Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-06-2015 01 Ran by Szyszka at 2015-06-30 12:11:01 Running from D:\-=PULPIT=- Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2440634791-3158896077-4223476700-500 - Administrator - Disabled) Gość (S-1-5-21-2440634791-3158896077-4223476700-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2440634791-3158896077-4223476700-1002 - Limited - Enabled) Szyszka (S-1-5-21-2440634791-3158896077-4223476700-1001 - Administrator - Enabled) => C:\Users\Szyszka ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) (Trial)SEO Content Machine version 4.0.8.4 (HKLM\...\{F92407BE-01D6-429B-B257-B14D986903A2}_is1) (Version: 4.0.8.4 - Satin Blue) µTorrent (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.) 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) ABBYY FineReader 9.0 Professional Edition (HKLM\...\{F9000000-0001-0000-0000-074957833700}) (Version: 9.00.162.55015 - ABBYY) Adobe AIR (HKLM\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated) Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated) Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.190 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden Aktualizacje NVIDIA 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden ALLPlayer V3.X (HKLM\...\ALLPlayer V3.5.6.3_is1) (Version: - ALLPlayer Sp. z o.o.) Article Marketing Robot (HKLM\...\{31645123-137A-4A4F-A0E5-65594DEAA469}) (Version: 2.0.031 - Article Marketing Robot) Asystent rejestracji usługi Windows Live (HKLM\...\{51958BA7-21E4-4A8B-9098-CD8375BD17B2}) (Version: 5.000.818.5 - Microsoft Corporation) BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung) Battle.net (HKLM\...\Battle.net) (Version: - Blizzard Entertainment) Bezpieczeństwo rodzinne usługi Windows Live (Version: 14.0.8093.805 - Microsoft Corporation) Hidden Bitvise SSH Client 6.04 (remove only) (HKLM\...\BvSshClient) (Version: - ) blueconnect (HKLM\...\blueconnect) (Version: 11.302.09.06.49 - Huawei Technologies Co.,Ltd) Build Tools - x86 (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (Version: 12.0.21005 - Microsoft Corporation) Hidden CamStudio version 2.7 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source) Camtasia Studio 8 (HKLM\...\{BFA04EE0-8240-4667-8D53-45496A901C33}) (Version: 8.1.2.1327 - TechSmith Corporation) Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - Canon Inc.) Captcha Sniper (HKLM\...\Captcha Sniper_is1) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform) cFosSpeed v9.60 (HKLM\...\cFosSpeed) (Version: 9.60 - cFos Software GmbH, Bonn) ChargeableUSB (HKLM\...\{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}) (Version: 1.0.0.0 - SAMSUNG) Cisco Packet Tracer 6.0.1 (HKLM\...\Cisco Packet Tracer 6.0.1_is1) (Version: - Cisco Systems, Inc.) CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version: - CyberGhost S.R.L.) CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.) CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.) CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.) CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.) CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.) CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.) CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3625 - CyberLink Corp.) Debugging Tools for Windows (x86) (HKLM\...\{300A2961-B2B5-4889-9CB9-5C2A570D08AD}) (Version: 6.11.1.404 - Microsoft Corporation) Dev-C++ (HKLM\...\Dev-C++) (Version: 5.6.3 - Bloodshed Software) Diablo III (HKLM\...\Diablo III) (Version: - Blizzard Entertainment) Dota 2 (HKLM\...\Steam App 570) (Version: - ) Dropbox (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.) EA SPORTS FIFA World (HKLM\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 8.2.0.54472 - Electronic Arts, Inc.) Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.) Easy Macro Recorder 3.9 (HKLM\...\Easy Macro Recorder_is1) (Version: - GoldSolution Software, Inc.) Easy Network Manager (HKLM\...\{34B76DCB-BF7C-440F-B058-C84172C1E338}) (Version: 4.2.8 - Samsung) EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung) EMET 4.0 (HKLM\...