Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-11-2014 01 Ran by Admin at 2014-12-01 07:45:49 Running from D:\Wiktor\Programy\System Tools\Farbar Recovery Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 64 Bit HP CIO Components Installer (Version: 17.2.1 - Hewlett-Packard) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) ABBYY FineReader 10 Professional Edition (HKLM-x32\...\{F1000000-0001-0000-0000-074957833700}) (Version: 10.501.145.70012 - ABBYY) ACDSee 10 Photo Manager (HKLM-x32\...\{F8B98EB6-FC06-45BF-87D4-9784E0408611}) (Version: 10.0.219 - ACD Systems International) Acoustica MP3 Audio Mixer 2.42 (HKLM-x32\...\Acoustica MP3 Audio Mixer 2.42) (Version: - Acoustica) Acronis True Image WD Edition (HKLM-x32\...\{9B683A28-2172-4CF1-B85D-41375E80652A}) (Version: 13.0.14184 - Acronis) Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.12 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.) Altap Salamander 3.02 (x64) (HKLM\...\Altap Salamander 3.02 (x64)) (Version: 3.02 - ALTAP) AMD Catalyst Install Manager (HKLM\...\{3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) AuthenTec TrueAPI (Version: 1.3.0.144 - AuthenTec, Inc.) Hidden Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software) avast! Ad Blocker (HKLM-x32\...\{021C6667-63D3-4416-B537-865E77F4DF4F}) (Version: 1.0.0.0 - AVAST Software) Bulk Rename Utility 2.7.1.2 (HKLM-x32\...\Bulk Rename Utility_is1) (Version: - TGRMN Software) BurnAware Free 6.9.4 (HKLM-x32\...\BurnAware Free_is1) (Version: - Burnaware) CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source) CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP) CDDRV_Installer (Version: 4.60 - Logitech) Hidden Classic Shell (HKLM\...\{1EEF5C7E-C371-431D-A507-8C5B46EED7B4}) (Version: 3.2.0 - IvoSoft) Combat Mission (HKLM-x32\...\{4D514A80-BFA1-11D4-BD2F-00500480A380}) (Version: - ) Combat Mission Afrika Korps (HKLM-x32\...\Combat Mission Afrika Korps v1.0_is1) (Version: - Battlefront.com, Inc.) CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version: 3.0 - CutePDF.com) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.4305 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Device Remover (HKLM\...\{EFA597E4-73D3-4142-90DB-BE28E5589F99}_is1) (Version: 0.9 - Kerem Gümrükcü) DU Meter (HKLM-x32\...\dumeter3_is1) (Version: - Hagel Technologies) e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 6.0.1 - Ministerstwo Finansow) e-Deklaracje Desktop (x32 Version: 6.0.1 - Ministerstwo Finansow) Hidden eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden FileZilla Client 3.9.0.5 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.5 - Tim Kosse) Firebird 2.5.3.26778 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.3.26778 - Firebird Project) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.0.429 - Foxit Corporation) Free Media Converter 2.9 (HKLM-x32\...\Free Media Converter_is1) (Version: - FreeMediaConverter.org) Gadu-Gadu 10 (HKLM-x32\...\Gadu-Gadu 10) (Version: - GG Network S.A.) Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.) Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Hewlett-Packard ACLM.NET v1.1.2.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro) HP 3D DriveGuard (HKLM\...\{488648EF-D1DD-4C20-AF61-8DB16220DF22}) (Version: 4.1.9.1 - Hewlett-Packard Company) HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company) HP Product Detection (HKLM-x32\...\{A34CC51D-C2FF-4E0E-9F27-28B0249A15DD}) (Version: 11.15.0007 - HP) HP Quick Launch (HKLM-x32\...\{285F722C-0E45-47DE-B38E-5B3B10FA4A7C}) (Version: 2.5.2 - Hewlett-Packard Company) HP SimplePass 2012 (HKLM-x32\...\{423FBEB8-21C6-4720-A8DA-B19B06FDB607}) (Version: 5.3.1.7 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{0F458B1E-459F-43CF-BC0A-3E94F97A1CD3}) (Version: 4.1.13.1 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}) (Version: 6.1.12.1 - Hewlett-Packard Company) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6345.0 - IDT) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) join.me (HKU\S-1-5-21-1360218892-3802870453-3763347432-1000\...