Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja:18-01-2016 Uruchomiony przez Marcin (2016-01-20 23:26:24) Uruchomiony z C:\Users\Marcin\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2012-02-05 14:39:49) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-485612313-3131477178-4024949205-500 - Administrator - Disabled) Gość (S-1-5-21-485612313-3131477178-4024949205-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-485612313-3131477178-4024949205-1002 - Limited - Enabled) Marcin (S-1-5-21-485612313-3131477178-4024949205-1000 - Administrator - Enabled) => C:\Users\Marcin ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Microsoft Security Essentials (Enabled - Out of date) {108DAC43-C256-20B7-BB05-914135DA5160} AS: Microsoft Security Essentials (Enabled - Out of date) {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Adobe Flash Player 20 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 20.0.0.286 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Apple Application Support (32-bit) (HKLM\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.) Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) Audacity 2.0 (HKLM\...\Audacity_is1) (Version: - Audacity Team) Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.) Canon Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version: 4.1.6 - Canon Inc.) Canon MP Navigator EX 1.0 (HKLM\...\MP Navigator EX 1.0) (Version: - ) Canon MX300 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX300_series) (Version: - ) Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform) Centrum obsługi urządzeń z systemem Windows Mobile (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation) Corel PaintShop Pro X5 (HKLM\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Corel PaintShop Pro X5 (Version: 15.2.0.12 - Corel Corporation) Hidden CPUID CPU-Z 1.70 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) Dropbox (HKU\S-1-5-21-485612313-3131477178-4024949205-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.) Easy Tune 6 B13.1211.1 (HKLM\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B13.1211.1 (Version: 1.00.0000 - GIGABYTE) Hidden Gadu-Gadu 10 (HKLM\...\Gadu-Gadu 10) (Version: - GG Network S.A.) GG (HKU\S-1-5-21-485612313-3131477178-4024949205-1000\...\GG) (Version: 12 - GG Network S.A.) ICA (Version: 15.0.0.183 - Corel Corporation) Hidden ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) IPM_PSP_COM (Version: 15.0.0.183 - Corel Corporation) Hidden iTunes (HKLM\...\{8862F11A-A9A0-4899-9F50-B5A79F12F3C2}) (Version: 12.3.1.23 - Apple Inc.) Java 8 Update 66 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation) K-Lite Codec Pack 8.0.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 8.0.0 - ) LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - ) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 2.1.1116.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 43.0.4 (x86 pl) (HKLM\...\Mozilla Firefox 43.0.4 (x86 pl)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla) PSPPContent (Version: 15.2.0.12 - Corel Corporation) Hidden PSPPHelp (Version: 15.0.0.183 - Corel Corporation) Hidden Real Alternative 2.0.2 (HKLM\...\RealAlt_is1) (Version: 2.0.2 - ) Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5919 - Realtek Semiconductor Corp.) Setup (Version: 15.0.0.183 - Nazwa firmy) Hidden Skype™ 7.17 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) WinRAR 5.10 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-485612313-3131477178-4024949205-1000_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Marcin\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {085CBE1D-75C4-4427-A2E4-A35A5D38DA52} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {0B58D842-2197-4971-BCF5-6F58239B7208} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-19] (Adobe Systems Incorporated) Task: {20EBE497-3CB3-42AA-BA75-6CAA5697E0BA} - System32\Tasks\Kavisan => C:\PROGRA~1\SHOPPE~1\Erive.bat Task: {3054B8C1-B51B-4B52-8505-EF30EA509967} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {569D99EA-4049-41C1-A6C1-816248CE34C8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd) Task: {5C2C5230-BAB1-42D9-BC6C-867C6907A760} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-485612313-3131477178-4024949205-1000Core => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-20] (Dropbox, Inc.) Task: {6AEF0C98-2CB4-4B67-8C70-4C977C7355CC} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {9B5747AA-64EB-4F2B-977F-D9AE360F450A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-485612313-3131477178-4024949205-1000UA => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-20] (Dropbox, Inc.) Task: {D622195C-D680-4FEA-9C56-59660C7C9E94} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {E0540F9D-5956-475C-9483-27AE375CEE6E} - System32\Tasks\Microsoft\Microsoft Antimalware\MP Scheduled Scan => c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27] (Microsoft Corporation) Task: {E514BA5F-D3DA-497A-81D2-426C2AB9CBD1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-485612313-3131477178-4024949205-1000Core.job => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-485612313-3131477178-4024949205-1000UA.job => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-10-13 05:46 - 2015-10-13 05:46 - 00073512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-12-11 23:19 - 2015-10-31 01:59 - 00034768 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00022848 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Crypto.Random.OSRNG.winrandom.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00023352 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Crypto.Util._counter.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00042296 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Crypto.Cipher._AES.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00116688 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-11 23:19 - 2015-10-31 01:59 - 00093640 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00018376 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00019760 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00105928 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32api.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00392144 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2015-12-11 23:19 - 2015-12-08 22:36 - 00381752 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00692688 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00020816 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00109520 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 01737032 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00020808 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00020800 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00021840 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00038696 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\fastpath.