\{1F7019BB-1C9A-4E54-9B59-1744629E63B1}) (Version: 4.0 - Microsoft) Entity Framework Tools for Visual Studio 2013 (HKLM\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation) ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - ) FileZilla Client 3.7.4.1 (HKLM\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse) Galeria fotografii usługi Windows Live (Version: 14.0.8081.709 - Microsoft Corporation) Hidden GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden GG (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\GG) (Version: 11 - GG Network S.A.) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Drive (HKLM\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.) Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden Grand Theft Auto IV - Episodes From Liberty City (HKLM\...\{8ED35B48-AFBD-4F32-8271-2257AD8B907E}_is1) (Version: - ) GSA Captcha Breaker v2.54 (HKLM\...\GSA Captcha Breaker_is1) (Version: 2.54 - GSA Software) GSA Email Spider v7.09 (HKLM\...\GSA Email Spider_is1) (Version: 7.09 - GSA Software) GSA Search Engine Ranker v8.39 (HKLM\...\GSA Search Engine Ranker_is1) (Version: 8.39 - GSA Software) HD Tune Pro 5.50 (HKLM\...\HD Tune Pro_is1) (Version: - EFD Software) HitLeap Viewer 2.8 (HKLM\...\{31B12C11-AE4E-479F-8D6D-242DC265368D}) (Version: 2.8 - HitLeap Ltd.) HMA! Pro VPN 2.8.11.2 (HKLM\...\HMA! Pro VPN) (Version: 2.8.11.2 - Privax Ltd) Infestation: Survivor Stories (HKLM\...\Steam App 226700) (Version: - Hammerpoint Interactive) Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.3.1001 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1003 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.3 - Intel) iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle) Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden Light Image Resizer 4.6.1.0 (HKLM\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.6.1.0 - ObviousIdea) Lightshot-5.2.1.1 (HKLM\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains) Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM\...\{A1C962E2-2426-49C6-A38B-9A07E40D607C}) (Version: 3.2.217.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Live Add-in 1.3 (HKLM\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation) Microsoft Office PowerPoint Viewer 2007 (Polish) (HKLM\...\{95120000-00AF-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{83298573-A6B6-42AB-A234-FE91CA2859C0}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{8F72E2D4-1E48-4534-8DB8-1E8E012899C6}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{5EF1EBC5-4A40-4D1C-B02E-0C54BC93FD06}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{FE939060-416C-4ECD-890E-13776E2707C4}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{544ACD54-9FAA-4A60-A1E7-B2EC3AA75D24}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{E7654811-38F9-4225-9688-827FDA716582}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 ENU (HKLM\...\{773AC1E4-5F27-4DF6-A932-7FDDE35C069D}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - ENU (HKLM\...\Microsoft Visual Basic 2010 Express - ENU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50325 - Microsoft Corporation) Microsoft Visual Studio Express 2013 for Windows Desktop - ENU (HKLM\...\{bec3d87e-1d6d-4b15-8383-29068c86b888}) (Version: 12.0.21005.13 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{DCFD26A8-60A5-4C69-A52D-264D0386FDB3}) (Version: 1.20.146.0 - Microsoft) Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.21.00.03 - Huawei Technologies Co.,Ltd) Money Robot Submitter version 5.30.3 (HKLM\...\{D8331B58-377C-4350-B879-21133B050E19}_is1) (Version: 5.30.3 - Money Robot srl LTD) Mozilla Firefox 36.0.1 (x86 pl) (HKLM\...\Mozilla Firefox 36.0.1 (x86 pl)) (Version: 36.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Narzędzie do przekazywania usługi Windows Live (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Nero 9 Essentials (HKLM\...\{78ef3c52-f7e7-40bd-aae6-224374fcc218}) (Version: - Nero AG) Nero 9 Lite (HKLM\...\{ce1523d1-0c86-4396-a31e-1dc5b546ae87}) (Version: - Nero AG) Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.2.11000.12.100 - Nero AG) Nero Burning ROM 10 (HKLM\...\{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}) (Version: 10.5.10300 - Nero AG) Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10300.0.102 - Nero AG) Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG) Notepad++ (HKLM\...