Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:25-01-2016 Uruchomiony przez Adrian (2016-01-25 22:39:09) Uruchomiony z C:\Users\Adrian\Downloads Windows 7 Home Premium Service Pack 1 (X64) (2014-01-30 10:44:50) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-4162316270-4102970208-303935742-500 - Administrator - Disabled) Adrian (S-1-5-21-4162316270-4102970208-303935742-1000 - Administrator - Enabled) => C:\Users\Adrian Gość (S-1-5-21-4162316270-4102970208-303935742-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-4162316270-4102970208-303935742-1002 - Limited - Enabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 3DMark 11 (HKLM-x32\...\{f9e83b9c-ab7e-4005-8f32-4ea69703a5e4}) (Version: 1.0.132.0 - Futuremark) 3DMark 11 (Version: 1.0.132.0 - Futuremark) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software) Bastion - Demo (HKLM-x32\...\Steam App 107110) (Version: - Supergiant Games) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BOSSAFX (HKLM-x32\...\BOSSAFX) (Version: 4.00 - MetaQuotes Software Corp.) Brother MFL-Pro Suite DCP-J315W (HKLM-x32\...\{FB83EAC4-E3F6-4666-B45B-44522F2344B6}) (Version: 2.0.0.0 - Brother Industries, Ltd.) Catalyst Control Center Next Localization BR (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (Version: 2015.1223.1060.19763 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform) Child of Light (HKLM-x32\...\Steam App 256290) (Version: - Ubisoft Montréal) Clicker Heroes (HKLM-x32\...\Steam App 363970) (Version: - ) Crystal Story II (HKLM-x32\...\Steam App 344860) (Version: - Emmanuel Salva Cruz) Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Divine Divinity (HKLM-x32\...\Steam App 214170) (Version: - Larian Studios) Fallout (HKLM-x32\...\Steam App 38400) (Version: - Interplay Inc.) Fraps (HKLM-x32\...\Fraps) (Version: - ) Futuremark SystemInfo (HKLM-x32\...\{EF7EA37B-C009-4D53-AE2A-FF7C6AEC35CE}) (Version: 4.26.386 - Futuremark) GemCraft - Chasing Shadows (HKLM-x32\...\Steam App 296490) (Version: - Game in a Bottle) Gothic 3 Edycja Rozszerzona (HKLM-x32\...\{BFCD8F31-754E-40E0-BEFC-075096A38377}_is1) (Version: 1.75.14 - Nordic Games GmbH) Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar North) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation) Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation) Kingdom Rush (HKLM-x32\...\Steam App 246420) (Version: - Ironhide Game Studio) K-Lite Codec Pack 7.1.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 7.1.0 - ) League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games) Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios) Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version: - Paradox North) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{f45b48a7-f616-4211-b927-17cab6a96613}) (Version: 8.0.58298 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mozilla Firefox 43.0.4 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 pl)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla) Mu (HKLM-x32\...\{BAC4AD8B-932C-41D0-999F-3DF8E7F18490}) (Version: 0.68 - ) Mu (HKLM-x32\...\{F57CEB84-3D22-4657-8EDA-F8CD5217B83E}) (Version: 0.68 - ) Narcissu 1st & 2nd (HKLM-x32\...\Steam App 264380) (Version: - stage-nana) NetWorx 5.4.2 (HKLM\...\NetWorx_is1) (Version: - Softperfect) NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) ON_OFF Charge 2 B13.0506.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE) ON_OFF Charge 2 B13.0506.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden OpenOffice.org 3.4.1 (HKLM-x32\...\{18192D3F-5537-4560-AD89-D695F72AF91D}) (Version: 3.41.9593 - Apache Software Foundation) Overlord (HKLM-x32\...\{259A8A5E-2886-4BED-9EF1-D5485282CCC3}_is1) (Version: 1.2.1 - Codemasters) Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.80.218.2014 - Realtek) Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.) Risen - Demo (HKLM-x32\...\Steam App 40310) (Version: - Piranha – Bytes ) Sakura Clicker (HKLM-x32\...\Steam App 383080) (Version: - Winged Cloud) Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.) Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Stellarium 0.14.1 (HKLM\...\Stellarium_is1) (Version: 0.14.1 - Stellarium team) System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) Titan Quest Demo (HKLM-x32\...\Steam App 4590) (Version: - Iron Lore Entertainment) Torchlight II Demo (HKLM-x32\...\Steam App 219850) (Version: - Runic Games) TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK) TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK) Unity Web Player (HKU\S-1-5-21-4162316270-4102970208-303935742-1000\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS) Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft) WEBZEN Browser Extension (HKLM-x32\...\{95723791-2C44-454B-9220-C65D47D70E9C}) (Version: 1.12.010 - WEBZEN) Wiedźmin 2 Edycja Rozszerzona (HKLM-x32\...\{D7556F86-8878-4AAD-8755-6146D4500EB0}_is1) (Version: 3.3 - CD Projekt RED) Wtyczka e-Deklaracje (HKLM-x32\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: 4.1.0 - Ministerstwo Finansów) ZoneAlarm Antivirus (x32 Version: 14.1.011.000 - Check Point Software Technologies Ltd.) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-4162316270-4102970208-303935742-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {4BBBC8E3-9E88-4FB6-9C12-8A43B76C1F7F} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2015-12-23] (Advanced Micro Devices, Inc.) Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {80461DDE-7FEC-48F8-9D9B-B31DA72C213E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-01-25] (AVAST Software) Task: {AC6D55B5-5A41-4AAF-8E76-FCB5E91ED6E7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) Task: {CD3D714A-713E-4727-A97B-46BE629AF39F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {D60BDBE4-D16C-45E1-8601-75F91447D9A1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {E5116647-C6EC-4F69-8FE9-6F30BC72EB37} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-01-25] (AVAST Software) Task: {EC6E872A-E2AD-409C-AE21-8B1B16BBD469} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2014-03-01 10:10 - 2005-04-22 05:36 - 00143360 _____ () C:\Windows\system32\BrSNMP64.dll 2014-02-03 18:29 - 2015-08-06 17:33 - 00791552 _____ () C:\Program Files\NetWorx\sqlite.dll 2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-01-25 19:43 - 2016-01-25 19:43 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-01-25 19:43 - 2016-01-25 19:43 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2016-01-25 19:43 - 2016-01-25 19:43 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-01-25 19:43 - 2016-01-25 19:43 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2014-02-02 15:55 - 2013-09-16 12:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2015-09-03 17:57 - 00000856 ____A C:\Windows\system32\Drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-4162316270-4102970208-303935742-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount MSCONFIG\startupreg: BrStsMon00 => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{8943AC53-94A2-4B72-9B66-8CB6608C5735}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{53D04D28-B8E8-4507-8418-92896A77B5E0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4244B898-F586-41EE-8CBC-BE156ADB8161}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [{0C733254-3BCA-4782-BC2A-A5C5503FEC1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe FirewallRules: [TCP Query User{930FC424-C307-4BD9-8C3B-01733346D288}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{E881D929-FDC3-4DE1-AA00-25552FB99B88}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{1CBC64F2-A64F-458B-96CB-DFE764099E93}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe FirewallRules: [{8A82310C-7EEE-444E-B6ED-418FDFDB98A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe FirewallRules: [{189EFE85-1AA1-4DE6-83E4-9A84705038BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sakura Clicker\Sakura Clicker.exe FirewallRules: [{B94C1E91-3FE5-498C-8B90-4A1D584D40EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sakura Clicker\Sakura Clicker.exe FirewallRules: [{5FCE1E2F-A569-485E-9137-FA9B422C1008}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E4DB57E8-ECBA-4FF7-9BE7-C9B3CEA2F979}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{D325CCC4-692F-4180-9026-EB348596609B}C:\program files (x86)\tnc620\817604\sys\win32\bin\dnc.exe] => (Allow) C:\program files (x86)\tnc620\817604\sys\win32\bin\dnc.exe FirewallRules: [UDP Query User{C98C4397-D6D9-4973-92D1-4D9BF05AE823}C:\program files (x86)\tnc620\817604\sys\win32\bin\dnc.exe] => (Allow) C:\program files (x86)\tnc620\817604\sys\win32\bin\dnc.exe FirewallRules: [TCP Query User{409B6554-7124-46E3-BB5C-BC8E6F1E6CEE}C:\program files (x86)\cdp games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) C:\program files (x86)\cdp games\the witcher 2 enhanced edition\bin\witcher2.exe FirewallRules: [UDP Query User{64D67FBF-E96A-43D4-B262-B32146B01813}C:\program files (x86)\cdp games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) C:\program files (x86)\cdp games\the witcher 2 enhanced edition\bin\witcher2.exe FirewallRules: [{161E41CF-640F-4BA5-9C9F-BABFC3CB9C22}] => (Allow) C:\Program Files\NetWorx\networx.exe FirewallRules: [{B43EEB71-94A7-4276-A2A0-FB367355C943}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{463C8DFD-CBD5-431E-8F05-C4E16C37FAEF}] => (Allow) C:\Program Files\NetWorx\networx.exe FirewallRules: [{7058EA08-E4D5-448B-9049-77783B9717C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F707E47A-F082-4674-B430-D42E94B67DCF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A4F8C3D2-0BCA-4D57-B32C-7E8354707D6C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{2A4CBC4A-114C-4F1D-ACF8-B55FCB3D30D4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A3A39108-59F3-4FE5-8DA6-AFA56911A226}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Torchlight II\Torchlight2Demo.exe FirewallRules: [{F8C5C6F7-95BE-4735-B26F-6308DAD7E557}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Torchlight II\Torchlight2Demo.exe FirewallRules: [TCP Query User{EC42D520-DBA9-485E-B272-CC2775D28E35}C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{14A67E1E-9AE6-45A5-86B5-9371DE3306F3}C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe FirewallRules: [{D13BA403-8053-4DD0-9A7E-B7F929FAC41F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Kingdom Rush\Kingdom Rush.exe FirewallRules: [{097F91B9-8122-4BF4-88AA-0D331600C9A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Kingdom Rush\Kingdom Rush.exe FirewallRules: [{8181F230-FDBD-4069-8A59-3DAD37FA83F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GemCraft Chasing Shadows\GemCraft Chasing Shadows.exe FirewallRules: [{BF92D371-6F90-4322-AAE2-54ED6A0C3576}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GemCraft Chasing Shadows\GemCraft Chasing Shadows.exe FirewallRules: [TCP Query User{2D7797F1-2B2F-4DF9-BF1A-AAAFE1BC4377}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe FirewallRules: [UDP Query User{027740F0-8375-4E4A-9F5F-367BB14A9BBA}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe FirewallRules: [{4247ABDF-B2D2-4551-8B87-EA635CA9E773}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe FirewallRules: [{592BB467-6C5F-412C-B06B-F60E0CAD722E}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe FirewallRules: [{3A86C562-7E92-4176-8469-5C0A17B90ECC}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe FirewallRules: [{CEF26DCC-AA3E-464A-8242-3BEF3D99ED54}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe ==================== Punkty Przywracania systemu ========================= 10-01-2016 18:51:43 Zaplanowany punkt kontrolny 24-01-2016 14:41:01 Zaplanowany punkt kontrolny 24-01-2016 21:38:52 przed odinstalowaniem sterownikow grafiki 24-01-2016 22:29:16 Windows Update 24-01-2016 23:22:10 AMDCleanupUtility Restore Point 25-01-2016 18:56:37 Removed Avira Browser Safety 25-01-2016 19:28:26 Removed Avira Browser Safety ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/25/2016 07:37:37 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm Privacy Service. Error: (01/25/2016 07:37:37 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm Privacy Service. Error: (01/25/2016 07:37:30 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm. Error: (01/25/2016 12:40:15 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm Privacy Service. Error: (01/25/2016 12:40:15 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm Privacy Service. Error: (01/25/2016 12:40:05 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Adrian-Komputer) Description: Nie można zamknąć aplikacji lub usługi ZoneAlarm. Error: (01/25/2016 12:13:42 AM) (Source: System Restore) (EventID: 8193) (User: ) Description: Nie można utworzyć punktu przywracania (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Opis = DDU System Restored Point; Błąd = 0x8007043c). Error: (01/24/2016 11:13:21 PM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to execute command from the offline queue: uninstall "ehshell, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil". The error returned was Error: The specified assembly is not installed. . Error: (01/08/2016 11:43:54 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (01/02/2016 06:21:51 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Dziennik System: ============= Error: (01/25/2016 09:42:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 3. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom skonfigurowany program odzyskiwania. Error: (01/25/2016 09:42:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/25/2016 09:42:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/25/2016 09:42:02 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: UsbCharger Error: (01/25/2016 09:10:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 7. Error: (01/25/2016 09:08:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 6. Error: (01/25/2016 09:08:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 5. Error: (01/25/2016 09:07:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 4. Error: (01/25/2016 09:06:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 3. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom skonfigurowany program odzyskiwania. Error: (01/25/2016 09:06:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Avast Antivirus niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. CodeIntegrity: =================================== Date: 2014-02-18 18:15:34.624 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-02-18 18:15:34.624 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-02-18 18:15:34.624 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-02-18 18:15:33.423 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-02-18 18:15:33.423 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-02-18 18:15:33.423 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz Procent pamięci w użyciu: 41% Całkowita pamięć fizyczna: 3974.8 MB Dostępna pamięć fizyczna: 2309.63 MB Całkowita pamięć wirtualna: 7947.8 MB Dostępna pamięć wirtualna: 5892.14 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:178.74 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: AFC394C0) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================