Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-01-2015 01 Ran by Grzegorz at 2015-01-27 19:46:21 Running from C:\Documents and Settings\Grzegorz\Pulpit Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Photoshop Elements 5.0 (HKLM\...\Adobe Photoshop Elements 5) (Version: 5.0 - Adobe Systems Inc.) Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) AiO_Scan_CDA (Version: 70.0.231.000 - Hewlett-Packard) Hidden AiOSoftwareNPI (Version: 70.0.231.000 - Hewlett-Packard) Hidden Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation) ALLPlayer V4.X (HKLM\...\ALLPlayer_is1) (Version: - ALLCinema Ltd.) Apple Mobile Device Support (HKLM\...\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}) (Version: 6.1.0.13 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Archiwizator WinRAR (HKLM\...\WinRAR archiver) (Version: - ) ATI Catalyst Registration (Version: 3.00.0000 - ATI Technologies Inc.) Hidden Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: - Apple Inc.) BufferChm (Version: 70.0.170.000 - Hewlett-Packard) Hidden ccc-core-static (Version: 2010.1125.2142.38865 - Nazwa firmy) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform) CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden Destinations (Version: 70.0.170.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden F300 (Version: 70.0.231.000 - Hewlett-Packard) Hidden F300_Help (Version: 70.0.231.000 - Hewlett-Packard) Hidden Fax_CDA (Version: 70.0.231.000 - Hewlett-Packard) Hidden Foxtab (HKLM\...\foxtab) (Version: - FoxTab) <==== ATTENTION! Gadu-Gadu 10 (HKLM\...\Gadu-Gadu 10) (Version: - GG Network S.A.) Glary Utilities 4.9 (HKLM\...\Glary Utilities 4) (Version: 4.9.0.99 - Glarysoft Ltd) Google Drive (HKLM\...\{C2D4CD4A-AE20-40B3-8726-8ED1C03E8C15}) (Version: 1.11.4865.2530 - Google, Inc.) Google Update Helper (Version: 1.3.21.135 - Google Inc.) Hidden HP Customer Participation Program 7.0 (HKLM\...\HPExtendedCapabilities) (Version: 7.0 - HP) HP Imaging Device Functions 7.0 (HKLM\...\HP Imaging Device Functions) (Version: 7.0 - HP) HP Photosmart Essential (HKLM\...\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}) (Version: 1.9.1.3 - HP) HP Photosmart, Officejet and Deskjet 7.0.A (HKLM\...\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}) (Version: - HP) HP Software Update (HKLM\...\{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}) (Version: 3.0.7.014 - Hewlett-Packard) HP Solution Center 7.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 7.0 - HP) HPPhotoSmartExpress (Version: 70.0.170.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 70.0.170.000 - Hewlett-Packard) Hidden InstantShareDevicesMFC (Version: 70.0.170.000 - Hewlett-Packard) Hidden Intel(R) PRO Network Connections (HKLM\...\{F6B23E59-1240-4C20-AE0B-70658A91976A}) (Version: - Intel) iTunes (HKLM\...\{91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}) (Version: 11.0.4.4 - Apple Inc.) Java(TM) 6 Update 27 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.270 - Oracle) K-Lite Codec Pack 6.4.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 6.4.0 - ) MarketResearch (Version: 70.0.170.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 36.0 (x86 pl) (HKLM\...\Mozilla Firefox 36.0 (x86 pl)) (Version: 36.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla) MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 6.0 Parser (HKLM\...\{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}) (Version: 6.10.1129.0 - Microsoft Corporation) NewCopy_CDA (Version: 70.0.231.000 - Hewlett-Packard) Hidden Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia) Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.8.48.0 - Nokia) Nokia Suite (Version: 3.8.48.0 - Nokia) Hidden Obsługa programów Apple (HKLM\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.) Odkurzacz (HKLM\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński) Pakiet sterowników systemu Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia) PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) PhotoScape (HKLM\...