\Notepad++) (Version: 6.6.3 - Notepad++ Team) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) Obsługa programów Apple (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) OpenOffice 4.1.1 (HKLM\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) OpenVPN Client (HKLM\...\{072A5217-8165-4AB7-8366-36CB3245DB60}) (Version: 1.5.6 - OpenVPN Technologies) Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Opera beta 31.0.1889.16 (HKLM\...\Opera 31.0.1889.16) (Version: 31.0.1889.16 - Opera Software) Opera Stable 30.0.1835.88 (HKLM\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software) Origin (HKLM\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Oxy updater (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\{790875CA-153F-49F0-AAC8-C403494239A1}) (Version: - AGILITY) Pakiet zgodności dla systemu Office 2007 (HKLM\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Panel sterowania NVIDIA 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden Parallel Port Joystick (HKLM\...\Parallel Port Joystick) (Version: - ) PIT Projekt 2013 (HKLM\...\{9DC72E7A-ED60-49C9-845F-3022B7A5BB8C}}_is1) (Version: 2.0.0 - GP SOFT) PITy 2011 dla Windows kompilacja:1.3.3.2 (HKLM\...\PITy 2011_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) PITy 2012 dla Windows kompilacja:1.4.1.12 (HKLM\...\PITy 2012_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) PITy2014 IPS 1.6 kompilacja:1.6.2.36 (HKLM\...\PITy2014IPS_is1) (Version: - IPS Przedsiębiorstwo Informatyczne) Poczta usługi Windows Live (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Podstawowe programy Windows Live (Version: 14.0.8089.726 - Microsoft Corporation) Hidden PokerStars.eu (HKLM\...\PokerStars.eu) (Version: - PokerStars.eu) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - PLK) (Version: 10.0.50325 - Microsoft Corporation) Prerequisites for SSDT (HKLM\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) Pro Evolution Soccer 2010 (HKLM\...\{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}) (Version: 1.00.0000 - KONAMI) Pro Evolution Soccer 2011 (HKLM\...\{1148E85C-E1AF-48E0-A29C-68DACE07E054}) (Version: 1.00.0000 - KONAMI) Pro Evolution Soccer 2012 DEMO (HKLM\...\{6844E55F-37A1-42BC-B316-326B48C49ADC}) (Version: 1.00.0000 - KONAMI) Pro Evolution Soccer 2013 (HKLM\...\{C2523AE6-F335-4D0B-BC15-1C07E4ACE629}) (Version: 1.00.0000 - KONAMI) Pro Evolution Soccer 2014 (HKLM\...\{5EFD3544-2371-4900-8ACA-F157BA80FB0C}) (Version: 1.00.0000 - KONAMI) Pro Evolution Soccer 2015 (HKLM\...\UHJvRXZvbHV0aW9uU29jY2VyMjAxNQ==_is1) (Version: 1 - ) Rankaware version 1.4 (HKLM\...\{A2C8C41A-94C0-43C6-A8B2-5E3D9D7FA5E5}_is1) (Version: 1.4 - SharpNight Co,Ltd.) RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6003 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Software (HKLM\...\{F2BC3383-F000-410C-A038-3846ADBE8D90}) (Version: 1.01.0088 - REALTEK Semiconductor Corp.) RealUpgrade 1.0 (Version: 1.0.0 - RealNetworks, Inc.) Hidden Remote Desktop Connection Manager (HKLM\...\{173A2B7F-535A-4403-A454-B41531EF0D7F}) (Version: 2.2.0423 - Microsoft Corporation) Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung) Samsung R-Series (HKLM\...\{3EED7541-55F8-4DC6-B9CD-28762D71310E}) (Version: 1.0 - Samsung) Samsung Support Center (HKLM\...\{0A353130-D22C-41DD-8C67-1B02A05F2CE0}) (Version: 1.1.0 - Samsung) Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.) Sandboxie 4.04 (32-bit) (HKLM\...\Sandboxie) (Version: 4.04 - Sandboxie Holdings, LLC) Service Pack 3 for SQL Server 2008 (KB2546951) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation) Share YouTube Videos version 1 (HKLM\...\{55DAC5D1-B178-42B2-86A3-94A3E0B4F3DD}_is1) (Version: 1 - ) SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden Skype™ 6.20 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) Smart Hide IP (HKLM\...\SmartHideIP) (Version: 2.8.4.6 - ) Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.12.201310301334 - Sony Ericsson Communications AB) Sony PC Companion 2.10.181 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.181 - Sony) SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - ) Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) Team Explorer for Microsoft Visual Studio 2013 (Version: 12.0.21005 - Microsoft Corporation) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer) Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH) U2bviews Software (HKLM\...