\JoinMe) (Version: 1.17.1.162 - LogMeIn, Inc.) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden K-Lite Mega Codec Pack 10.5.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.5.5 - ) LibreOffice 4.3.0.4 (HKLM-x32\...\{5C005E2A-AEAE-4DF7-B7CA-1E6DCDD2AEA4}) (Version: 4.3.0.4 - The Document Foundation) Logitech SetPoint (HKLM-x32\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech) Malwarebytes Anti-Malware wersja 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visio Premium 2010 (HKLM-x32\...\Office14.VISIO) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 33.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 pl)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden Multime (HKLM-x32\...\{363D260F-26E2-4835-BB9B-EED0858AABAE}) (Version: 1.1 - Jerzy Piechowiak) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Nitro Pro 7 (HKLM\...\{6D3AAA06-F2E1-4AB5-AB64-38B7E64DDAEF}) (Version: 7.0.1.5 - Nitro PDF Software) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.8 - Notepad++ Team) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) OCS Inventory NG Agent Deployment Tool 2.1.0.1 (HKLM-x32\...\OCS Inventory NG Agent Deployment Tool) (Version: 2.1.0.1 - OCS Inventory NG) OpenOffice 4.1.0 (HKLM-x32\...\{7EB1185B-6319-42D7-B103-707570BFB0D8}) (Version: 4.10.9764 - Apache Software Foundation) Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{fad118b4-798f-4755-9e67-a622eec95b62}) (Version: 15.6.1 - Intel Corporation) PDFill PDF Editor with FREE Writer and FREE Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 12.0 - PlotSoft LLC) Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.8.0 - Prolific Technology INC) Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) QuickTime Alternative 3.2.2 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 3.2.2 - ) Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - ) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.72.410.2013 - Realtek) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28124 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.19.0 - Renesas Electronics Corporation) Hidden Replace Text (HKLM-x32\...\{E9DD578F-85DD-4FA4-B861-7752F75F6324}) (Version: 2.2 - Ecobyte) Seagate DiscWizard (HKLM-x32\...\{8FB2A014-A0B0-42D8-8E18-9AFC6A6E2814}) (Version: 13.0.14387 - Seagate) SearchForDuplicates (remove only) (HKLM-x32\...\SearchForDuplicates) (Version: - ) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0057-0000-0000-0000000FF1CE}_Office14.VISIO_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version: - Microsoft) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC) Systems Management Software (64-Bit) (HKLM\...\{D21351E1-B98E-4F49-94C1-9E0BE31BA4A4}) (Version: 7.4.0 - Dell) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer) TextPad 7 (HKLM\...\{6A86F18E-5464-449D-A82D-667974747F38}) (Version: 7.2.0 - Helios) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Useful File Utilities (remove only) (HKLM-x32\...\Useful File Utilities) (Version: - ) Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.) Video Backup Fusion (HKLM-x32\...\Video Backup Fusion 3.1) (Version: 3.1 - Kai Christian Heitkamp) VirtuaWin v4.4 (HKLM-x32\...\VirtuaWin_is1) (Version: - ) VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.2 - VMware, Inc) VMware Player (Version: 6.0.2 - VMware, Inc.) Hidden VMware vSphere CLI (HKLM-x32\...\{E60422F6-23F5-446A-B26D-70FF3092BF84}) (Version: 5.1.0.4020 - VMware, Inc.) VMware vSphere Client 5.1 (HKLM-x32\...\{09DC364B-A77A-49A0-972B-E43F0DACC5E3}) (Version: 5.1.0.2669 - VMware, Inc.) VNC Viewer 5.0.6 (HKLM\...\RealVNCViewer_is1) (Version: 5.0.6 - RealVNC Ltd) Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc) WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) WinSCP 5.1.4 (HKLM-x32\...\winscp3_is1) (Version: 5.1.4 - Martin Prikryl) WOL Magic Packet Sender (HKLM-x32\...\{E268ADBD-A002-4684-AEDF-EA0F83F7E00B}) (Version: 1.5.0 - Zwalisoft) WordPipe 8.0.2 (HKLM\...