Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2014 Ran by zbi at 2014-12-27 15:25:51 Running from C:\frst Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 4.65 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0465-000001000000}) (Version: 4.65.00.0 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Aktualizacje NVIDIA 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation) All Media Fixer 9.11 (HKLM-x32\...\All Media Fixer_is1) (Version: - New Live Software, Inc.) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) Bitcoin Core (64-bit) (HKU\S-1-5-21-631475386-587308821-3710584268-1000\...\Bitcoin Core (64-bit)) (Version: 0.9.0 - Bitcoin Core project) Brother MFL-Pro Suite DCP-J140W (HKLM-x32\...\{2FF959E3-FFE4-46C4-96DA-03F26BCFEFCC}) (Version: 1.1.5.0 - Brother Industries, Ltd.) Browser in the Box (HKLM\...\BitBox) (Version: 2.2.0-r1563 - Sirrix AG) CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.8.2568 - CDBurnerXP) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP) CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.71.1.2014 - Georgy Berdyshev) Cezar IV (HKLM-x32\...\{B7666229-351B-47D9-AA6F-DF777CF04BBF}) (Version: 1.2 - Tilted Mill Entertainment) ChrisPC Free Anonymous Proxy 5.40 (HKLM-x32\...\{6006089C-84B5-4F18-8113-D96792AED0DE}_is1) (Version: - Chris P.C. srl) coverXP (remove only) (HKLM-x32\...\coverXP) (Version: - ) CSR Harmony Wireless Software Stack (HKLM\...\{17DEA095-8EE1-49A2-AC5A-9663DB098FA9}) (Version: 2.1.63.0 - CSR Plc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation) DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version: - ) Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform) DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team) EaseUS Data Recovery Wizard 7.0 (HKLM-x32\...\EaseUS Data Recovery Wizard 7.0_is1) (Version: - EaseUS) EaseUS Partition Master 10.2 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) EASEUS Partition Recovery 5.0.1 (HKLM-x32\...\EASEUS Partition Recovery_is1) (Version: - EASEUS) EaseUS Todo Backup Free 6.1 (HKLM-x32\...\EaseUS Todo Backup Free 6.1_is1) (Version: 6.1 - CHENGDU YIWO Tech Development Co., Ltd) Easy Miner (HKLM-x32\...\Easy Miner) (Version: 1.2.7.20140211 - butterflylabs) EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies) Fakturowanie 1.1 (HKLM-x32\...\Fakturowanie_is1) (Version: - ECLSOFT Sp. z o.o.) Far Here Power Toy (HKLM\...\FarHere) (Version: - ) Far Manager 2 x64 (HKLM\...\{143F0C11-D9F3-4F1E-9037-67BBFDD379AD}) (Version: 2.0.1807 - Eugene Roshal & Far Group) ffdshow v1.1.4399 [2012-03-22] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.4399.0 - ) foobar2000 v1.3.3 (HKLM-x32\...\foobar2000) (Version: 1.3.3 - Peter Pawlowski) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Free Studio version 2013 (HKLM-x32\...\Free Studio_is1) (Version: 6.2.0.1029 - DVDVideoSoft Ltd.) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GIMP 2.6.10 (HKLM\...\GIMP-2_is1) (Version: 2.6.10 - The GIMP Team) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - ) HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC) ipla 2.3.3 (HKLM-x32\...\ipla) (Version: 2.3.3 - Redefine Sp z o.o.) iReboot 1.1.1 (HKLM-x32\...\iReboot) (Version: 1.1.1 - NeoSmart Technologies) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan) Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle) Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle) Klient Mediator wersja 5.2 (HKLM-x32\...\Mediator - Klient_is1) (Version: - OTC S.A.) Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - ) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Lizardtech DjVu Control (HKLM-x32\...\{105CFC7C-6992-11D5-BD9D-000102C10FD8}) (Version: - ) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version: - ) Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - ) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - ) Mozilla Firefox 34.0.5 (x86 pl) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 pl)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla) Mozilla Thunderbird 31.3.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 pl)) (Version: 31.3.0 - Mozilla) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) MyTube 6 (HKLM-x32\...\{02C15B8C-26BE-479C-0001-7E31094C1376}) (Version: 6.0.13.328 - S.A.D.) NSU (HKLM-x32\...\{A3EA81D6-07A2-4116-9EA3-60B741572FD6}) (Version: 2.02.1030 - ZyXEL) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 295.