Additional scan result of Farbar Recovery Scan Tool (x64) Version:29-11-2015 Ran by Artur (2015-11-30 15:37:28) Running from C:\FRST\FRST-OlderVersion\FRST-OlderVersion Windows 7 Ultimate Service Pack 1 (X64) (2012-07-14 02:31:09) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3076302344-2742556548-4197340800-500 - Administrator - Disabled) Artur (S-1-5-21-3076302344-2742556548-4197340800-1000 - Administrator - Enabled) => C:\Users\Artur ASPNET (S-1-5-21-3076302344-2742556548-4197340800-1005 - Limited - Enabled) Guest (S-1-5-21-3076302344-2742556548-4197340800-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3076302344-2742556548-4197340800-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Norton Internet Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66} FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Aktualizacje NVIDIA 2.5.15.54 (Version: 2.5.15.54 - NVIDIA Corporation) Hidden Aliens vs. Predator (HKLM-x32\...\{2A086701-1EEE-43F5-A9DB-DE2D73DC543D}_is1) (Version: - ) ALLMediaServer (HKLM-x32\...\{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1) (Version: 0.95 - ALLCinema Ltd.) Android Sync Manager WiFi (HKLM-x32\...\{563254C9-FBFC-0200-0000-000000000000}) (Version: 12.05.1071 - Mobile Action) Ashampoo Undeleter v.1.00 (HKLM-x32\...\Ashampoo Undeleter_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG) Aslain's XVM Mod wersja 3.8.2 (HKLM-x32\...\ZRwTINhSZfduKONYrSCTiCiGPggQZdcLRvoAVxyCOXXpkHeC~1DC3968F_is1) (Version: 3.8.2 - Aslain) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology) AVNavigator 2013.I (HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\...\AVNavigator 2013.I) (Version: 1.14.0.005.1 - PIONEER CORPORATION) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - ) Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - ) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - ) Chrome Remote Desktop Host (HKLM-x32\...\{CDF9E1C8-4B97-4F8B-A848-7DD0E8BEB89F}) (Version: 47.0.2526.18 - Google Inc.) Full Player 8.2 (HKLM-x32\...\{82A51915-32C3-4D86-8015-9C8D64EB5383}_is1) (Version: - Full Software Studio) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.) Google Drive (HKLM-x32\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.) Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) Happy Cloud Client (HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\...\HappyCloud) (Version: 3.41 - Happy Cloud, Inc.) Hearts of Iron III Gold (HKLM-x32\...\{ACBE6747-6FC1-48DB-8E5D-E81EFCB1EC72}) (Version: 2.03.00.0 - Paradox Interactive) Java(TM) 7 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417005FF}) (Version: 7.0.50 - Oracle) LG On-Screen Phone (HKLM-x32\...\LG On-Screen Phone) (Version: 4.2.001.140114 - LG Electronics) LG United Mobile Drivers (HKLM-x32\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30320 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{B45FABE7-D101-4D99-A671-E16DA40AF7F0}) (Version: 3.0.86.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{B578C85A-A84C-4230-A177-C5B2AF565B8C}) (Version: 3.0.17.0 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.2.0 - Mozilla) Mozilla Thunderbird 38.3.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 pl)) (Version: 38.3.0 - Mozilla) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Norton Internet Security (HKLM-x32\...\NIS) (Version: 22.5.5.15 - Symantec Corporation) NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.91 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA Sterownik graficzny 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.91 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) Pakiet sterowników systemu Windows - Ralink Technology Corp. (rt61x64) Net (10/16/2009 3.00.02.0000) (HKLM\...\5B2D6A2ABF6B08AEBB4564BDF09423388923DD83) (Version: 10/16/2009 3.00.02.0000 - Ralink Technology Corp.) Pakiet zgodności dla systemu Office 2007 (HKLM-x32\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation) Panel sterowania NVIDIA 358.91 (Version: 358.91 - NVIDIA Corporation) Hidden PC Connectivity Solution (HKLM-x32\...\{83258E90-1F76-4E13-9F60-A0F8ED41E76F}) (Version: 8.22.7.0 - Nokia) Pioneer N-70A N-50A USB Audio (HKLM-x32\...\{966BAFD7-3425-4A6A-BC72-128EDA706632}) (Version: 1.0.0 - PIONEER HOME ELECTRONICS CORP.) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30320 - Microsoft Corporation) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30320 - Microsoft Corporation) Ralink RT6x Wireless LAN Card (HKLM-x32\...\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}) (Version: 1.5.4.0 - Ralink) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.) Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.) SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden Splash PRO EX (HKLM-x32\...\Mirillis Splash PRO EX) (Version: 1.13.0 - Mirillis) Spotify (HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Bat! Professional v5.0.32 (HKLM-x32\...\{AF29562E-B318-4132-8AA9-2E3C4D6567A5}) (Version: 5.0.32 - Ritlabs) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 - Ghisler Software GmbH) Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia) World of Warships (HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 29-11-2015 18:00:08 Dr.Web Security Space uninstallation 29-11-2015 22:32:13 Usunięto: Nokia Connectivity Cable Driver 30-11-2015 15:14:59 Removed Adobe Reader X (10.1.6) - Polish. 30-11-2015 15:21:41 Restore Point Created by FRST ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {030CDB80-D74C-4573-8A37-1CE1F7BAA382} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation) Task: {10BFDF0D-F5D9-46BC-8CAE-C54E0D52DB5A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation) Task: {179C3EA3-F99C-46B0-8E22-E4930370DEC1} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe [2015-11-20] (Symantec Corporation) Task: {3E0E401E-EFA2-4AC4-9209-CC4573A2AB82} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-07-27] (Symantec Corporation) Task: {7117F969-966D-421A-92C7-E99EE2CC945A} - System32\Tasks\ASUS\i-Setup194115 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.) Task: {B80A454A-C101-438D-9F1D-F5512CEF9918} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.) Task: {E513CD0B-6946-4CDF-BAEB-C5E53F920A85} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2012-07-14 04:07 - 2015-11-05 16:13 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-11-11 11:49 - 2015-11-05 18:13 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-11-30 15:23 - 2015-11-30 15:23 - 00098816 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32api.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00110080 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\pywintypes27.dll 2015-11-30 15:23 - 2015-11-30 15:23 - 00364544 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\pythoncom27.dll 2015-11-30 15:23 - 2015-11-30 15:23 - 00046080 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_socket.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 01208320 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_ssl.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00320512 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32com.shell.shell.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00776704 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_hashlib.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 01176576 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._core_.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00806400 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._gdi_.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00816128 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._windows_.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 01067008 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._controls_.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00733184 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._misc_.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00682496 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\pysqlite2._sqlite.