Additional scan result of Farbar Recovery Scan Tool (x64) Version:02-08-2015 Ran by Kowalscy (2015-08-02 12:52:02) Running from C:\Users\Kowalscy\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1309102623-1561535839-2573300424-500 - Administrator - Disabled) Gość (S-1-5-21-1309102623-1561535839-2573300424-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1309102623-1561535839-2573300424-1002 - Limited - Enabled) Karol (S-1-5-21-1309102623-1561535839-2573300424-1005 - Limited - Enabled) Kowalscy (S-1-5-21-1309102623-1561535839-2573300424-1000 - Administrator - Enabled) => C:\Users\Kowalscy ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.85 - NTI Corporation) Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1820 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.0.1820 - CyberLink Corp.) Hidden Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3002 - Acer Incorporated) Acer GameZone Console (HKLM-x32\...\{C97623E2-0614-4845-B199-8E8BEC8E131C}_is1) (Version: 6.1.0.40497 - Oberon Media, Inc.) Acer PowerSmart Manager (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.01.3000 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3004 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0222.2011 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3005 - Acer Incorporated) Acer USB Charge Manager (HKLM-x32\...\{F53A49E6-9FB1-4A5A-B1D9-82BA116196B7}) (Version: 1.00.3000 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3004 - Acer Incorporated) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated) Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated) Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung) Argazki Galeria (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.) Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.4.2.0 - Auslogics Labs Pty Ltd) Backup Manager V3 (x32 Version: 3.0.0.85 - NTI Corporation) Hidden Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.61 - Atheros Communications) Brother MFL-Pro Suite DCP-385C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 1.0.1.0 - Brother Industries, Ltd.) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform) Centrum obsługi urządzeń z systemem Windows Mobile (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation) clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.1229.00 - CyberLink Corp.) clear.fi (x32 Version: 1.0.1229.00 - CyberLink Corp.) Hidden clear.fi (x32 Version: 9.0.7209 - CyberLink Corp.) Hidden clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3008 - Acer Incorporated) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.1.55 - Conexant) Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden EASEUS Partition Master 9.1.0 Home Edition (HKLM-x32\...\EASEUS Partition Master Home Edition_is1) (Version: - EASEUS) ETDWare PS/2-X64 8.0.6.0_WHQL (HKLM\...\Elantech) (Version: 8.0.6.0 - ELAN Microelectronic Corp.) Europa Universalis III (HKLM-x32\...\{59C80C5E-8C92-40FF-B910-2BB5C7281F61}) (Version: - ) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Fotogaléria (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalleri (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalleriet (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotoğraf Galerisi (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria de Fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria fotogràfica (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerie foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerija fotografija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden GG (HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\GG) (Version: 12 - GG Network S.A.) Google Drive (HKLM-x32\...\{35574F09-89F9-4B16-B69B-64F3E25901B8}) (Version: 1.21.9226.6034 - Google, Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Photos Backup (HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\Google Photos Backup) (Version: 1.1.0.239 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) Heroes of Might and Magic® III The Shadow of Death(TM) (HKLM-x32\...\Heroes III The Shadow of Death) (Version: - ) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3006 - Acer Incorporated) inSSIDer Office (HKLM-x32\...\{8C127DE3-EC36-4BA3-A6EE-6DC4A9B6C526}) (Version: 3.1.1.6 - MetaGeek, LLC) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2287 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle) Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.4 - Acer Inc.) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.188 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.188 - LogMeIn, Inc.) Hidden Malwarebytes Anti-Malware wersja 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) MediaEspresso (x32 Version: 1.0.1210_33255 - CyberLink Corp.) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SkyDrive (HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\SkyDriveSetup.exe) (Version: 17.0.2011.0627 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Moduł Szybka instalacja pakietu Microsoft Office 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Moduł Szybka instalacja pakietu Microsoft Office 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Multibooki NE Demo (HKLM-x32\...\{EEE57977-5EE4-46AE-8639-52DFAFF6FEAB}) (Version: 1.00.0000 - YDP SA) MyFreeCodec (HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\MyFreeCodec) (Version: - ) MyWinLocker (Version: 4.0.14.11 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.11 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.11 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.11 - Egis Technology Inc.) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8939 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.8939 - NTI Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA Sterownik graficzny 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliński) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) Panel sterowania NVIDIA 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Poczta usługi Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Pošta Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15024.8 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.15024.8 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Shredder (Version: 2.0.8.7 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.7 - Egis Technology Inc.) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45471 - TeamViewer) Valokuvavalikoima (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3102 - Acer Incorporated) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) WinRAR 5.20 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) Wise Registry Cleaner 7.92 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.92 - WiseCleaner.com, Inc.) Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 16.4.3505.0912 - Корпорация Майкрософт) Hidden Фотоальбом (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Фотогалерия (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Фотографии (общедоступная версия) (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden גלריית התמונות (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden معرض الصور (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden 影像中心 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Kowalscy\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= 20-03-2015 21:00:55 Windows Update 24-03-2015 19:34:48 Windows Update 25-03-2015 15:03:50 Windows Update 28-03-2015 21:49:09 Windows Update 29-03-2015 19:36:21 Kopia zapasowa systemu Windows 05-04-2015 17:45:39 Windows Update 05-04-2015 18:02:50 Windows Update 05-04-2015 20:58:42 Kopia zapasowa systemu Windows 06-04-2015 18:06:55 avast! antivirus system restore point 06-04-2015 18:10:45 Instalacja pakietu sterownika urządzenia: Avast Usługa sieciowa 13-04-2015 22:47:07 Zaplanowany punkt kontrolny 14-04-2015 09:18:09 Windows Update 16-04-2015 16:13:27 Windows Update 19-04-2015 19:32:01 Kopia zapasowa systemu Windows 21-04-2015 11:51:32 Windows Update 24-04-2015 19:43:19 Windows Update 26-04-2015 18:36:46 avast! antivirus system restore point 26-04-2015 19:00:12 Kopia zapasowa systemu Windows 28-04-2015 15:47:52 Windows Update 01-05-2015 17:22:06 Windows Update 06-05-2015 10:48:57 Windows Update 14-05-2015 09:18:31 Windows Update 15-05-2015 09:01:59 Windows Update 17-05-2015 21:43:43 Kopia zapasowa systemu Windows 18-05-2015 16:09:21 Windows Update 22-05-2015 22:13:41 Windows Update 26-05-2015 20:46:21 Windows Update 01-06-2015 10:48:48 Windows Update 18-06-2015 18:53:56 Kopia zapasowa systemu Windows 18-06-2015 19:04:24 Windows Update 18-06-2015 19:22:27 Avira System Speedup 1.6.10 18-06-2015 20:10:17 Usunięte League of Legends 18-06-2015 20:13:31 Removed League