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 295.73 - NVIDIA Corporation) Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński) OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - ) Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Oracle VM VirtualBox 4.0.16 (HKLM\...\{D113D762-FC28-4B6F-A39E-DD9A037B04D4}) (Version: 4.0.16 - Oracle Corporation) Panel sterowania NVIDIA 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden Paragon Backup & Recovery™ 10.2 Free Edition (HKLM\...\{AB562530-921D-11DE-A208-005056C00008}) (Version: 90.00.0003 - Paragon Software) PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge) PDFMate PDF Converter 1.7.2 (HKLM-x32\...\PDFMate PDF Converter_is1) (Version: - pdfmate.com) PITy 2009 dla Windows kompilacja:1.1.2.15 (HKLM-x32\...\PITy 2009_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) PITy 2011 dla Windows kompilacja:1.3.3.2 (HKLM-x32\...\PITy 2011_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) PITy 2012 dla Windows kompilacja:1.4.5.9 (HKLM-x32\...\PITy 2012_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) PITy2013 IPS 1.5.2.0 kompilacja:1.5.4.2 (HKLM-x32\...\PITy2013IPS_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Process Hacker 1.11 (HKLM\...\Process_Hacker_is1) (Version: 1.11 - wj32) PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden qHarbour (HKLM-x32\...\qHarbour) (Version: - ) RadLight MPC DirectShow Filter (remove only) (HKLM-x32\...\RadLight MPC DirectShow Filter) (Version: - ) Recuva (HKLM\...\Recuva) (Version: 1.40 - Piriform) Revo Uninstaller Pro 2.5.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 2.5.9 - VS Revo Group, Ltd.) RMVB Converter 1.8 (HKLM-x32\...\{C3BDF1C8-66EF-4A0F-B427-A99E39706F45}_is1) (Version: - RMVB Codec) SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version: - ) Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version: - ) SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version: - ) SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version: - ) save2pc Light 4.17 (HKLM-x32\...\save2pc Light_is1) (Version: - FDRLab) Seagate DiscWizard (HKLM-x32\...\{C43E4B9C-14C8-4EB0-998B-85211B6EDD61}) (Version: 11.0.8341 - Seagate) SeaTools for Windows (HKLM-x32\...\{98613C99-1399-416C-A07C-1EE1C585D872}) (Version: 1.2.0.6 - Seagate Technology) Shrew Soft VPN Client (HKLM\...\Shrew Soft VPN Client) (Version: - ) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.) Speccy (HKLM\...\Speccy) (Version: 1.07 - Piriform) SQLite Expert Personal 3.3.7 (HKLM-x32\...\SQLite Expert Personal 3_is1) (Version: - Bogdan Ureche) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer) TortoiseSVN 1.6.16.21511 (64 bit) (HKLM\...\{1DD03A94-C815-46EF-A43A-B36694002A7C}) (Version: 1.6.21511 - TortoiseSVN) UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.1.9.6 - uvnc bvba) Unity Web Player (HKU\S-1-5-21-631475386-587308821-3710584268-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN) Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation) Winflector wersja 3.1.0.2 (HKLM\...\Winflector_is1) (Version: 3.1.0.2 - OTC S.A.) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 27-12-2014 14:28:48 Zaplanowany punkt kontrolny ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {015CCEDB-A7E0-4286-9893-BF35C9B0D5FD} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {15FBB95A-218D-4E3B-AF4B-06614DD86795} - System32\Tasks\{8B73070D-3B80-4129-B4AB-831F16489D66} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {2B40D493-1BB7-4AD5-B624-FA28806F8B58} - System32\Tasks\{F395D752-6554-4B7C-A3BB-671BEB341CF5} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {499C300B-4BDE-438A-A7F6-CD7671C75722} - \AdobeFlashPlayerUpdate 2 No Task File <==== ATTENTION Task: {5745C9DD-A4DB-406B-81A6-B1954D9F2DDF} - System32\Tasks\{B9121AE5-D363-4162-A9C5-F8E45045E024} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {592056D8-088A-4AC1-AD8D-789D8947030C} - System32\Tasks\Driver Booster SkipUAC (zbi) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe Task: {743AFFB2-77E5-4DE7-9683-6FDCCCF8945B} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware) Task: {96764E35-78C6-482E-896C-8641DD451F84} - \AdobeFlashPlayerUpdate No Task File <==== ATTENTION Task: {AE184B3A-2953-4610-BCEA-750523044BDE} - System32\Tasks\{58CBF0CA-F7FF-4C60-8502-0227C4234BC3} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {B4F3C785-E70A-4723-9241-FEEFB0885006} - System32\Tasks\{0742F368-59BD-4008-B351-4B061A581B3D} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {BB6C4426-05F0-4C9C-BA9B-C880E432EAF1} - System32\Tasks\Uninstaller_SkipUac_zbi => D:\\pa\\PortableApps\\IObitUninstallerPortable\\App\\uninstaller\\IObitUninstaler.exe Task: {C42A4CC0-3BF3-41CD-901F-1DA2B5D14515} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd) Task: {DDE793B9-F176-4490-B86E-6919B6D2C984} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.) Task: {E19D8C48-6848-4F55-830C-3DC64D9FB9E2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-15] (Adobe Systems Incorporated) Task: {E2330F7F-0C4F-4877-B32B-F04A304FC6A9} - System32\Tasks\{9CE305D4-A1E5-4575-87F9-36B91B5C43EC} => pcalua.exe -a I:\aoesetup.exe -d I:\ -c /autorun Task: {E522F4E2-954C-4E7C-AAA2-6C71D2B68C47} - System32\Tasks\{F2CDC916-4DA2-4586-929F-B3B922245115} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {E9465C26-6CB0-4FDB-BA98-0B46CDF804A5} - System32\Tasks\{D3A289A1-BEBC-4903-87DA-61565433B866} => C:\Program Files (x86)\Sierra\Cezar IV\CaesarIV.exe [2007-01-20] (Tilted Mill Entertainment) Task: {E9A63CEF-5C09-41E3-B311-C00CC149FF8D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-22 11:24 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-07-01 09:21 - 2013-07-01 09:21 - 01127736 _____ () C:\Program Files\ShrewSoft\VPN Client\iked.exe 2013-07-01 00:16 - 2013-07-01 00:16 - 00628224 _____ () C:\Program Files\ShrewSoft\VPN Client\libike.dll 2013-07-01 00:15 - 2013-07-01 00:15 - 00022016 _____ () C:\Program Files\ShrewSoft\VPN Client\libidb.dll 2013-07-01 00:15 - 2013-07-01 00:15 - 00018432 _____ () C:\Program Files\ShrewSoft\VPN Client\libith.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 00039936 _____ () C:\Program Files\ShrewSoft\VPN Client\libvnet.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 00013312 _____ () C:\Program Files\ShrewSoft\VPN Client\liblog.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 00116736 _____ () C:\Program Files\ShrewSoft\VPN Client\libip.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 00029184 _____ () C:\Program Files\ShrewSoft\VPN Client\libpfk.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 00017920 _____ () C:\Program Files\ShrewSoft\VPN Client\libdtp.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 00035840 _____ () C:\Program Files\ShrewSoft\VPN Client\libvflt.dll 2013-07-01 09:21 - 2013-07-01 09:21 - 00810808 _____ () C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe 2009-09-15 11:51 - 2009-09-15 11:51 - 00017408 _____ () C:\Program Files (x86)\NeoSmart Technologies\iReboot\iRebootd.exe 2010-09-20 19:45 - 2010-03-04 22:38 - 00071096 _____ () C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 2013-08-03 17:43 - 2005-04-22 05:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll 2012-03-22 21:11 - 2012-03-22 21:11 - 00244944 _____ () C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe 2012-04-15 10:17 - 2011-06-24 13:08 - 03781632 _____ () C:\Program Files (x86)\ZyXEL\NSU\NSU.exe 2014-08-15 08:15 - 2014-07-08 22:32 - 01688048 _____ () C:\Program Files\FAR\ConEmu64.exe 2014-08-15 08:15 - 2014-07-08 22:32 - 00531952 _____ () C:\Program Files\FAR\ConEmu\ConEmuCD64.dll 2014-08-15 08:15 - 2014-07-08 22:32 - 00014320 _____ () C:\Program Files\FAR\ConEmu\ConEmuC64.exe 2014-08-15 08:15 - 2014-07-08 22:32 - 00431088 _____ () C:\Program Files\FAR\ConEmu\ConEmuHk64.dll 2014-08-15 08:15 - 2014-07-08 22:32 - 00054768 _____ () C:\Program Files\FAR\ConEmu\ExtendedConsole64.dll 2014-08-15 08:15 - 2014-07-08 22:32 - 00359408 _____ () C:\Program Files\FAR\Plugins\ConEmu\ConEmu.x64.dll 2014-08-15 07:32 - 2014-08-10 01:02 - 00428820 _____ () C:\Program Files\FAR\lua51.dll 2014-08-15 07:32 - 2014-08-10 01:02 - 00062464 _____ () C:\Program Files\FAR\lpeg.dll 2010-12-23 12:06 - 2010-12-23 12:06 - 00028672 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\cx_Logging.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\pywintypes27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00011264 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32crypt.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00018432 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32event.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32file.