Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:20-12-2015 Uruchomiony przez Bazooka (2015-12-21 10:07:55) Uruchomiony z D:\Programy\FRST64 Windows 7 Professional Service Pack 1 (X64) (2012-12-21 10:15:28) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-562281720-3894058892-620674494-500 - Administrator - Disabled) Bazooka (S-1-5-21-562281720-3894058892-620674494-1005 - Administrator - Enabled) => C:\Users\Bazooka Gość (S-1-5-21-562281720-3894058892-620674494-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-562281720-3894058892-620674494-1003 - Limited - Enabled) M (S-1-5-21-562281720-3894058892-620674494-1000 - Limited - Enabled) => C:\Users\M UpdatusUser (S-1-5-21-562281720-3894058892-620674494-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: Zapora osobista ESET (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1030 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated) Aktualizacje NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) AutoCAD Mechanical 2014 - English (Version: 18.0.17.0 - Autodesk) Hidden AutoCAD Mechanical 2014 Language Pack - English (Version: 18.0.17.0 - Autodesk) Hidden Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk) Autodesk AutoCAD Mechanical 2014 - English (HKLM\...\AutoCAD Mechanical 2014 - English) (Version: 18.0.17.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk) Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) calibre (HKLM-x32\...\{B4B62C79-A41D-47C6-B689-0416BEA6678F}) (Version: 2.35.0 - Kovid Goyal) CamStudio Lossless Codec v1.4 (HKLM-x32\...\CamStudio Lossless Codec_is1) (Version: - (c) 2003 RenderSoft Software, Modifications Copyright © 2008 Jake P.) CamStudio OSS Desktop Recorder (HKLM-x32\...\{FD9C31B6-F572-414D-81E3-89368C97A125}_is1) (Version: 2.6 Beta r294 - CamStudio Open Source Dev Team) CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden English Grammar in Use Extra application (HKLM-x32\...\EnglishGrammarinUseExtra) (Version: 1.0.0 - Cambridge University Press Holdings Limited) English Grammar in Use Extra application (x32 Version: 1.0.0 - Cambridge University Press Holdings Limited) Hidden English Grammar in Use Extra content (HKLM-x32\...\English Grammar in Use Extra content) (Version: 1.0.0.0 - Cambridge University Press) e-pity 6.4 za rok 2014 (HKLM-x32\...\{80D8170E-5590-218-B9ED-E24E4C99A18C}_is1) (Version: - e-file sp. z o.o.) ESET Smart Security (HKLM\...\{B0D9ABD0-A8FD-41CE-85A5-D5AFF3BB3990}) (Version: 7.0.302.26 - ESET, spol s r. o.) Fallout (HKLM-x32\...\Fallout_is1) (Version: - GOG.com) Fallout 2 (HKLM-x32\...\Fallout 2_is1) (Version: - GOG.com) Fallout FIXT alpha 6.1 - Full Custom (HKLM-x32\...\{83D6B5DC-9C8C-4DE2-B66C-14FA5C8680B5}_is1) (Version: alpha 6.1 - Full Custom - Sduibek) Fallout New Vegas Ultimate Edition (HKLM-x32\...\Fallout New Vegas Ultimate Edition_is1) (Version: - ) FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production) FO2 Restoration Project 2.2 (HKLM-x32\...\Fallout 2 Restoration Project_is1) (Version: - killap) foobar2000 v1.3.8 (HKLM-x32\...\foobar2000) (Version: 1.3.8 - Peter Pawlowski) Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GOG.com Heroes of Might and Magic 3 (HKLM\...\{1d3c859c-1028-4822-b0a7-da4f7bbc18bc}.sdb) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) Heroes of Might and Magic 3 Complete (HKLM-x32\...\GOGPACKHOMM3COMPLETE_is1) (Version: 2.0.0.16 - GOG.com) HEXelon MAX 6.07 (HKLM-x32\...\HEXelon MAX_is1) (Version: 6.07 - Jerzy Znamirowski) ICCup Launcher (HKLM-x32\...\ICCup Launcher_is1) (Version: 1.6 - ICCup) inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan) Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Last.fm Scrobbler 2.1.37 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm) Lizardtech DjVu Control (HKLM-x32\...\{105CFC7C-6992-11D5-BD9D-000102C10FD8}) (Version: - ) Majesty Gold HD 1.0 (HKLM-x32\...