\WordPipe_is1) (Version: 8.0.2 - DataMystic) World of Tanks - Common Test (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1) (Version: - Wargaming.net) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version: - Wargaming.net) World of Warplanes CT (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813CT}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1360218892-3802870453-3763347432-1000_Classes\CLSID\{07474513-7B58-45c7-B3E6-13A3669B1AFD}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1360218892-3802870453-3763347432-1000_Classes\CLSID\{8A791F0C-C63C-4EC5-B97F-FBCE74EDBC54}\InprocServer32 -> C:\Program Files\TextPad 7\System\shellext64.dll (Helios Software Solutions) CustomCLSID: HKU\S-1-5-21-1360218892-3802870453-3763347432-1000_Classes\CLSID\{97D17A04-4438-4C8E-BAC7-BC21B8B9E999}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) ==================== Restore Points ========================= ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-09-30 08:36 - 00000027 ___AC C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {20CF86D5-9B75-4F78-A0D9-1A2C0F681CFB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd) Task: {31B7486A-9829-41BB-AEAA-CBF2326D881A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated) Task: {36ADBEDA-B6CB-4C3B-8177-A4D0D4500FDA} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-07-06] (CyberLink) Task: {389C95AB-426B-4DB9-A0C8-3DC26BDF80F5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [2011-03-22] (Hewlett-Packard Company) Task: {45FB9FD3-6187-45C9-A392-51AC769B50B3} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2014-11-25] (AVAST Software) Task: {47ED566C-995D-4238-86B2-15D84DC5D0E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-28] (Google Inc.) Task: {8264ADDA-61A3-418C-9F39-08568C6FD538} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {9702CD8E-B817-4B46-9560-61053360BA8D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-28] (Google Inc.) Task: {A5DD60AA-9C59-4BC9-BD94-12F2DEF888BC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe [2013-02-19] (Hewlett-Packard) Task: {C404DD9F-D5DB-4872-A33D-8656F6F3F221} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {C6F0BB0E-3362-4D71-BA61-57C3F29F1064} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [2011-09-09] (Hewlett-Packard Company) Task: {E1758B15-F808-466C-BAA4-FA3779DC59FA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-09] (Hewlett-Packard Company) Task: {EEC91F58-9599-4DCD-8C8F-E1226CDABE49} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-09] (Hewlett-Packard Company) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2011-07-29 11:08 - 2011-07-29 11:08 - 00015360 ____C () C:\Windows\System32\KOAZXJ_L.dll 2013-05-28 11:32 - 2013-10-23 15:24 - 00087600 _____ () C:\Windows\System32\cpwmon64.dll 2011-07-29 11:08 - 2011-07-29 11:08 - 00648704 ____C () C:\Windows\system32\spool\DRIVERS\x64\3\KOAZXJ_O.DLL 2014-09-16 05:48 - 2014-09-16 05:47 - 00008192 ____C () C:\Windows\SysWOW64\srvany.exe 2014-09-16 05:48 - 2014-09-16 05:47 - 00151552 ____C () C:\Windows\KMService.exe 2014-02-16 02:34 - 2014-02-16 02:34 - 01332792 ____C () C:\Program Files\Dell\SysMgt\shared\bin\libxml2.dll 2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 ____C () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2011-11-02 07:22 - 2011-11-02 07:22 - 00123680 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll 2014-05-12 10:49 - 2014-05-12 10:49 - 00222720 ____C () C:\Program Files (x86)\Notepad++\NppShell_06.dll 2011-08-09 06:44 - 2011-08-09 06:44 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-07-01 15:49 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2013-07-01 15:49 - 2009-07-20 03:00 - 00077824 _____ () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe 2011-09-30 21:07 - 2011-09-30 21:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2011-09-02 09:49 - 2011-09-02 09:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2014-11-30 20:19 - 2014-11-30 20:19 - 02904064 _____ () C:\Program Files\Alwil Software\Avast5\defs\14113001\algo.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 09097216 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtGui4.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 02560000 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtCore4.