 - TOSHIBA) TOSHIBA TEMPRO (x32 Version: 3.35 - Toshiba Europe GmbH) TOSHIBA Value Added Package (Version: 1.6.0021.640203 - TOSHIBA Corporation) Hidden TOSHIBA Value Added Package (x32 Version: 1.6.0021.640203 - TOSHIBA Corporation) TOSHIBA Value Added Package (x32 Version: 1.6.0021.640203 - TOSHIBA Corporation) Hidden TOSHIBA Web Camera Application (x32 Version: 2.0.3.33 - TOSHIBA Corporation) TOSHIBA Web Camera Application (x32 Version: 2.0.3.33 - TOSHIBA Corporation) Hidden Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1 - AVG Technologies) WD Drive Utilities (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.) WD Security (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.) welcome (x32 Version: 11.0.22500.0.0 - Nero AG) Hidden Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (12/02/2011 2.3.8.1) (Version: 12/02/2011 2.3.8.1 - Realtek Semiconductor Corp.) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR 4.20 (64-bitowy) (Version: 4.20.0 - win.rar GmbH) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 27-01-2014 15:07:19 Installed Java 7 Update 51 07-02-2014 12:51:23 Zaplanowany punkt kontrolny 11-02-2014 00:05:00 ComboFix created restore point 11-02-2014 00:37:35 Usunięte Rayman Raving Rabbids 2 11-02-2014 00:40:05 Installed SpyHunter 11-02-2014 01:12:06 Removed SpyHunter 11-02-2014 09:08:20 Usunięte TheSims3EP5 ==================== Hosts content: ========================== 2013-08-23 13:08 - 2009-06-10 22:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {240EAB05-F554-444E-B645-9C84C7EFBC5C} - System32\Tasks\{2FED1FF4-23A6-4FC8-82C7-F5224E4A1ACE} => Chrome.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMain Task: {3073D067-9F42-4A2A-848B-0293000FD7C1} - \Express FilesUpdate No Task File Task: {35FE2F12-20BE-457F-B100-AEA9E6770EB8} - System32\Tasks\{EAC848D8-9AF6-4CC1-B379-428CB451126D} => Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/pl/abandoninstall?page=tsProgressBar Task: {62FD32D4-E79A-4928-9F31-9CE7364509C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated) Task: {6EAD294F-ACCD-4CE1-9154-A05085DFA603} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {A4D362A3-89DD-4AE3-B630-0EF71A1DA190} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd) Task: {AA3BDA1B-E64E-4E12-A80D-76047CF83D39} - System32\Tasks\{6E75054E-2DC6-4CCF-8A38-DA1F4586697F} => C:\Program Files (x86)\The Elder Scrolls V Skyrim\SkyrimLauncher.exe Task: {E8E9C0F2-718C-4E0A-851E-8112D52C4556} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {EDA07156-5581-42E7-BD56-292AEA4AFC90} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe Task: {EFF65403-32E4-41AA-933D-31504CB4DDD9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13] (Google Inc.) Task: {F2AE31B4-1B6A-49AC-91E5-A3C45E0E5C9E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13] (Google Inc.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (whitelisted) ============= 2011-08-22 23:19 - 2011-08-22 23:19 - 11204992 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll 2010-12-15 23:19 - 2010-12-15 23:19 - 00124320 _____ () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll 2012-03-27 01:33 - 2012-03-27 01:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-05-13 22:53 - 2011-12-15 14:57 - 00022400 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\pl\TosDILangPack.resources.dll 2012-05-13 22:53 - 2011-12-15 14:55 - 00063360 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIInternal.XmlSerializers.dll 2013-10-29 21:45 - 2013-10-29 21:45 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe 2013-10-29 21:45 - 2013-10-29 21:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll 2013-10-29 21:44 - 2013-10-29 21:44 - 00368640 _____ () C:\Program Files\Rainmeter\Plugins\NowPlaying.dll 2011-11-26 02:51 - 2011-11-26 02:51 - 00079784 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll 2013-01-28 12:08 - 2013-01-28 12:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-01-28 12:08 - 2013-01-28 12:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2012-08-09 20:26 - 2012-02-21 20:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe 2013-12-30 20:41 - 2013-12-30 20:41 - 00075136 _____ () C:\windows\SysWOW64\PnkBstrA.exe 2012-01-25 18:57 - 2012-01-25 18:57 - 00172032 _____ () C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosGatt.dll 2014-02-04 11:09 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll 2014-02-04 11:09 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll 2014-02-04 11:09 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll 2014-02-04 11:09 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll 2014-02-04 11:09 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll 2014-02-04 11:09 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll 2012-08-09 20:26 - 2012-02-21 20:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EasyWirelessNet.lnk => C:\windows\pss\EasyWirelessNet.lnk.Startup MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe" MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent MSCONFIG\startupreg: WebCake Desktop => "C:\Users\User\AppData\Roaming\Web Cake\WebCakeDesktop.