\{FEAF4197-BC22-467A-994A-B72E74DF57E2}) (Version: 2.0.0 - U2bviews) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update or Uninstall SENukeX (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\a10c648895c21ba6) (Version: 3.0.0.47 - SENukeX) VideoPusher version 2.0 (HKLM\...\{D785444A-5271-4714-80D4-EE5ADB6396EB}_is1) (Version: 2.0 - UltraMixer Digital Audio Solutions.) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation) VmciSockets (Version: 9.1.54.1 - VMware, Inc.) Hidden VMware Workstation (HKLM\...\VMware_Workstation) (Version: 8.0.4.30409 - VMware, Inc) VMware Workstation (Version: 8.0.4.30409 - VMware, Inc.) Hidden VPNetwork LLC - TorGuard - Online Privacy Protection Services (HKLM\...\VPNetwork LLC TorGuard) (Version: "0.3.11" - "VPNetwork LLC") VueScan x32 (HKLM\...\VueScan x32) (Version: - ) WhiteHatBox wersja 2.0 (HKLM\...\{A964F9F1-B238-4893-915A-E2E3AF4EA3A1}_is1) (Version: 2.0 - WhiteHatBox.com) Wicked Article Creator 3.1.0.0 (HKLM\...\Wicked Article Creator 3.1.0.0) (Version: 3.1.0.0 - WAC Systems) WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.800 - Broadcom Corporation) Winamp (HKLM\...\Winamp) (Version: 5.541 - Nullsoft, Inc) Winamp Remote (HKLM\...\Orb) (Version: 2.2008.0508.1530 - Orb Networks) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom) Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (HKLM\...\755087041320E005CB1E8A67C5C55A260EB81B90) (Version: 09/11/2009 6.2.0.9407 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows Live Sync (HKLM\...\{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}) (Version: 14.0.8089.726 - Microsoft Corporation) Wings 3D 1.5.3 (HKLM\...\Wings 3D 1.5.3) (Version: - ) WinHTTrack Website Copier 3.48-19 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.19 - HTTrack) WinRAR 5.01 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) XBMC (HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\...\XBMC) (Version: - Team XBMC) YLH.bot 1.30 (HKLM\...\{8B8BFF36-8E3A-4D2A-B16E-AA20AAFE2BA3}_is1) (Version: - ) Youtube Downloader HD v. 2.9.9.14 (HKLM\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com) Zero Assumption Recovery Version 9 (HKLM\...\Zero Assumption Recovery_is1) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{70ADE886-186E-161D-DB01-61D3AEB0891E}\InprocServer32 -> C:\windows\system32\ole32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2440634791-3158896077-4223476700-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Szyszka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ==================== Restore Points ========================= 30-06-2015 11:54:42 Restore Point Created by FRST ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2014-01-26 13:09 - 2014-09-05 09:45 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0071360A-CABB-4B66-B14B-688A558AF877} - System32\Tasks\{942A5027-789C-4566-897A-0871AB00989D} => C:\Program Files\Skype\\Phone\Skype.exe [2014-08-27] (Skype Technologies S.A.) Task: {0C0FD81C-665C-45C5-B2A9-2FC0655378B4} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC) Task: {17B8F7A5-FC38-4E2D-BA66-087245D974A4} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] () Task: {1F4DC422-1776-4981-B651-7B647C93CD18} - System32\Tasks\{5FDA8420-119C-4AE1-A57F-1A42D9489478} => C:\Program Files\Opera\opera.exe [2014-04-23] (Opera Software) Task: {25C6D9E5-545C-4183-8150-EAF0A7BE92B7} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.) Task: {26E38814-4334-4CB7-9C85-E1FEA70DB394} - System32\Tasks\{CDEE0ACC-97C2-48C3-B89E-FF2407EAD0C7} => C:\Program Files\Skype\\Phone\Skype.exe [2014-08-27] (Skype Technologies S.A.) Task: {33BE0B00-7C86-433D-8BED-E8D98C529B8E} - System32\Tasks\{A889F8A9-A9F8-4D1B-AD7C-095D27128494} => C:\Program Files\Skype\Phone\Skype.exe [2014-08-27] (Skype Technologies S.A.) Task: {36B373A5-10C0-458A-9F00-56331DE10F8D} - System32\Tasks\{34AD9555-E49B-4CF3-8A4D-5488DAF3620C} => C:\Program Files\PITy\PITy2013NG\PITy2013NG.exe [2014-02-07] (IPS Przedsiębiorstwo Informatyczne) Task: {39F77329-09A4-4D7F-9CFD-AA661C8C8763} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-11-04] (Samsung Electronics Co., Ltd.) Task: {3DFF626D-626A-496E-A23A-AE530E1AA760} - System32\Tasks\{3868E8F5-0271-493B-B61E-882F0A6F5B1F} => C:\Program Files\PITy\PITy2013NG\PITy2013NG.exe [2014-02-07] (IPS Przedsiębiorstwo Informatyczne) Task: {43E2036D-1640-4034-8438-14F178888F1D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {4EF76700-6507-436E-96D1-94B384CEC9DA} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-12-14] (SAMSUNG Electronics) Task: {5693A43D-AB15-4CF7-86FC-08DD0E145422} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2440634791-3158896077-4223476700-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2010-02-24] (RealNetworks, Inc.) Task: {62F5B48F-1840-4D4B-B830-CE05348B0798} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.) Task: {68301545-F831-45CF-A642-585DED7E09E6} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {70C6BEFE-0368-4FF2-A8C4-CAC5AB7DF206} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd) Task: {8A3654CD-7B9D-4444-915F-3C5E69EA7288} - System32\Tasks\{6CBE92A6-2ADB-448A-902B-F05B8C0AB5E2} => C:\Program Files\PITy\PITy2013NG\PITy2013NG.exe [2014-02-07] (IPS Przedsiębiorstwo Informatyczne) Task: {A649AA3A-39C0-4E6C-8291-73246EE41C51} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-24] (Adobe Systems Incorporated) Task: {B953518F-10DA-47FB-B109-2F97E3E9AD04} - System32\Tasks\{8EE54F02-D70F-4325-806F-CCB583A52776} => C:\Program Files\Skype\\Phone\Skype.exe [2014-08-27] (Skype Technologies S.A.) Task: {C0819C43-A351-4A6C-8182-DBD48C51E39A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {C2B734DA-23C7-430D-B1E8-D22163A0DAD4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2440634791-3158896077-4223476700-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2010-02-24] (RealNetworks, Inc.) Task: {CC861390-A167-4097-A139-914A90B7F92C} - System32\Tasks\Opera scheduled Autoupdate 1412360879 => C:\Program Files\Opera\launcher.exe [2015-06-19] (Opera Software) Task: {D04034AD-DD9A-4428-A120-813ACAA5C453} - System32\Tasks\Opera scheduled Autoupdate 1380744934 => C:\Program Files\Opera Next\launcher.exe [2015-06-15] (Opera Software) Task: {E3B34E52-E344-49DC-8068-889EF02EA952} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.) Task: {E4F793C5-D8C0-4329-A107-CB8AC2256FC2} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2440634791-3158896077-4223476700-1001 Task: {EA268F22-9533-4233-A55A-0E234CA6C25C} - System32\Tasks\{BA850565-334A-40ED-B115-69CC426AE8EE} => C:\Program Files\PITy\PITy2013NG\PITy2013NG.exe [2014-02-07] (IPS Przedsiębiorstwo Informatyczne) Task: {F50AB5D7-C101-4074-AF34-6E4B46293A1F} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.) Task: {F773DA66-954C-4383-AC1F-566381CD57FE} - System32\Tasks\{6948C629-6FD3-4743-83EF-D1746A69E22B} => C:\Program Files\PITy\PITy2013NG\PITy2013NG.exe [2014-02-07] (IPS Przedsiębiorstwo Informatyczne) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2013-06-14 17:19 - 2013-06-14 17:19 - 00062112 _____ () C:\Program Files\EMET 4.0\EMET_CE.DLL 2014-04-05 09:15 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2009-09-01 05:31 - 2009-09-01 05:31 - 00022723 _____ () C:\windows\System32\ssp2ml3.dll 2014-05-12 11:49 - 2014-05-12 11:49 - 00260608 _____ () C:\Program Files\Notepad++\NppShell_06.dll 2014-04-16 22:51 - 2013-07-23 05:47 - 00239696 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe 2010-08-12 18:45 - 2010-08-12 18:45 - 00024064 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\capiws.exe 2009-07-05 07:35 - 2009-07-05 07:35 - 00028160 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00110592 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll 2009-07-05 07:35 - 2009-07-05 07:35 - 00041472 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00096256 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd 2009-10-26 10:27 - 2009-10-26 10:27 - 00153088 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd 2009-10-26 10:25 - 2009-10-26 10:25 - 00040448 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd 2009-10-26 10:25 - 2009-10-26 10:25 - 00645120 