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00167424 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32gui.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32pipe.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00035840 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32process.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00017408 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32profile.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00108544 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32security.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00022528 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32ts.pyd 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\pythoncom27.dll 2012-02-07 17:42 - 2012-02-07 17:42 - 00266240 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\win32com.shell.shell.pyd 2012-04-10 22:31 - 2012-04-10 22:31 - 00074240 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\_ctypes.pyd 2012-04-10 22:31 - 2012-04-10 22:31 - 00285184 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\_hashlib.pyd 2012-01-04 09:08 - 2012-01-04 09:08 - 01814016 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\PySide.QtCore.pyd 2012-01-04 09:41 - 2012-01-04 09:41 - 00109056 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\pyside-python2.7.dll 2012-01-04 09:41 - 2012-01-04 09:41 - 00107008 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\shiboken-python2.7.dll 2012-01-04 09:41 - 2012-01-04 09:41 - 02293760 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\QtCore4.dll 2012-01-04 09:26 - 2012-01-04 09:26 - 06895104 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\PySide.QtGui.pyd 2012-01-04 09:41 - 2012-01-04 09:41 - 08223744 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\QtGui4.dll 2012-04-10 22:31 - 2012-04-10 22:31 - 00040960 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\_socket.pyd 2012-04-10 22:31 - 2012-04-10 22:31 - 00721920 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\Service\_ssl.pyd 2013-12-01 11:48 - 2013-09-04 11:19 - 00098888 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll 2013-12-01 11:48 - 2013-11-14 14:59 - 00031304 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckTool.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00029768 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll 2013-12-01 11:48 - 2008-11-25 17:18 - 01291264 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2013-12-01 11:49 - 2004-10-05 03:08 - 00055808 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00050248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll 2013-12-01 11:48 - 2013-10-24 17:46 - 00106568 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00030280 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00293960 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSize.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00578632 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00468040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00192072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00068680 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00069192 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00022600 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00115784 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00192584 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll 2013-12-01 11:48 - 2013-09-04 11:19 - 00135752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll 2013-12-01 11:48 - 2013-10-22 17:31 - 00037960 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00135240 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00249928 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\uexper.dll 2013-12-01 11:49 - 2013-09-04 11:19 - 00096840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBFireWall.dll 2012-04-15 10:17 - 2009-12-29 19:03 - 00806912 _____ () C:\Program Files (x86)\ZyXEL\NSU\LIBEAY32.dll 2013-08-03 17:42 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2014-12-19 09:41 - 2014-12-19 09:41 - 03339376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-12-19 09:41 - 2014-12-19 09:41 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-12-19 09:41 - 2014-12-19 09:41 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2014-12-10 09:11 - 2014-12-10 09:11 