Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2015 Ran by Teresa at 2015-02-14 11:47:43 Running from C:\Users\Teresa\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) clear.fi SDK - Video 2 (x32 Version: 2.1.1925 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.1.2008 - CyberLink Corp.) Hidden $crrUnisntlDsply$ (HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\...\$prdctUninst$) (Version: - $cmpny$) Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation) Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated) Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated) Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated) AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated) AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden ALL YouTube Downloader (HKLM-x32\...\ALL YouTube Downloader_is1) (Version: 2.2 - ALLPlayer Ltd.) ALLMediaServer (HKLM-x32\...\{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1) (Version: 0.95 - ALLCinema Ltd.) ALLPlayer V5.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLCinema Ltd.) Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG) Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.624 - Avira) Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation) buyfAst (HKLM-x32\...\{78B72F2B-0468-A7AC-ECEE-02C79EC3EF0B}) (Version: - "") CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform) clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3108 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3108 - Acer Incorporated) CommonShare (HKLM\...\CommonShare) (Version: 2014.10.16.171644 - CommonShare) <==== ATTENTION CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.) Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden eBay Worldwide (HKLM-x32\...\{A694AF57-9891-4D62-824C-7E55A1361A14}) (Version: 2.3.0630 - OEM) e-pity 2012 wersja 4.0 (HKLM-x32\...\{089EC62B-72C9-490C-94BD-BA6B833A0EB2}}_is1) (Version: 4.0 - e-file sp. z o.o.) ETDWare PS/2-X64 11.6.8.001_WHQL (HKLM\...\Elantech) (Version: 11.6.8.001 - ELAN Microelectronic Corp.) FreeSoftToday 008.8 (HKLM-x32\...\rec_pl_8_is1) (Version: - FREESOFTTODAY) <==== ATTENTION Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.7 - Google Inc.) Hidden Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden GPU Monitor (HKLM-x32\...\VLC Player GPU+11.041.44) (Version: 11.041.44 - GPU Usage) <==== ATTENTION Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2843 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Internet Explorer Toolbar 4.7 by SweetPacks (x32 Version: 4.7.0004 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden K-Lite Codec Pack 9.7.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.7.0 - ) Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.5 - Acer Inc.) Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3004 - Acer Incorporated) Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden Malwarebytes Anti-Malware wersja 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) McAfee Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1492 - McAfee, Inc.) McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.191 - McAfee, Inc.) Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MyFreeCodec (HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\...\MyFreeCodec) (Version: - ) MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden NapiProjekt 2.0.0 (build 2151) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9008 - NTI Corporation) Hidden NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation) NVIDIA Sterownik graficzny 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation) NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation) Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer) Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.01.3200 - Acer) OpenOffice.org 3.4.1 (HKLM-x32\...\{18192D3F-5537-4560-AD89-D695F72AF91D}) (Version: 3.41.9593 - Apache Software Foundation) Opera 12.15 (HKLM\...\Opera 12.15.1748) (Version: 12.15.1748 - Opera Software ASA) Panel sterowania NVIDIA 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden PlantUML Viewer (HKLM-x32\...\{B43ADAE2-EB7C-9E3F-2EE9-6D55C686D263}) (Version: - "") PLAY ONLINE (HKLM-x32\...\PLAY ONLINE) (Version: 11.002.03.10.264 - Huawei Technologies Co.,Ltd) Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SweetIM for Messenger 3.7 (x32 Version: 3.7.0007 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden Update for Zip Opener (HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\...\DSite) (Version: - ) <==== ATTENTION Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) VuuPC Packages (HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\...\VuuPC Packages) (Version: - ) <==== ATTENTION WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent) WildTangent Games App (x32 Version: 4.0.10.16 - WildTangent) Hidden WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Word Proser 1.10.0.1 (HKLM-x32\...\WordProser_1.10.0.1) (Version: 1.10.0.1 - Word Proser) <==== ATTENTION Yahoo! Search (HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\...