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 01044480 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtNetwork4.dll 2011-04-16 04:04 - 2011-04-16 04:04 - 14749696 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtWebKit4.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 00327680 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtSvg4.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 01781760 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtScript4.dll 2011-02-17 10:00 - 2011-02-17 10:00 - 00393216 _____ () C:\Program Files (x86)\Gadu-Gadu 10\QtXml4.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00059904 _____ () C:\Program Files (x86)\Gadu-Gadu 10\zlib1.dll 2011-07-04 18:46 - 2011-07-04 18:46 - 00123488 _____ () C:\Program Files (x86)\Gadu-Gadu 10\ggipcradioproxy.dll 2011-07-04 18:46 - 2011-07-04 18:46 - 00356960 _____ () C:\Program Files (x86)\Gadu-Gadu 10\ggcommon.dll 2011-07-04 18:46 - 2011-07-04 18:46 - 00027744 _____ () C:\Program Files (x86)\Gadu-Gadu 10\ggcrypto.dll 2011-07-04 18:46 - 2011-07-04 18:46 - 00217696 _____ () C:\Program Files (x86)\Gadu-Gadu 10\gglog.dll 2011-07-04 18:46 - 2011-07-04 18:46 - 00017504 _____ () C:\Program Files (x86)\Gadu-Gadu 10\ggipc.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00027648 _____ () C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qgif4.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00143360 _____ () C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qjpeg4.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00274432 _____ () C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qmng4.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00018944 _____ () C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qsvg4.dll 2011-02-17 09:59 - 2011-02-17 09:59 - 00311296 _____ () C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qtiff4.dll 2014-03-31 20:35 - 2014-03-31 20:35 - 00286400 ____C () C:\Program Files (x86)\Windows Live\Writer\pl\WindowsLive.Writer.Localization.resources.dll 2014-11-25 08:50 - 2014-11-25 08:50 - 38562088 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll 2014-11-10 18:55 - 2014-11-10 18:55 - 03649648 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 ____C () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-09-06 17:44 - 2014-09-06 17:44 - 00035328 ____C () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll 2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 ____C () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll 2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 ____C () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows:nlsPreferences AlternateDataStreams: C:\ProgramData\Temp:4FC01C57 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VirtuaWin.lnk => C:\Windows\pss\VirtuaWin.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk => C:\Windows\pss\Samsung Magician.lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: DiscWizardMonitor.exe => "C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe" MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime Alternative\QTTask.exe" -atboottime MSCONFIG\startupreg: Seagate Scheduler2 Service => "C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe" MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray64.exe MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" MSCONFIG\startupreg: VMware hqtray => "C:\Program Files (x86)\VMware\VMware Player\hqtray.exe" ========================= Accounts: ========================== Admin (S-1-5-21-1360218892-3802870453-3763347432-1000 - Administrator - Enabled) => C:\Users\Admin Administrator (S-1-5-21-1360218892-3802870453-3763347432-500 - Administrator - Disabled) Gość (S-1-5-21-1360218892-3802870453-3763347432-501 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= Name: Shrew Soft Lightweight Filter Description: Shrew Soft Lightweight Filter Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: vflt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: HP TrueVision HD Description: Urządzenie wideo