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd 2010-03-16 14:05 - 2010-03-16 14:05 - 00020480 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd 2009-10-26 10:27 - 2009-10-26 10:27 - 00311808 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd 2009-10-26 10:25 - 2009-10-26 10:25 - 00073728 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd 2009-10-26 10:27 - 2009-10-26 10:27 - 00011776 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\select.pyd 2010-05-05 14:44 - 2010-05-05 14:44 - 00010752 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd 2010-05-05 14:44 - 2010-05-05 14:44 - 00051200 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd 2010-05-05 14:44 - 2010-05-05 14:44 - 00039936 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00036352 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd 2010-05-05 14:43 - 2010-05-05 14:43 - 00008192 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00110592 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00017920 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd 2009-07-06 05:16 - 2009-07-06 05:16 - 00111104 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd 2009-07-05 07:35 - 2009-07-05 07:35 - 00024064 _____ () C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd 2014-03-25 21:11 - 2014-03-25 21:11 - 00076888 _____ () C:\windows\system32\PnkBstrA.exe 2010-02-15 08:36 - 2009-03-05 11:54 - 00311296 _____ () C:\windows\SYSTEM32\Rezip.exe 2010-02-15 08:42 - 2009-07-07 20:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe 2012-06-09 01:21 - 2012-06-09 01:21 - 01222656 _____ () C:\Program Files\VMware\VMware Workstation\libxml2.dll 2012-06-09 01:39 - 2012-06-09 01:39 - 11839488 _____ () C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2440634791-3158896077-4223476700-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Szyszka\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^Szyszka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DogeCoin.lnk => C:\windows\pss\DogeCoin.lnk.Startup MSCONFIG\startupfolder: C:^Users^Szyszka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: cFosSpeed => C:\Program Files\cFosSpeed\cFosSpeed.exe MSCONFIG\startupreg: DataCardMonitor => C:\Program Files\blueconnect\DataCardMonitor.exe MSCONFIG\startupreg: EADM => "C:\Program Files\Origin\Origin.exe" -AutoStart MSCONFIG\startupreg: EMET Agent => "C:\Program Files\EMET 4.0\EMET_agent.exe" MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart MSCONFIG\startupreg: HW_OPENEYE_OUC_blueconnect => "C:\Program Files\blueconnect\UpdateDog\ouc.exe" MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey MSCONFIG\startupreg: NvBackend => "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe" MSCONFIG\startupreg: Nvtmru => "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" MSCONFIG\startupreg: SEnukeX => "C:\Users\Szyszka\AppData\Local\SENukeX\senuke.exe" MSCONFIG\startupreg: ShadowPlay => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: uTorrent => "C:\Users\Szyszka\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED MSCONFIG\startupreg: vmware-tray => "C:\Program Files\VMware\VMware Workstation\vmware-tray.exe" MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe" MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{0C9024AF-3556-43FA-A690-4E8C964C0621}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{3F953FB1-61FD-44B5-8043-0B6FD71E88A3}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{CCE0C2C5-7E19-40BE-84B5-2DCD94316E47}] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{570DA856-5D24-4DD7-A017-2C98DC13ECAC}] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{18E9EF89-55D0-411E-A964-786CFDEE2E41}] => (Allow) LPort=1487 FirewallRules: [TCP Query User{49614DEE-2DB2-418A-879C-05B569298F41}C:\users\szyszka\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\szyszka\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{5C7A29E9-931D-452E-9BC5-630B138B0CCB}C:\users\szyszka\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\szyszka\appdata\roaming\utorrent\utorrent.exe FirewallRules: [{FAFF6801-4D5B-4CDA-B8E7-BFCEAC37455B}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{B4268DB8-46D7-4E34-AEEB-EB70E4567766}] => (Allow) C:\Program