\Yahoo! Search) (Version: - Pay-By-Ads) <==== ATTENTION Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 13-02-2015 13:04:14 Software Removal Tool ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {004A9BD8-EDC7-4DE8-A894-8EE41E1131B5} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] () Task: {181DDD56-847B-40F7-B9DE-06B2287A1671} - System32\Tasks\e-pity2012_styczen => C:\Program Files (x86)\e-file\e-pity2012\signxml.exe [2013-03-09] (e-file sp. z o.o.) Task: {1CB0ECE1-72EE-4144-B8F4-BE8411667B39} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-4 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-4.exe <==== ATTENTION Task: {269D5B6E-4333-4DA5-89D1-18BB76FA8345} - System32\Tasks\$crrUnisntlDsply$ => C:\Users\Teresa\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\dsrlte.exe Task: {2FB5E814-CEBB-4619-B667-23628D8C438B} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-6 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-6.exe <==== ATTENTION Task: {3F6AD1C1-1348-4610-B5D1-946A2CD8A539} - System32\Tasks\e-pity2012_kwiecien => C:\Program Files (x86)\e-file\e-pity2012\signxml.exe [2013-03-09] (e-file sp. z o.o.) Task: {400BFB4E-660E-4F32-8CA7-CEF261688561} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink) Task: {48F3E775-3D5D-476F-87FF-08A99593EBA5} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-5 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-5.exe <==== ATTENTION Task: {513DD11D-3254-4704-861C-F429BCBADC81} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd) Task: {56E72D86-428C-47F1-B6FC-0106B0B83087} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.) Task: {5E3C5EAE-131D-4FF9-A7A6-75C650C55AF2} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-11 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-11.exe <==== ATTENTION Task: {66FA40D8-46CA-4894-AD0A-03BDF40FA844} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] () Task: {6CEDD6E2-E7EA-4233-AFDA-FFA454E894D4} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.) Task: {6E7BCF66-1376-47BE-A598-7B8617A5C971} - System32\Tasks\QtraxPlayer1 => 2373174348.portal.qtrax.com Task: {89D0B184-A685-4BC2-91C6-BE4AB954A46A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated) Task: {8C6AE720-EBB1-459D-8168-AB2DA45FDAFC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {99776C1C-692F-41E9-8E1C-8EDDE7E95C17} - System32\Tasks\Yahoo! Search Updater => C:\Users\Teresa\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe <==== ATTENTION Task: {A3DDCBCD-5B48-40E2-B2D3-DC29D2D3003E} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-1 => C:\Program Files (x86)\V-9.1HD\V-9.1HD-codedownloader.exe <==== ATTENTION Task: {A735EB91-D786-46A3-AD54-275B0DEE03AD} - System32\Tasks\Yahoo! Search => C:\Users\Teresa\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe <==== ATTENTION Task: {A776AB8E-5E5B-4E08-BCE2-BEE79D7C5E28} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.) Task: {AADE4846-295C-46DE-A567-3123F9EC7F9B} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-5_user => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-5.exe <==== ATTENTION Task: {B18418D1-8DB5-47ED-99DF-5E0455E42785} - System32\Tasks\Super Optimizer Schedule => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe <==== ATTENTION Task: {C9E4DD4C-CA60-4591-9A03-7108A7391BE9} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-3 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-3.exe <==== ATTENTION Task: {CE746D22-B9D5-466C-BC92-8091D4A45FC6} - System32\Tasks\{D56D26EE-EDDE-4EB5-ACB8-B5ECB0A4CDFD} => pcalua.exe -a "C:\Users\Teresa\AppData\Roaming\0C1I1L1R1J0M1P0I1G\VuuPC Packages\uninstaller.exe" -c /Uninstall /NM="VuuPC Packages" /AN="0C1I1L1R1J0M1P0I1G" /MBN="VuuPC Packages" Task: {CFFACC29-B710-457B-93FD-6FDF77208B79} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-02-13] (Microsoft Corporation) Task: {D10A1E12-8123-404A-A94A-6A06EA301DFD} - System32\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-7 => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-7.exe <==== ATTENTION Task: {D7557B04-2BBB-4F07-BAF1-0A71DE208546} - System32\Tasks\$crrUnisntlDsply$ Updater => C:\Users\Teresa\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\dsrsetup.exe Task: {DECE6A14-491F-48E0-9811-19178C16899A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.) Task: {EF2152D4-5163-47F2-8E39-9D23CA74FB93} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-23] (Acer Incorporated) Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-1.job => C:\Program Files (x86)\V-9.1HD\V-9.1HD-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-11.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-11.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-3.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-3.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-4.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-4.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-5.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-5.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-5_user.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-5.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-6.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-6.exe÷/agentregpath='V-9.1HD-nv' /appid=61776 /srcid='001257' /subid='0' /zdata='0' /bic=E6C847BFD79E4DB3AC6D92818F946D90IE /verifier=ef93e2ff738c98214735b53c23a51401 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1410026033 /statsdomain=http://stats.loadgenclientservice.com /errorsdomain=http://errors.loadgenclientservice.com /codedownloaddomain=http://js.loadgenclientservice.com /defbro=ch /DllName32ToInjectToChrome='b26e05ab-9f7f-47e6-b72f-75296602bf69.dll' /DllName64ToInjectToChrome='b0b90348-9adb-42ba-b2c4-75c785f0cda6.dll' /nova64bitexe='84c549b1-3b85-4bc5-9c93-240c48ad7371-64.exe <==== ATTENTION Task: C:\Windows\Tasks\84c549b1-3b85-4bc5-9c93-240c48ad7371-7.job => C:\Program Files (x86)\V-9.1HD\84c549b1-3b85-4bc5-9c93-240c48ad7371-7.exe·/updateapp /agentregpath='V-9.1HD-nv' /appid=61776 /srcid='001257' /subid='0' /zdata='0' /bic=E6C847BFD79E4DB3AC6D92818F946D90IE /verifier=ef93e2ff738c98214735b53c23a51401 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1410026033 /statsdomain=http://stats.loadgenclientservice.com /errorsdomain=http://errors.loadgenclientservice.com /codedownloaddomain=http://js.loadgenclientservice.com /defbro=ch /DllName32ToInjectToChrome='b26e05ab-9f7f-47e6-b72f-75296602bf69.dll' /DllName64ToInjectToChrome='b0b90348-9adb-42ba-b2c4-75c785f0cda6.dll' /nova64bitexe='84c549b1-3b85-4bc5-9c93-240c48ad7371-64.exe <==== ATTENTION Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2013-06-30 13:10 - 2013-06-30 13:10 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll 2012-09-01 19:42 - 2012-08-28 01:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll 2012-08-23 07:26 - 2012-08-23 07:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2012-08-23 07:25 - 2012-08-23 07:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2012-08-23 07:26 - 2012-08-23 07:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll 2012-08-23 07:25 - 2012-08-23 07:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll 2012-08-23 07:25 - 2012-08-23 07:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2012-08-23 07:25 - 2012-08-23 07:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll 2012-08-23 07:26 - 2012-08-23 07:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll 2012-09-18 08:02 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-02-13 20:37 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll 2015-02-13 20:37 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll 2015-02-13 20:37 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1347931101-2817040922-1319910007-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg DNS Servers: 192.168.0.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-1347931101-2817040922-1319910007-500 - Administrator - Disabled) Gość (S-1-5-21-1347931101-2817040922-1319910007-501 - Limited - Disabled) Teresa (S-1-5-21-1347931101-2817040922-1319910007-1002 - Administrator - Enabled) => C:\Users\Teresa UpdatusUser (S-1-5-21-1347931101-2817040922-1319910007-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/14/2015 08:59:05 AM) (Source: ETDService) (EventID: 0) (User: ) Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0 Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "asmv2:clrClassInvocation1". Błąd w pliku manifestu lub w pliku zasad "asmv2:clrClassInvocation2" w wierszu asmv2:clrClassInvocation3. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. System errors: ============= Error: (02/14/2015 08:52:34 AM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: Usługa Windows Update nie została poprawnie zamknięta po odebraniu kodu sterującego przed zamknięciem. Error: (02/13/2015 05:44:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Word Proser 1.10.0.1 Client Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/13/2015 05:44:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Util CommonShare niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/13/2015 05:43:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Update CommonShare niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/13/2015 05:43:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa MaintainerSvc2.65.3980626 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/13/2015 05:43:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa SuperOptimizer Stats niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/13/2015 05:35:48 PM) (Source: DCOM) (EventID: 10016) (User: rodzice) Description: domyślne ustawienia komputeraLokalnyAktywacja{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}rodziceTeresaS-1-5-21-1347931101-2817040922-1319910007-1002LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (02/13/2015 05:34:08 PM) (Source: DCOM) (EventID: 10016) (User: rodzice) Description: domyślne ustawienia komputeraLokalnyAktywacja{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}rodziceTeresaS-1-5-21-1347931101-2817040922-1319910007-1002LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (02/13/2015 05:32:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows. Error: (02/13/2015 05:30:30 PM) (Source: DCOM) (EventID: 10016) (User: rodzice) Description: domyślne ustawienia komputeraLokalnyAktywacja{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}rodziceTeresaS-1-5-21-1347931101-2817040922-1319910007-1002LocalHost (użycie LRPC)NiedostępnyNiedostępny Microsoft Office Sessions: ========================= Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4 Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4 Error: (02/14/2015 09:17:02 AM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4 Error: (02/14/2015 08:59:05 AM) (Source: ETDService) (EventID: 0) (User: ) Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0 Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4 Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4 Error: (02/13/2015 07:57:40 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4 Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4 Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4 Error: (02/13/2015 07:50:12 PM) (Source: SideBySide) (EventID: 72) (User: ) Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4 ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz Percentage of memory in use: 31% Total physical RAM: 5959.27 MB Available physical RAM: 4077.95 MB Total Pagefile: 6919.27 MB Available Pagefile: 4519.03 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:448.75 GB) (Free:362.25 GB) NTFS Drive e: () (Removable) (Total:1.89 GB) (Free:1.66 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: E589E8CE) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 1.9 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End Of Log ============================