USB Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Microsoft Service: usbvideo Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (12/01/2014 07:20:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/30/2014 09:34:25 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Nazwa modułu powodującego błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000bedb Identyfikator procesu powodującego błąd: 0x1174 Godzina uruchomienia aplikacji powodującej błąd: 0xhpasset.exe0 Ścieżka aplikacji powodującej błąd: hpasset.exe1 Ścieżka modułu powodującego błąd: hpasset.exe2 Identyfikator raportu: hpasset.exe3 Error: (11/29/2014 05:53:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: worldofwarplanes.exe, wersja: 1.6.1.0, sygnatura czasowa: 0x544ec112 Nazwa modułu powodującego błąd: worldofwarplanes.exe, wersja: 1.6.1.0, sygnatura czasowa: 0x544ec112 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0136b095 Identyfikator procesu powodującego błąd: 0x237c Godzina uruchomienia aplikacji powodującej błąd: 0xworldofwarplanes.exe0 Ścieżka aplikacji powodującej błąd: worldofwarplanes.exe1 Ścieżka modułu powodującego błąd: worldofwarplanes.exe2 Identyfikator raportu: worldofwarplanes.exe3 Error: (11/29/2014 09:07:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Nazwa modułu powodującego błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000bedb Identyfikator procesu powodującego błąd: 0x2054 Godzina uruchomienia aplikacji powodującej błąd: 0xhpasset.exe0 Ścieżka aplikacji powodującej błąd: hpasset.exe1 Ścieżka modułu powodującego błąd: hpasset.exe2 Identyfikator raportu: hpasset.exe3 Error: (11/28/2014 08:08:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: ACDSee10.exe, wersja: 10.0.219.0, sygnatura czasowa: 0x46d5f1b9 Nazwa modułu powodującego błąd: ACDSee10.exe, wersja: 10.0.219.0, sygnatura czasowa: 0x46d5f1b9 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0053fbb0 Identyfikator procesu powodującego błąd: 0x1cb4 Godzina uruchomienia aplikacji powodującej błąd: 0xACDSee10.exe0 Ścieżka aplikacji powodującej błąd: ACDSee10.exe1 Ścieżka modułu powodującego błąd: ACDSee10.exe2 Identyfikator raportu: ACDSee10.exe3 Error: (11/28/2014 08:03:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: ACDSee10.exe, wersja: 10.0.219.0, sygnatura czasowa: 0x46d5f1b9 Nazwa modułu powodującego błąd: ACDSee10.exe, wersja: 10.0.219.0, sygnatura czasowa: 0x46d5f1b9 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0053fbb0 Identyfikator procesu powodującego błąd: 0x1368 Godzina uruchomienia aplikacji powodującej błąd: 0xACDSee10.exe0 Ścieżka aplikacji powodującej błąd: ACDSee10.exe1 Ścieżka modułu powodującego błąd: ACDSee10.exe2 Identyfikator raportu: ACDSee10.exe3 Error: (11/28/2014 03:38:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 03:36:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 00:50:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 09:08:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Nazwa modułu powodującego błąd: hpasset.exe, wersja: 3.0.2.2, sygnatura czasowa: 0x515303e6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000bedb Identyfikator procesu powodującego błąd: 0x488 Godzina uruchomienia aplikacji powodującej błąd: 0xhpasset.exe0 Ścieżka aplikacji powodującej błąd: hpasset.exe1 Ścieżka modułu powodującego błąd: hpasset.exe2 Identyfikator raportu: hpasset.exe3 System errors: ============= Error: (12/01/2014 07:43:30 AM) (Source: volsnap) (EventID: 35) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle. Error: (12/01/2014 07:21:00 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: vflt Error: (12/01/2014 07:20:57 AM) (Source: SNMP) (EventID: 1500) (User: ) Description: Usługa SNMP napotkała błąd podczas dostępu do klucza rejestru SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x4). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x3b). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x3a). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x39). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x38). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x37). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Error: (11/30/2014 10:47:17 AM) (Source: ACPI) (EventID: 10) (User: ) Description: ACPI: System ACPI BIOS próbuje zapisać dane w niedozwolonym regionie działania PCI (0x36). Skontaktuj się z dostawcą systemu w celu uzyskania pomocy technicznej. Microsoft Office Sessions: ========================= Error: (12/01/2014 07:20:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/30/2014 09:34:25 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: hpasset.exe3.0.2.2515303e6hpasset.exe3.0.2.2515303e6c00000050000bedb117401d00c787078e8e8C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exeC:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exeb06ac104-786b-11e4-8af9-005056c00008 Error: (11/29/2014 05:53:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: worldofwarplanes.exe1.6.1.0544ec112worldofwarplanes.exe1.6.1.0544ec112c00000050136b095237c01d00beaa005fc7cC:\Games\World_of_Warplanes\worldofwarplanes.exeC:\Games\World_of_Warplanes\worldofwarplanes.exe3f34db9b-77e8-11e4-8af9-005056c00008 Error: (11/29/2014 09:07:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: hpasset.exe3.0.2.2515303e6hpasset.exe3.0.2.2515303e6c00000050000bedb205401d00bab75bfae66C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exeC:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exeb58f09e1-779e-11e4-8af9-005056c00008 Error: (11/28/2014 08:08:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: ACDSee10.exe10.0.219.046d5f1b9ACDSee10.exe10.0.219.046d5f1b9c00000050053fbb01cb401d00b3e92b03987C:\Program Files (x86)\ACD Systems\ACDSee\10.0\ACDSee10.exeC:\Program Files (x86)\ACD Systems\ACDSee\10.0\ACDSee10.exee5f3e0be-7731-11e4-8af9-005056c00008 Error: (11/28/2014 08:03:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: ACDSee10.exe10.0.219.046d5f1b9ACDSee10.exe10.0.219.046d5f1b9c00000050053fbb0136801d00b3daf8977e0C:\Program Files (x86)\ACD Systems\ACDSee\10.0\ACDSee10.exeC:\Program Files (x86)\ACD Systems\ACDSee\10.0\ACDSee10.exe2d30b98b-7731-11e4-8af9-005056c00008 Error: (11/28/2014 03:38:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 03:36:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 00:50:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/28/2014 09:08:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: hpasset.exe3.0.2.2515303e6hpasset.exe3.0.2.2515303e6c00000050000bedb48801d00ae288bd3192C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exeC:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPAsset\hpasset.exec7e6adaf-76d5-11e4-8b18-005056c00008 CodeIntegrity Errors: =================================== Date: 2014-12-01 07:17:25.303 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-01 07:17:25.240 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 15:38:27.133 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 15:38:27.070 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 15:36:36.382 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 15:36:36.320 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 12:49:39.694 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 12:49:39.632 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 07:13:31.304 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-11-28 07:13:31.258 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz Percentage of memory in use: 38% Total physical RAM: 8139.86 MB Available physical RAM: 5015.77 MB Total Pagefile: 8238.04 MB Available Pagefile: 4669.2 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (SSD840-1) (Fixed) (Total:97.56 GB) (Free:19.62 GB) NTFS Drive d: (SSD840-2) (Fixed) (Total:117.02 GB) (Free:12.91 GB) NTFS Drive e: (GSP1RMCPRXFREO_PL_DVD) (CDROM) (Total:2.98 GB) (Free:0 GB) UDF Drive h: (Sandisk_32GB) (Removable) (Total:29.82 GB) (Free:20.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: CB6D6D5C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=117 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 29.8 GB) (Disk ID: 5FDF2995) Partition 1: (Not Active) - (Size=29.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================