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/11/2014 10:16:18 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service) (User: User-TOSH) Description: System Windows nie może znaleźć profilu lokalnego i loguje użytkownika przy użyciu profilu tymczasowego. Zmiany wprowadzone w profilu zostaną utracone po wylogowaniu. Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service) (User: User-TOSH) Description: System Windows wykonał kopię zapasową tego profilu użytkownika. System Windows automatycznie spróbuje użyć profilu z kopii zapasowej przy następnym logowaniu tego użytkownika. Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service) (User: User-TOSH) Description: System Windows nie może załadować profilu przechowywanego lokalnie. Przyczyną błędu może być brak wystarczających praw zabezpieczeń lub uszkodzony profil lokalny. SZCZEGÓŁY - Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service) (User: ZARZĄDZANIE NT) Description: System Windows nie może załadować rejestru. Częstą przyczyną tego problemu jest za mała ilość pamięci lub brak wystarczających praw zabezpieczeń. SZCZEGÓŁY - Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. for C:\Users\User\ntuser.dat Error: (02/11/2014 09:45:56 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/11/2014 02:21:48 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 09:49:24 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 03:58:09 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 10:38:13 AM) (Source: Application Hang) (User: ) Description: Program Launcher.exe w wersji 1.2.0.0 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 1cbc Godzina rozpoczęcia: 01cf264344797016 Godzina zakończenia: 4 Ścieżka aplikacji: C:\Program Files\gPotato.eu\Rappelz\Launcher.exe Identyfikator raportu: 0563b13c-9237-11e3-9d73-74e543d92ca6 System errors: ============= Error: (02/11/2014 10:14:59 AM) (Source: Service Control Manager) (User: ) Description: Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił następujący błąd: %%5. Error: (02/11/2014 09:55:02 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (02/11/2014 09:54:29 AM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (02/11/2014 09:33:17 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (02/11/2014 09:33:06 AM) (Source: Service Control Manager) (User: ) Description: Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił następujący błąd: %%5. Error: (02/11/2014 01:18:22 AM) (Source: Service Control Manager) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (02/11/2014 01:09:43 AM) (Source: Service Control Manager) (User: ) Description: Usługa PEVSystemStart jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (02/10/2014 09:49:23 PM) (Source: Service Control Manager) (User: ) Description: Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił następujący błąd: %%5. Error: (02/10/2014 06:48:21 PM) (Source: Service Control Manager) (User: ) Description: Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił następujący błąd: %%5. Error: (02/10/2014 11:13:44 AM) (Source: Service Control Manager) (User: ) Description: Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił następujący błąd: %%5. Microsoft Office Sessions: ========================= Error: (02/11/2014 10:16:18 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service)(User: User-TOSH) Description: Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service)(User: User-TOSH) Description: Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service)(User: User-TOSH) Description: Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. Error: (02/11/2014 09:53:04 AM) (Source: Microsoft-Windows-User Profiles Service)(User: ZARZĄDZANIE NT) Description: Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. C:\Users\User\ntuser.dat Error: (02/11/2014 09:45:56 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/11/2014 02:21:48 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 09:49:24 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 03:58:09 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/10/2014 10:38:13 AM) (Source: Application Hang)(User: ) Description: Launcher.exe1.2.0.01cbc01cf2643447970164C:\Program Files\gPotato.eu\Rappelz\Launcher.exe0563b13c-9237-11e3-9d73-74e543d92ca6 CodeIntegrity Errors: =================================== Date: 2013-08-09 20:59:03.363 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\User\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-08-09 20:59:03.332 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\User\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-08-09 20:59:03.238 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-08-09 20:59:03.207 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 60% Total physical RAM: 3985.8 MB Available physical RAM: 1593.06 MB Total Pagefile: 7969.79 MB Available Pagefile: 5174.66 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Dysk) (Fixed) (Total:281.13 GB) (Free:146.66 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: C32C6FB4) Partition 1: (Active) - (Size=1 GB) - (Type=27) Partition 2: (Not Active) - (Size=281 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=15 GB) - (Type=17) ==================== End Of Log ============================