Files\Steam\Steam.exe StandardProfile\AuthorizedApplications: [D:\Connectivity\ConnectivityManager.exe] => enabled:CSS ==================== Faulty Device Manager Devices ============= Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Zewnętrzne urządzenie Bluetooth Description: Zewnętrzne urządzenie Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (06/30/2015 11:58:55 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (06/30/2015 11:58:55 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (06/30/2015 11:54:41 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu. . To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {35814a88-53b1-402b-bb8d-824ce838798c} Error: (06/30/2015 11:21:22 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (06/30/2015 11:21:22 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (06/30/2015 01:10:24 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418231 Error: (06/29/2015 09:20:32 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (06/29/2015 09:20:32 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (06/29/2015 09:54:45 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418231 Error: (06/29/2015 09:45:54 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] System errors: ============= Error: (06/30/2015 11:54:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa CyberGhost VPN 5 Client Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa ABBYY FineReader 9.0 PE Licensing Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa SQL Server (SQLEXPRESS) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Mobile Broadband HL Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa OpenVPN Access Client niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Rezip niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa cFosSpeed System Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa VMware Authorization Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa SQL Server VSS Writer niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (06/30/2015 11:54:39 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa VMware Workstation Server niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Microsoft Office: ========================= Error: (05/25/2015 10:14:47 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 21261 seconds with 120 seconds of active time. This session ended with a crash. Error: (05/23/2015 07:53:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time. This session ended with a crash. Error: (04/21/2015 10:25:48 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 8164 seconds with 60 seconds of active time. This session ended with a crash. Error: (04/09/2015 09:43:17 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 39 seconds with 0 seconds of active time. This session ended with a crash. Error: (04/08/2015 11:35:22 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 8728 seconds with 240 seconds of active time. This session ended with a crash. Error: (03/31/2015 05:44:27 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1889 seconds with 0 seconds of active time. This session ended with a crash. Error: (02/23/2015 07:35:59 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1457 seconds with 0 seconds of active time. This session ended with a crash. Error: (01/16/2015 00:39:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time. This session ended with a crash. Error: (01/16/2015 00:39:09 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time. This session ended with a crash. Error: (01/16/2015 00:39:02 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz Percentage of memory in use: 40% Total physical RAM: 3565.63 MB Available physical RAM: 2104.45 MB Total Pagefile: 7129.54 MB Available Pagefile: 5510.77 MB Total Virtual: 2047.88 MB Available Virtual: 1922.22 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:103.65 GB) (Free:5.36 GB) NTFS Drive d: () (Fixed) (Total:347.01 GB) (Free:220.93 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 955B2D9B) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=103.7 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=347 GB) - (Type=07 NTFS) ==================== End of log ============================