of Legends 18-06-2015 20:17:03 Removed Avira Browser Safety 19-06-2015 08:37:03 Windows Update 19-06-2015 14:31:56 Windows Update 19-06-2015 18:54:08 Windows Update 21-06-2015 20:02:16 Kopia zapasowa systemu Windows 06-07-2015 03:00:18 Windows Update 12-07-2015 19:00:42 Kopia zapasowa systemu Windows 15-07-2015 10:24:29 Windows Update 19-07-2015 21:31:50 Kopia zapasowa systemu Windows 22-07-2015 13:41:39 Windows Update 26-07-2015 19:00:10 Kopia zapasowa systemu Windows 29-07-2015 09:27:12 Windows Update 29-07-2015 10:09:52 avast! antivirus system restore point 29-07-2015 10:41:42 Windows Update 29-07-2015 11:07:05 Windows Update 31-07-2015 00:01:56 Windows Update 31-07-2015 13:24:56 Usunięte Europa Universalis III 31-07-2015 13:35:08 Removed Centrum obsługi urządzeń z systemem Windows Mobile 01-08-2015 13:31:21 Windows Update 01-08-2015 13:32:24 Kopia zapasowa systemu Windows 01-08-2015 13:37:40 Windows Update 01-08-2015 16:20:14 Kopia zapasowa systemu Windows 01-08-2015 16:24:57 Kopia zapasowa systemu Windows 01-08-2015 16:55:43 Kopia zapasowa systemu Windows 02-08-2015 02:37:27 Kopia zapasowa systemu Windows 02-08-2015 02:39:51 Kopia zapasowa systemu Windows 02-08-2015 02:58:11 Kopia zapasowa systemu Windows 02-08-2015 03:30:13 Installed Microsoft Fix it 50123 ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1E5951B3-1E6F-488D-9AAE-A194544DB790} - System32\Tasks\{B5F6F474-0676-4FCB-9277-5CC2783BE9E7} => pcalua.exe -a "C:\Users\Kowalscy\Desktop\Nowy folder (2)\SETUP.EXE" -d "C:\Users\Kowalscy\Desktop\Nowy folder (2)" Task: {267F20F8-D09E-4BBB-BECD-88C4AC261125} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-28] (Google Inc.) Task: {2C1ADC8D-E389-4501-83B7-E06A81F13D0E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {45425343-133C-4150-BB0C-81047FB62C04} - System32\Tasks\{FF2291D1-1A0C-4923-B0EB-863E4EC63868} => pcalua.exe -a "C:\Program Files (x86)\3DO\Heroes3\2\SETUP.EXE" -d "C:\Program Files (x86)\3DO\Heroes3\2" Task: {5E58F64E-C0D8-4410-92C0-5866C63BC0EA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-19] (Adobe Systems Incorporated) Task: {6167B6CE-BF69-4A2A-98AF-F7DB829E499D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-28] (Google Inc.) Task: {6B1A471E-A364-4592-934E-EC93A8FFFB40} - System32\Tasks\{2B83A480-3BF3-49D0-BD3B-CD240D16F91C} => pcalua.exe -a C:\Users\Kowalscy\Desktop\ll\1\SETUP.EXE -d C:\Users\Kowalscy\Desktop\ll\1 Task: {6E7AE7DB-1183-4D54-97BA-A5A248F56F4C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd) Task: {7CB84C9B-D75A-4685-8B39-6C309C4FB752} - System32\Tasks\{0DAB7CEF-D6F4-4B07-829B-72FDD8021650} => pcalua.exe -a "C:\ProgramData\G Data\Setups\{7765322A-8601-47D3-AC60-B66677450D7B}\setup.exe" -c /InstallMode=Uninstall /_DoNotShowChange=true Task: {80E5AD1E-C71A-449B-8FBA-D6BEA7F89C62} - System32\Tasks\{732BBCAD-6B7A-4FBD-A69D-1F0213702FB8} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar Task: {82B3B97D-66F3-4800-91AB-24453EE08216} - \avast! Emergency Update No Task File <==== ATTENTION Task: {98B96AF8-9372-4E6B-8770-9A23F4B12D9B} - System32\Tasks\{157B78D9-8C33-4DAD-AC78-C56DD93490E4} => pcalua.exe -a "C:\Users\Kowalscy\Desktop\Nowy folder (3)\WoG_Install\Install.exe" -d "C:\Users\Kowalscy\Desktop\Nowy folder (3)\WoG_Install" Task: {9C85BBAB-55CE-4F60-9B9C-1D07EB428B78} - System32\Tasks\{D19A02B2-B8FC-4DBE-900D-C69E159EA907} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar Task: {A260E469-A4A0-4F53-9E1C-28771F8D2B30} - System32\Tasks\{EA319140-FC76-4AF7-A47A-F92698D781AB} => C:\Program Files (x86)\LibreOffice 4.0\program\soffice.exe Task: {A4D2312A-B8B2-44AA-80CA-052B2423706B} - System32\Tasks\{D6ECE071-9621-4F4A-8390-37D65906AC85} => pcalua.exe -a C:\Users\Kowalscy\Desktop\ll\2\_setup\Setup.exe -d C:\Users\Kowalscy\Desktop\ll\2\_setup Task: {A87CBD49-4462-43E8-994A-28E9CF737040} - System32\Tasks\{16457C2F-127B-4AC2-BA3A-5CC436E16C7D} => C:\Program Files (x86)\LibreOffice 4.0\program\soffice.exe Task: {AEAF5ED7-92B0-440A-906D-6BD639EA07B7} - \Microsoft\Windows\Setup\gwx\runappraiser No Task File <==== ATTENTION Task: {B37694AE-6CA2-4987-940C-429A4229DBD5} - System32\Tasks\{AD11A1EE-B919-4E16-82ED-FBC4E4DA9537} => pcalua.exe -a C:\Users\Kowalscy\Desktop\herp3w]\SETUP.EXE -d C:\Users\Kowalscy\Desktop\herp3w] Task: {C09E8184-6312-4C80-88C2-25257325C3CA} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2010-12-29] (CyberLink) Task: {CA363877-2443-411A-99F1-F51D91EF72B5} - System32\Tasks\Wise Registry Cleaner Schedule Task => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [2013-12-26] (WiseCleaner.com) Task: {CE5D1932-25FD-4000-A4EA-E60EB5444263} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent No Task File <==== ATTENTION Task: {DA6EC688-4F53-4D83-81B0-DED4B4F072B9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000UA => C:\Users\Kowalscy\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-12] (Facebook Inc.) Task: {DF68A307-A2D2-492F-A47A-348CC01D95AB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000Core => C:\Users\Kowalscy\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-13] (Google Inc.) Task: {E15D877A-6358-4525-9357-AA371F9F9A07} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2010-12-29] (CyberLink Corp.) Task: {E6394CD2-3FA2-4BA8-B178-E3EB01BF9A90} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000Core => C:\Users\Kowalscy\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-12] (Facebook Inc.) Task: {EF4679D5-A869-4986-B24A-951055EFFB8E} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2010-12-29] (Acer Incorporated) Task: {FE8E48AA-9D76-434E-B0E0-97E3A79C176F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000UA => C:\Users\Kowalscy\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-13] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000Core.job => C:\Users\Kowalscy\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000UA.job => C:\Users\Kowalscy\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000Core.job => C:\Users\Kowalscy\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1309102623-1561535839-2573300424-1000UA.job => C:\Users\Kowalscy\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Wise Registry Cleaner Schedule Task.job => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe ==================== Loaded Modules (Whitelisted) ============== 2013-11-27 17:54 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2009-01-22 02:45 - 2009-01-22 02:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll 2012-11-10 22:10 - 2012-11-10 22:54 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2011-03-09 14:09 - 2011-01-20 20:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2015-07-17 19:34 - 2015-07-17 19:34 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll 2011-02-15 21:37 - 2011-02-15 21:37 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2011-02-15 21:36 - 2011-02-15 21:36 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2011-02-15 21:37 - 2011-02-15 21:37 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2010-12-29 23:56 - 2010-12-29 23:56 - 00210312 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll 2015-07-29 16:00 - 2015-07-25 10:46 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libglesv2.dll 2015-07-29 16:00 - 2015-07-25 10:46 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libegl.dll 2014-10-16 19:04 - 2014-10-16 19:04 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll 2011-03-09 14:43 - 2011-01-13 03:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Temp:1D6686D8 AlternateDataStreams: C:\ProgramData\Temp:2430E4FC AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 AlternateDataStreams: C:\ProgramData\Temp:5925E400 AlternateDataStreams: C:\ProgramData\Temp:5D458568 AlternateDataStreams: C:\ProgramData\Temp:798A3728 AlternateDataStreams: C:\ProgramData\Temp:8173A019 AlternateDataStreams: C:\ProgramData\Temp:9B750A13 AlternateDataStreams: C:\ProgramData\Temp:C46995DA AlternateDataStreams: C:\ProgramData\Temp:E79EFDA4 ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\...\sony.com -> sony.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1309102623-1561535839-2573300424-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Kowalscy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{3FF9B83F-7923-4347-A207-27C0C86CB6D0}] => (Allow) C:\Program Files (x86)\Acer\Acer VCM\VC.exe FirewallRules: [{87F0EA44-A0F5-4A21-9914-4D6661B480CF}] => (Allow) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe FirewallRules: [{E0C55391-0AF4-4E48-BDD2-653C18B25C4F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe FirewallRules: [{DF954E65-FDC1-4322-84DE-F55D1380CF88}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe FirewallRules: [{7D92A8B0-F43F-4462-A231-C04B2AD3AC66}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\CLML\CLMLSvc.exe FirewallRules: [{7DA1E803-6E80-4F0A-BFFD-CCBB9E99BF60}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe FirewallRules: [{4D9EAE29-F009-4867-953A-18ADEA192A4D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe FirewallRules: [{828BD756-072E-4AE9-9C1E-BEA1937AC7B9}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe FirewallRules: [{809A4383-EE8D-4772-B616-34740A35D2D4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{2D759387-8BAF-4AE4-988E-69686206EE2B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{429179CE-CFDE-4710-B5F4-322A7B4CCDAC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{91C583AC-3150-452D-961F-FBA229F4B9FC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{68F0EEBC-7515-4D87-9397-B0B0D8F6E5BF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{741DC092-B2D0-4396-B577-1C62C5446BF1}] => (Allow) C:\Users\Kowalscy\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{32EC86C4-DB22-4383-BEA1-1CEA7CA7B88E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{496A220F-0AB2-419F-99BC-A4DD2569143D}] => (Allow) LPort=2869 FirewallRules: [{61CBD251-2501-4C8D-AEE7-A9927A3FFD3A}] => (Allow) LPort=1900 FirewallRules: [{EB1F8414-1C09-4574-97F7-E10598FCA583}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{CDC1E9DD-B685-4E59-8705-FE23E3720498}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{A8B6505A-F50A-4701-9C2E-6089827A63C5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [TCP Query User{3A17D341-B3C6-4FB9-95DD-9F503C337B8D}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [UDP Query User{DCDE1287-6F1F-44F6-A6A1-95C23C73F8E6}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [{912BF8E1-E3E7-46DF-AB18-4138DDAFD878}] => (Block) C:\windows\syswow64\dplaysvr.exe FirewallRules: [{722937F9-C207-4C57-B739-9512CA00362C}] => (Block) C:\windows\syswow64\dplaysvr.exe FirewallRules: [{68C71013-2574-4289-9708-E0A1A8E87400}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{F64D79A4-46F1-49D8-A1D6-709ACCD753C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{3CAE5001-C348-4436-8FD0-AED1B461395B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{BB4BBE83-4218-423A-9050-7F59B2B0A5F9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5B5B3E54-A471-432D-A645-C1811BB93E6C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe FirewallRules: [{71138186-03A8-4CB7-BD27-BFC4176A3C96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe FirewallRules: [{05C9428F-D56E-4FCE-9793-474970AE5134}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{9388AF6E-F7A4-4BAC-8B69-EFE16358B4F9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{66AEE5DC-EF4D-444F-BD59-DB6829910275}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{69B64C41-E735-4424-A9EF-F6C2DDA3499B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{B6530404-1D14-4C80-AA03-360FF34EFC03}] => (Allow) LPort=8743 FirewallRules: [{53E34418-C2E4-44E0-A011-BF7C2FEF3FEE}] => (Allow) LPort=8643 FirewallRules: [{FF6A59CE-B3DC-4B1A-95F7-2377AAB3D721}] => (Allow) LPort=7676 FirewallRules: [{D865440E-20B2-4946-B6D6-92F67FC7769E}] => (Allow) LPort=7679 FirewallRules: [{E58B4269-AE1A-4245-828A-3287AAD35529}] => (Allow) LPort=24234 FirewallRules: [{36C52460-023C-4ED7-89B2-FA39AB40B425}] => (Allow) LPort=7900 FirewallRules: [{C269CC10-1242-421E-A415-E54B88240DB9}] => (Allow) LPort=1900 FirewallRules: [{3E4E2E78-012C-44B6-A757-A934DA1F4739}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{6CFC94B4-60F2-4C40-8CB9-101DB628228D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{611BD7D9-82A8-4AB9-938D-6EF1DCAF40E0}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{88A78EA9-EE66-45C9-BDA6-E03ADDEA7EDA}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{B8C0533B-4BCE-48F0-9464-F1286955B08E}] => (Allow) C:\Users\Kowalscy\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{4CC089DA-2699-47AD-BABA-2CAC7EA9CE4A}] => (Allow) chrome.exe FirewallRules: [{EC7DA6E9-8225-4ABA-997B-A5D2BFF74DF5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{87B54418-438F-4460-B23B-57244860CA51}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{F8F29D2C-2B7D-4840-B86A-CA6C773C1029}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{99C91C7A-32EE-496D-8900-E2DEEFA899AE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{C3D8E63B-6259-4DEB-86D1-9936A9503837}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Faulty