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-631475386-587308821-3710584268-500 - Administrator - Disabled) BitBox (S-1-5-21-631475386-587308821-3710584268-1007 - Limited - Enabled) Gość (S-1-5-21-631475386-587308821-3710584268-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-631475386-587308821-3710584268-1002 - Limited - Enabled) UpdatusUser (S-1-5-21-631475386-587308821-3710584268-1005 - Limited - Enabled) => C:\Users\UpdatusUser zbi (S-1-5-21-631475386-587308821-3710584268-1000 - Administrator - Enabled) => C:\Users\zbi zbi1 (S-1-5-21-631475386-587308821-3710584268-1008 - Limited - Enabled) => C:\Users\zbi1 ==================== Faulty Device Manager Devices ============= Name: Shrew Soft Virtual Adapter Description: Shrew Soft Virtual Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Shrew Soft Service: vnet Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (12/27/2014 01:45:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x434 Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/26/2014 04:36:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x45c Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/26/2014 11:47:12 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x45c Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/21/2014 08:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Wykonanie kopii zapasowej nie zostało zakończone z powodu błędu zapisu w lokalizacji kopii zapasowej M:\. Błąd: Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006). Error: (12/21/2014 07:51:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x460 Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/21/2014 04:35:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x448 Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/20/2014 01:20:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x2b0 Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/19/2014 08:35:39 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x3dc Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/18/2014 06:24:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: LogonUI.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce79f70 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c4102 Identyfikator procesu powodującego błąd: 0x3a0 Godzina uruchomienia aplikacji powodującej błąd: 0xLogonUI.exe0 Ścieżka aplikacji powodującej błąd: LogonUI.exe1 Ścieżka modułu powodującego błąd: LogonUI.exe2 Identyfikator raportu: LogonUI.exe3 Error: (12/18/2014 06:14:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: CsrBtOBEXService.exe, wersja: 2.1.63.0, sygnatura czasowa: 0x4f68683b Nazwa modułu powodującego błąd: CsrBtOBEXService.exe, wersja: 2.1.63.0, sygnatura czasowa: 0x4f68683b Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000006f58 Identyfikator procesu powodującego błąd: 0xcc4 Godzina uruchomienia aplikacji powodującej błąd: 0xCsrBtOBEXService.exe0 Ścieżka aplikacji powodującej błąd: CsrBtOBEXService.exe1 Ścieżka modułu powodującego błąd: CsrBtOBEXService.exe2 Identyfikator raportu: CsrBtOBEXService.exe3 System errors: ============= Error: (12/27/2014 01:45:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: sptd StarOpen Error: (12/27/2014 01:44:45 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa PDF Architect Service zakończyła działanie; wystąpił następujący błąd: %%-2147467259 Error: (12/27/2014 01:43:43 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Ładowanie sterownika \SystemRoot\System32\Drivers\StarOpen.SYS zostało zablokowane z powodu niezgodności z tym systemem. Skontaktuj się z dostawcą oprogramowania w celu uzyskania zgodnej wersji sterownika. Error: (12/27/2014 01:42:14 PM) (Source: sptd) (EventID: 4) (User: ) Description: Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla . Error: (12/27/2014 01:44:03 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 21:03:46 na ‎2014-‎12-‎26 było nieoczekiwane. Error: (12/26/2014 09:04:12 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: Usługa Funkcja Audio CSR Bluetooth nie została poprawnie zamknięta po odebraniu kodu sterującego przed zamknięciem. Error: (12/26/2014 08:43:52 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (12/26/2014 08:37:24 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: sptd StarOpen Error: (12/26/2014 08:36:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa PDF Architect Service zakończyła działanie; wystąpił następujący błąd: %%-2147467259 Error: (12/26/2014 08:35:46 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Ładowanie sterownika \SystemRoot\System32\Drivers\StarOpen.SYS zostało zablokowane z powodu niezgodności z tym systemem. Skontaktuj się z dostawcą oprogramowania w celu uzyskania zgodnej wersji sterownika. Microsoft Office Sessions: ========================= Error: (12/27/2014 01:45:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c410243401d021d2ca1b9b40C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dll360a7ec0-8dc6-11e4-a8c0-90e6ba43f68a Error: (12/26/2014 04:36:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c410245c01d021214f3d01e0C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dll03aba640-8d15-11e4-9477-90e6ba43f68a Error: (12/26/2014 11:47:12 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c410245c01d020f54c1e5120C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dll8baf8d50-8cec-11e4-87fc-90e6ba43f68a Error: (12/21/2014 08:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: M:\Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006) Error: (12/21/2014 07:51:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c410246001d01d4edd95b940C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dll52233760-8942-11e4-a5c4-90e6ba43f68a Error: (12/21/2014 04:35:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c410244801d01d2d94bafa80C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dlled2c6630-8926-11e4-b2a6-90e6ba43f68a Error: (12/20/2014 01:20:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c41022b001d01c4f24cd68e0C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dll8bceb3a0-8842-11e4-b89f-90e6ba43f68a Error: (12/19/2014 08:35:39 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c41023dc01d01b5ddc018520C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dlla0ac4a40-8751-11e4-88a6-90e6ba43f68a Error: (12/18/2014 06:24:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LogonUI.exe6.1.7601.175144ce79f70ntdll.dll6.1.7601.18247521eaf24c000037400000000000c41023a001d01ae67f936a00C:\Windows\system32\LogonUI.exeC:\Windows\SYSTEM32\ntdll.dllbb5d1e40-86da-11e4-b683-90e6ba43f68a Error: (12/18/2014 06:14:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: CsrBtOBEXService.exe2.1.63.04f68683bCsrBtOBEXService.exe2.1.63.04f68683bc00000050000000000006f58cc401d01ae4b64475f0C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exeC:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe61b318f0-86d9-11e4-970b-90e6ba43f68a CodeIntegrity Errors: =================================== Date: 2014-12-27 13:43:43.980 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-27 13:43:43.855 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 20:35:46.524 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 20:35:46.384 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 16:33:18.821 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 16:33:18.712 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 11:18:13.266 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-26 11:18:13.156 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-23 21:46:29.188 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-12-23 21:46:29.063 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\System32\drivers\StarOpen.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: AMD Athlon(tm) II X3 435 Processor Percentage of memory in use: 49% Total physical RAM: 4095.29 MB Available physical RAM: 2047.68 MB Total Pagefile: 8188.76 MB Available Pagefile: 5820.14 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (ST1) (Fixed) (Total:98.35 GB) (Free:20.61 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (ST2) (Fixed) (Total:0.32 GB) (Free:0.02 GB) NTFS Drive e: (WD1) (Fixed) (Total:9.77 GB) (Free:5.69 GB) NTFS Drive f: (WD2) (Fixed) (Total:61.41 GB) (Free:9.96 GB) NTFS Drive g: (WD3) (Fixed) (Total:4 GB) (Free:2.92 GB) FAT Drive h: (WD4) (Fixed) (Total:390.57 GB) (Free:96.62 GB) NTFS Drive m: (ST3) (Fixed) (Total:0.05 GB) (Free:0.05 GB) FAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 000E77E4) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0B6EF721) Partition 1: (Not Active) - (Size=329 MB) - (Type=07 NTFS) Partition 2: (Active) - (Size=98.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=50.4 GB) - (Type=OF Extended) ==================== End Of Log ============================