\Majesty Gold HD_is1) (Version: - ) Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation) Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - ) MoorHunt 0.6.7.2 (HKLM-x32\...\MoorHunt_is1) (Version: - hxxp://moorhunt.pl) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NapiProjekt (2.1.1.2314) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.45.5 - Black Tree Gaming) NVIDIA Sterownik 3D Vision 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Orka (HKLM-x32\...\Orka) (Version: - ) Oxford Advanced Learner's Dictionary - 8th Edition (HKLM-x32\...\NSIS_oald8) (Version: - ) Pakiet zgodności dla systemu Office 2007 (HKLM-x32\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Panel sterowania NVIDIA 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge) PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.11 - ) Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Profesor Henry 6.0 Gramatyka (HKLM-x32\...\phgram_60_is1) (Version: - ) Profesor Henry 6.0 Rozumienie ze słuchu i konwersacje (HKLM-x32\...\Prof60_Rozum_is1) (Version: - ) Profesor Henry 6.0 Słownictwo poziom 1 i 2 (HKLM-x32\...\slow_12_60_is1) (Version: - ) Profesor Henry 6.0 Słownictwo poziom 3 i 4 (HKLM-x32\...\slow_34_60_is1) (Version: - ) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) SolidWorks 2014 x64 Edition SP05 (HKLM-x32\...\SolidWorks Installation Manager 20140-40500-1100-100) (Version: 22.5.0.77 - SolidWorks Corporation) SolidWorks 2014 x64 Edition SP05 (Version: 22.150.77 - SolidWorks) Hidden SolidWorks 2014 x64 Polish Resources (Version: 22.150.77 - SolidWorks) Hidden SolidWorks Composer Player 2014 SP05 x64 Edition (Version: 22.50.77 - Dassault Systemes SolidWorks) Hidden SolidWorks eDrawings 2014 x64 Edition SP05 (Version: 14.5.0008 - Dassault Systemes SolidWorks Corp) Hidden SolidWorks Explorer 2014 SP05 x64 Edition (Version: 22.50.77 - SolidWorks Corporation) Hidden SolidWorks Plastics 2014 SP05 x64 Edition (Version: 22.50.77 - SolidWorks Corporation) Hidden SoulseekQt (HKLM-x32\...\SoulseekQt) (Version: - ) SystemTL+ (HKLM-x32\...\SystemTL+) (Version: - ) TP-LINK TL-WN881ND Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) VMLite Workstation (HKLM\...\{197F2BEF-2705-406E-8CEB-8E404FFFE414}) (Version: 3.2.6 - VMLite) Wielki słownik angielsko-polski i polsko-angielski PWN-OXFORD (HKLM-x32\...\{1035B082-201E-466E-9084-D096589C05CD}) (Version: 3.0.0 - WN PWN SA) Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation) WinHTTrack Website Copier 3.48-19 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.19 - HTTrack) WinRAR 4.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.3) (Version: 1.3.3 - Xvid Team) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Punkty Przywracania systemu ========================= ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0D5BEB4F-7EFB-4B07-82A6-89CA03016906} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {28B9A6E4-27B3-4480-B6E8-A766C63CE8AF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {75089BB0-AA16-4B26-B525-5A2D881A7F57} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {9F7ED2CF-DEF6-4BB7-B25C-824E65F82ABC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd) Task: {B96C248D-7975-4985-B4B2-AA801C55FCFE} - System32\Tasks\e-pity2015_kwiecien => D:\Programy\e-pity2014\Assets\signxml.exe [2015-03-18] (e-file sp. z o.o.) Task: {BA2E9C6D-151B-4B35-AF49-3DFD65CCC13E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {C0ED1A23-ACD0-4A1F-9F5B-69BC3D16C74D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated) Task: {C9DAC092-74E9-4BE7-A1AA-6AD1290B9CA7} - System32\Tasks\e-pity2015_styczen => D:\Programy\e-pity2014\Assets\signxml.exe [2015-03-18] (e-file sp. z o.o.) Task: {E3E51FDC-213D-434C-872B-6B47C91A8B48} - System32\Tasks\Process Explorer-Roman-M => /t Task: {F7DC819F-913B-4AB5-9279-F51233E2710D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2012-12-21 11:22 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2010-08-11 13:18 - 2010-08-11 13:18 - 00202344 _____ () D:\Programy\VMLite Workstation\VBoxDDU.dll 2010-08-11 13:18 - 2010-08-11 13:18 - 02725480 _____ () D:\Programy\VMLite Workstation\VBoxRT.dll 2009-03-26 21:03 - 2009-03-26 21:03 - 01289728 _____ () D:\Programy\VMLite Workstation\LIBEAY32.dll 2014-10-21 05:00 - 2014-10-21 05:00 - 00275960 _____ () D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\sldBodyDiffu.