Device Manager Devices ============= Name: avast! HardwareID Description: avast! HardwareID Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswHwid Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Hamachi Network Interface Description: Hamachi Network Interface Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: LogMeIn, Inc. Service: hamachi Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: aswRdr Description: aswRdr Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswRdr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: aswStm Description: aswStm Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswStm Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Nie można zainicjować indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Nie można zainicjować aplikacji. Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Nie można zainicjować obiektu programu zbierającego. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć elementu. (HRESULT : 0x80070490) (0x80070490) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Usługa Windows Search nie może załadować informacji z magazynu właściwości. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: The catalog is corrupt. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Usługa wyszukiwania wykryła uszkodzone pliki danych w indeksie {id=4700}. Usługa podejmie próbę automatycznego rozwiązania tego problemu przez odbudowanie indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 9000) (User: ) Description: Usługa Windows Search nie może otworzyć magazynu właściwości aparatu Jet. Szczegóły: 0x%08x (0xc0041800 - Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800)) Error: (08/02/2015 12:22:19 PM) (Source: ESENT) (EventID: 455) (User: ) Description: Windows (4016) Windows: Wystąpił błąd -1811 podczas otwierania pliku dziennika C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0083F.log. System errors: ============= Error: (08/02/2015 12:24:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Usługa Google Update (gupdate) z powodu następującego błędu: %%1053 Error: (08/02/2015 12:24:16 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa Google Update (gupdate). Error: (08/02/2015 12:22:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (08/02/2015 12:22:30 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-1073473535. Error: (08/02/2015 12:22:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: aswRdr aswRvrt aswSnx aswSP aswVmm Error: (08/02/2015 12:21:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi avast! HardwareID z powodu następującego błędu: %%2 Error: (08/02/2015 12:21:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi aswStm z powodu następującego błędu: %%2 Error: (08/02/2015 12:21:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%2 Error: (08/01/2015 02:10:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Usługa Google Update (gupdate) z powodu następującego błędu: %%1053 Error: (08/01/2015 02:10:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa Google Update (gupdate). Microsoft Office: ========================= Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/02/2015 12:22:29 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć elementu. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) 4700 Error: (08/02/2015 12:22:20 PM) (Source: Windows Search Service) (EventID: 9000) (User: ) Description: Szczegóły: 0x%08x (0xc0041800 - Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800)) Error: (08/02/2015 12:22:19 PM) (Source: ESENT) (EventID: 455) (User: ) Description: Windows4016Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0083F.log-1811 CodeIntegrity: =================================== Date: 2013-03-10 18:08:39.531 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz Percentage of memory in use: 58% Total physical RAM: 3947.86 MB Available physical RAM: 1646.66 MB Total Virtual: 7893.93 MB Available Virtual: 5266.01 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:580.07 GB) (Free:164.9 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 59962ADB) Partition 1: (Not Active) - (Size=16 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=580.1 GB) - (Type=07 NTFS) ==================== End of log ============================