\PhotoScape) (Version: - ) ProductContextNPI (Version: 70.0.231.000 - Hewlett-Packard) Hidden Readme (Version: 70.0.231.000 - Hewlett-Packard) Hidden Real Alternative 2.0.2 (HKLM\...\RealAlt_is1) (Version: 2.0.2 - ) Scan (Version: 7.0.0.0 - Hewlett-Packard) Hidden ScannerCopy (Version: 7.0.0.0 - Hewlett-Packard) Hidden SigmaTel Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 5.10.4811.0 - SigmaTel) Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) SolutionCenter (Version: 70.0.170.000 - Hewlett-Packard) Hidden Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform) SpyHunter 4 (HKLM\...\SpyHunter) (Version: 4.18.9.4384 - Enigma Software Group, LLC) Status (Version: 70.0.170.000 - Hewlett-Packard) Hidden The Lord of the Rings FREE Trial (Version: 1.00.0000 - ATI Technologies Inc.) Hidden Toolbox (Version: 70.0.170.000 - Hewlett-Packard) Hidden TrayApp (Version: 70.0.170.000 - Hewlett-Packard) Hidden Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden WebReg (Version: 70.0.170.000 - Hewlett-Packard) Hidden Winamp (HKLM\...\Winamp) (Version: 5.581 - Nullsoft, Inc) Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation) Windows Media Player 11 (HKLM\...\Windows Media Player) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1123561945-1580818891-725345543-1004_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll (EasyBits Software Corp.) ==================== Restore Points ========================= 24-12-2014 15:05:36 Punkt kontrolny systemu 26-12-2014 12:07:45 Punkt kontrolny systemu 28-12-2014 11:37:51 Punkt kontrolny systemu 29-12-2014 13:58:13 Punkt kontrolny systemu 31-12-2014 11:35:26 Punkt kontrolny systemu 01-01-2015 20:09:44 Punkt kontrolny systemu 03-01-2015 19:09:25 Punkt kontrolny systemu 06-01-2015 12:32:47 Punkt kontrolny systemu 08-01-2015 08:39:21 Punkt kontrolny systemu 09-01-2015 09:07:17 Punkt kontrolny systemu 10-01-2015 15:05:32 Punkt kontrolny systemu 12-01-2015 08:57:14 Punkt kontrolny systemu 13-01-2015 12:42:46 Punkt kontrolny systemu 14-01-2015 16:43:33 Software Distribution Service 3.0 15-01-2015 18:10:11 Punkt kontrolny systemu 16-01-2015 19:50:46 Punkt kontrolny systemu 17-01-2015 20:45:01 Punkt kontrolny systemu 19-01-2015 13:45:21 Punkt kontrolny systemu 20-01-2015 23:04:05 Punkt kontrolny systemu 22-01-2015 00:49:24 Punkt kontrolny systemu 23-01-2015 10:00:00 Usunięto: Bonjour 24-01-2015 11:24:31 Punkt kontrolny systemu 25-01-2015 13:22:23 Punkt kontrolny systemu 26-01-2015 17:11:10 Punkt kontrolny systemu ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-03-02 13:00 - 2015-01-20 16:38 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\GlaryInitialize 4.job => C:\Program Files\Glary Utilities 4\Initialize.exe Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job => C:\WINDOWS\system32\xp_eos.exe Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job => C:\WINDOWS\system32\xp_eos.exe ==================== Loaded Modules (whitelisted) ============= 2006-12-22 07:31 - 2006-12-22 07:31 - 00108712 _____ () C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe 2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-04-01 09:03 - 2014-04-01 09:03 - 00080160 _____ () C:\Program Files\Glary Utilities 4\zlib1.dll 2014-12-14 12:36 - 2014-12-14 12:36 - 16843952 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_235.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk => C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^Grzegorz^Menu Start^Programy^Autostart^Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk => C:\WINDOWS\pss\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnkStartup MSCONFIG\startupreg: Adobe Photo Downloader => "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe" MSCONFIG\startupreg: Gadu-Gadu 10 => "C:\Program Files\Gadu-Gadu 10\gg.exe" MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: VX1000 => C:\WINDOWS\vVX1000.exe ========================= Accounts: ========================== Administrator (S-1-5-21-1123561945-1580818891-725345543-500 - Administrator - Enabled) ASPNET (S-1-5-21-1123561945-1580818891-725345543-1005 - Limited - Enabled) Gość (S-1-5-21-1123561945-1580818891-725345543-501 - Limited - Disabled) Grzegorz (S-1-5-21-1123561945-1580818891-725345543-1004 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Grzegorz Pomocnik (S-1-5-21-1123561945-1580818891-725345543-1000 - Limited - Disabled) SUPPORT_388945a0 (S-1-5-21-1123561945-1580818891-725345543-1002 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= Name: Audio Device on High Definition Audio Bus Description: Audio Device on High Definition Audio Bus Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/21/2015 05:21:34 PM) (Source: MsiInstaller) (EventID: 1013) (User: GOMAK-027C74590) Description: Produkt: Microsoft .NET Framework 2.0 Service Pack 2 -- Microsoft .NET Framework 2.0 Service Pack 2 cannot be uninstalled because it will affect other applications that are installed. For more information, see http://go.microsoft.com/fwlink/?LinkId=91126. Error: (01/21/2015 07:15:46 AM) (Source: MsiInstaller) (EventID: 1013) (User: ZARZĄDZANIE NT) Description: Product: Skype Click to Call -- Installation cannot proceed on this operating system. Error: (01/20/2015 04:39:04 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: To połączenie sieciowe nie istnieje. Error: (01/20/2015 04:39:04 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: To połączenie sieciowe nie istnieje. Error: (01/20/2015 04:39:04 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: Nie można określić nazwy serwera lub adresu Error: (01/20/2015 10:00:58 AM) (Source: Application Error) (EventID: 1001) (User: ) Description: Pakiet błędów 791158267. W wyniku wymiany klucza WEP nie zostało skonfigurowane bezpieczne połączenie po uwierzytelnianiu metodą 802.1x. Ustawienie bieżące zostało oznaczone, jako niedziałające i połączenie sieci bezprzewodowej zostanie rozłączone. Error: (01/20/2015 10:00:55 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd plugin-container.exe, wersja 36.0.0.5492, moduł powodujący błąd mozalloc.dll, wersja 36.0.0.5492, adres błędu 0x00001e02. Przetwarzanie zdarzenia określonego nośnika dla [plugin-container.exe!ws!] Error: (01/20/2015 09:58:59 AM) (Source: Application Error) (EventID: 1001) (User: ) Description: Pakiet błędów 793022886. W wyniku wymiany klucza WEP nie zostało skonfigurowane bezpieczne połączenie po uwierzytelnianiu metodą 802.1x. Ustawienie bieżące zostało oznaczone, jako niedziałające i połączenie sieci bezprzewodowej zostanie rozłączone. Error: (01/20/2015 09:58:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd xtab_4.0.2.1716.exe, wersja 4.0.2.1716, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x00c678c8. Przetwarzanie zdarzenia określonego nośnika dla [xtab_4.0.2.1716.exe!ws!] Error: (12/09/2014 07:29:15 AM) (Source: SecurityCenter) (EventID: 1802) (User: ) Description: Usługa Centrum zabezpieczeń systemu Windows nie może ustanowić kwerend zdarzeń z WMI, aby monitorować zaporę i program antywirusowy innej firmy. System errors: ============= Microsoft Office Sessions: ========================= ==================== Memory info =========================== Processor: Intel(R) Pentium(R) D CPU 2.80GHz Percentage of memory in use: 73% Total physical RAM: 1021.1 MB Available physical RAM: 267.77 MB Total Pagefile: 2458.32 MB Available Pagefile: 1792.75 MB Total Virtual: 2047.88 MB Available Virtual: 1943.2 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:39.06 GB) (Free:1.99 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive d: () (Fixed) (Total:96.94 GB) (Free:95.38 GB) NTFS Drive e: () (Fixed) (Total:96.87 GB) (Free:29.72 GB) NTFS Drive g: () (Removable) (Total:7.45 GB) (Free:7.27 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: 198E198D) Partition 1: (Active) - (Size=39.1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=193.8 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 7.5 GB) (Disk ID: 8757C928) Partition 1: (Not Active) - (Size=7.5 GB) - (Type=0B) ==================== End Of Log ============================