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-562281720-3894058892-620674494-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Bazooka\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.10.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\startupfolder: C:^Users^M^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Pidgin.lnk => C:\Windows\pss\Pidgin.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: DAEMON Tools Lite => "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: HEXelon MAX => "D:\Programy\HEXelon MAX 6\hexelon.exe" /auto MSCONFIG\startupreg: KiesPreload => D:\Programy\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => D:\Programy\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [TCP Query User{F91D8968-B63E-4341-AB2F-85D8A9EC377A}D:\programy\soulseekqt\soulseekqt.exe] => (Allow) D:\programy\soulseekqt\soulseekqt.exe FirewallRules: [UDP Query User{66436016-C7BF-40FB-8ECC-D506277E5B76}D:\programy\soulseekqt\soulseekqt.exe] => (Allow) D:\programy\soulseekqt\soulseekqt.exe FirewallRules: [TCP Query User{EC6B494E-5088-4B8C-9BB5-163ADABAC434}D:\programy\nx 7.5\nx\ugii\ugraf.exe] => (Allow) D:\programy\nx 7.5\nx\ugii\ugraf.exe FirewallRules: [UDP Query User{0EFC6CED-D17F-4FC4-B053-7491061FA06F}D:\programy\nx 7.5\nx\ugii\ugraf.exe] => (Allow) D:\programy\nx 7.5\nx\ugii\ugraf.exe FirewallRules: [TCP Query User{F8486458-A1C0-446D-AE93-1D417B0C1E33}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe FirewallRules: [UDP Query User{01C78C3F-6BD8-410E-ADD3-A662E42266CF}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe FirewallRules: [TCP Query User{A5512650-6D2C-4904-BFB9-C952F434057A}D:\programy\starcraft_02\starcraft.exe] => (Allow) D:\programy\starcraft_02\starcraft.exe FirewallRules: [UDP Query User{29F8D713-02BF-483D-9C87-34184C161863}D:\programy\starcraft_02\starcraft.exe] => (Allow) D:\programy\starcraft_02\starcraft.exe FirewallRules: [{84A86512-4857-436E-88FD-82ED105F65ED}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{A9E26BC5-A991-4E3F-9ED9-A91344F4CF98}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{5511D8DC-39BD-4241-8E69-71169BDCF9EA}] => (Allow) D:\Programy\NapiProjekt\NapiProjekt\napisy.exe FirewallRules: [{E3273215-C24D-42AE-A9C3-D6626EE8BD39}] => (Allow) D:\Programy\NapiProjekt\NapiProjekt\napisy.exe FirewallRules: [{E9B9D4E5-99CA-471F-A4AA-030CB6C891EB}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{30C85044-79C2-49E1-A42F-3EAECBC32D70}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{FF6065EE-F184-4EF0-957B-AB5A6C88DFFC}D:\programy\vlc\vlc.exe] => (Block) D:\programy\vlc\vlc.exe FirewallRules: [UDP Query User{7AFAA9E0-32F6-4D10-83CA-7CE6F56103BF}D:\programy\vlc\vlc.exe] => (Block) D:\programy\vlc\vlc.exe FirewallRules: [{E07FCB3B-5BF2-4B00-8E83-8DDACB211171}] => (Allow) LPort=50248 FirewallRules: [{1AC345FA-3B1F-44E5-859E-DA8B382315ED}] => (Allow) C:\Users\M\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{CDFBF252-18EE-43EC-B5E6-A1ABB8DCC428}] => (Allow) C:\Users\M\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{DA2EC70F-6963-4EA4-A4E7-9BC4D68298B9}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{5026991F-E015-434D-BA3D-59CF6218E856}] => (Allow) LPort=2869 FirewallRules: [{5FB5EFDA-C886-46A7-8FB6-7138E983AB6B}] => (Allow) LPort=1900 FirewallRules: [{10674F30-E24D-40CE-9A4A-0CDB56982D8F}] => (Allow) C:\Users\M\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{DCD804B6-2F12-4A40-BD67-88BB5839E498}] => (Allow) C:\Users\M\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{09FF0C39-CB94-4FBA-9662-BC8085B7AB72}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe FirewallRules: [{DCDE86CF-7A37-4095-8665-1650B3926120}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe FirewallRules: [{D9A8260F-21B4-4D71-9F84-BBF2FC1B0B4A}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\photoview\photoview360.exe FirewallRules: [{1CEB6A42-BBD9-4477-ACA0-182E5AB7E391}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\photoview\photoview360.exe FirewallRules: [{3CEBB2A8-F5CA-490D-8044-47E19CE12DB5}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\photoview\photoview360_cl.exe FirewallRules: [{325B482D-257E-43A6-936C-54BB44725342}] => (Allow) D:\Programy\SolidWorks\SolidWorks Corp\SolidWorks\photoview\photoview360_cl.exe FirewallRules: [{F291A99E-F1F2-4114-B490-7C76D3B473CB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/21/2015 10:06:11 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/21/2015 09:40:50 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/20/2015 11:28:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/20/2015 09:33:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/19/2015 11:29:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/19/2015 11:53:15 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/18/2015 09:36:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/18/2015 01:54:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/18/2015 10:34:13 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/18/2015 01:20:30 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi ASP.NET (ASP.NET). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Dziennik System: ============= Error: (12/21/2015 10:07:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego błędu: %%1069 Error: (12/21/2015 10:07:17 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu: %%1330 Aby upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error: (12/21/2015 09:41:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego błędu: %%1069 Error: (12/21/2015 09:41:39 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu: %%1330 Aby upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error: (12/20/2015 11:29:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego błędu: %%1069 Error: (12/20/2015 11:29:23 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu: %%1330 Aby upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error: (12/20/2015 11:26:48 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (12/20/2015 09:33:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego błędu: %%1069 Error: (12/20/2015 09:33:54 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu: %%1330 Aby upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error: (12/19/2015 11:30:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego błędu: %%1069 ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM)2 Duo CPU E8300 @ 2.83GHz Procent pamięci w użyciu: 32% Całkowita pamięć fizyczna: 4095.05 MB Dostępna pamięć fizyczna: 2754.06 MB Całkowita pamięć wirtualna: 8188.3 MB Dostępna pamięć wirtualna: 6862.74 MB ==================== Dyski ================================ Drive c: (WIN7) (Fixed) (Total:50 GB) (Free:5.38 GB) NTFS Drive d: (NOWY1) (Fixed) (Total:293.8 GB) (Free:24.04 GB) NTFS Drive e: (NOWY2) (Fixed) (Total:293.8 GB) (Free:4.89 GB) NTFS Drive f: (NOWY3) (Fixed) (Total:293.8 GB) (Free:45.54 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 17F25C9C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=50 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=293.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=587.6 GB) - (Type=OF Extended) ==================== Koniec Addition.txt ============================