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00088064 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_ctypes.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00119808 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32file.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00108544 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32security.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00007168 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\hashobjs_ext.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00017920 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\thumbnails_ext.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00079360 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\usb_ext.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00167936 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32gui.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00018432 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32event.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00128512 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_elementtree.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00127488 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\pyexpat.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00013824 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\common.time34.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00036864 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_psutil_windows.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00038912 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32inet.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00525640 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\windows._lib_cacheinvalidation.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00011264 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32crypt.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00077312 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._html2.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00027136 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_multiprocessing.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00020480 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\_yappi.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00035840 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32process.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00686080 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\unicodedata.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00123392 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._wizard.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00024064 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32pipe.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00010240 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\select.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00025600 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32pdh.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00017408 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32profile.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00022528 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\win32ts.pyd 2015-11-30 15:23 - 2015-11-30 15:23 - 00078848 _____ () C:\Users\Artur\AppData\Local\Temp\_MEI28722\wx._animate.pyd ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3076302344-2742556548-4197340800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Artur\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{A115AC8D-C5A4-4951-B205-C1CD57506247}C:\program files (x86)\allmediaserver\mediaserver.exe] => (Block) C:\program files (x86)\allmediaserver\mediaserver.exe FirewallRules: [UDP Query User{D93DBE01-D57B-4A4B-88BF-41CA24B74640}C:\program files (x86)\allmediaserver\mediaserver.exe] => (Block) C:\program files (x86)\allmediaserver\mediaserver.exe ==================== Faulty Device Manager Devices ============= Name: E:\ Description: Storage Device Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic Service: WUDFRd Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. Name: Ralink RT61 Turbo Wireless LAN Card Description: Ralink RT61 Turbo Wireless LAN Card Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Ralink Technology Corp. Service: rt61x64 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/30/2015 03:23:31 PM) (Source: Winlogon) (EventID: 4103) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error: (11/30/2015 01:37:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mf6smjmo.exe, wersja: 2.1.19357.0, sygnatura czasowa: 0x52e7ea83 Nazwa modułu powodującego błąd: mf6smjmo.exe, wersja: 2.1.19357.0, sygnatura czasowa: 0x52e7ea83 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0008d93e Identyfikator procesu powodującego błąd: 0x1618 Godzina uruchomienia aplikacji powodującej błąd: 0xmf6smjmo.exe0 Ścieżka aplikacji powodującej błąd: mf6smjmo.exe1 Ścieżka modułu powodującego błąd: mf6smjmo.exe2 Identyfikator raportu: mf6smjmo.exe3 Error: (11/30/2015 00:05:23 PM) (Source: Winlogon) (EventID: 4103) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error: (11/30/2015 11:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 10:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 09:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 08:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 07:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 06:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error: (11/30/2015 05:03:40 AM) (Source: Software Protection Platform Service) (EventID: 8193) (User: ) Description: Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 System errors: ============= Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Installer niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Adobe Acrobat Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Media Player Network Sharing Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Streamer Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA GeForce Experience Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Print Spooler niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Restart the service. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Stereoscopic 3D Driver Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 03:21:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Display Driver Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (11/30/2015 01:28:14 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: Został wygenerowany następujący alert krytyczny: 10. Stan błędu wewnętrznego: 10. CodeIntegrity: =================================== Date: 2015-11-26 21:36:45.216 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:36:45.184 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:36:45.118 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:36:45.087 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:50.753 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:50.724 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:50.672 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:50.641 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:49.117 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-26 21:35:49.073 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz Percentage of memory in use: 25% Total physical RAM: 8159.14 MB Available physical RAM: 6117.25 MB Total Virtual: 16316.47 MB Available Virtual: 14143.21 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:99.9 GB) (Free:38.39 GB) NTFS Drive d: (Fallout 4) (CDROM) (Total:5.22 GB) (Free:0 GB) UDF Drive f: (Rozne) (Fixed) (Total:365.76 GB) (Free:345.92 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 7BD88A8E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=99.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=365.8 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================