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00024528 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00020936 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00114640 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00021320 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00124880 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32file.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00030160 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00043472 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00175560 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00028616 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00048592 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00024392 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00036296 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\librsync.dll 2015-12-11 23:19 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\win32profile.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00117056 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00023376 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00134608 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2015-12-11 23:19 - 2015-10-31 01:59 - 00134088 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00240584 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\jpegtran.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00020280 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00052024 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2015-12-11 23:18 - 2015-12-08 22:36 - 00021304 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Crypto.Util.strxor.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00350152 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00084792 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2015-12-11 23:19 - 2015-12-08 22:36 - 01826608 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-11 23:19 - 2015-10-31 02:00 - 00083912 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\sip.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 03891504 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 01950000 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00519984 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00133936 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00225080 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00207672 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00024904 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00486704 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2015-12-11 23:19 - 2015-12-08 22:36 - 00357680 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-03-04 22:45 - 2015-10-31 02:01 - 00019920 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll 2015-03-04 22:45 - 2015-10-31 02:00 - 00786904 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-07-30 21:06 - 2015-10-31 02:00 - 00063448 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-03-04 22:45 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Marcin\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:04 - 2016-01-20 22:26 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-485612313-3131477178-4024949205-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [TCP Query User{1EE8661D-3A9B-49D9-9FDE-2314AC1F0A87}C:\program files\gadu-gadu 10\gg.exe] => (Block) C:\program files\gadu-gadu 10\gg.exe FirewallRules: [UDP Query User{415B1B76-9AAF-4A97-9952-16E06124D298}C:\program files\gadu-gadu 10\gg.exe] => (Block) C:\program files\gadu-gadu 10\gg.exe FirewallRules: [{18C64544-9579-49C2-9628-DC2BD086AB42}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe FirewallRules: [{CBE33D85-B751-42CE-A6A9-1D5A0915B641}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{41F87562-192D-4EDE-85D4-F7D0573D23E8}] => (Allow) C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{5E579DDF-9D65-46EA-A60F-AFE24C964564}] => (Allow) C:\Users\Marcin\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{DFED60B4-BBE2-4D1C-A0DA-5CC520CB5DF4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{C720C104-046D-4923-B23B-6DD696FA3DEC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{E8E33675-B930-4F28-B1A2-EBB5462A6635}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{70FD7EC1-E3F7-4077-ACD8-D3DA6705E765}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{BC5C3F8F-74BC-4CEE-97F8-D0EE3DDAE181}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{B44C319D-7D5A-4BDC-AFF1-670F91A7FB1A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{761CC6EB-AABD-4CE0-9665-F73DE235E49A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{86D16A99-AC6C-4BDA-B8B6-F480B7331A65}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{849D58F3-F9E3-4CC7-A032-127FB084BD4B}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Punkty Przywracania systemu ========================= 20-01-2016 21:41:10 Zainstalowano ESET NOD32 Antivirus ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/20/2016 08:21:26 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Nie można zainicjować indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:26 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Nie można zainicjować aplikacji. Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:26 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Nie można zainicjować obiektu programu zbierającego. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:26 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć elementu. (HRESULT : 0x80070490) (0x80070490) Error: (01/20/2016 08:21:24 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:24 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Usługa Windows Search nie może załadować informacji z magazynu właściwości. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (01/20/2016 08:21:24 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: The catalog is corrupt. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:24 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Usługa wyszukiwania wykryła uszkodzone pliki danych w indeksie {id=4700}. Usługa podejmie próbę automatycznego rozwiązania tego problemu przez odbudowanie indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (01/20/2016 08:21:24 PM) (Source: Windows Search Service) (EventID: 9000) (User: ) Description: Usługa Windows Search nie może otworzyć magazynu właściwości aparatu Jet. Szczegóły: 0x%08x (0xc0041800 - Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800)) Error: (01/20/2016 08:21:24 PM) (Source: ESENT) (EventID: 455) (User: ) Description: Windows (4072) Windows: Wystąpił błąd -1811 podczas otwierania pliku dziennika C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0005B.log. Dziennik System: ============= Error: (01/20/2016 11:11:45 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może załadować zadań podczas uruchamiania usługi. Dane dodatkowe: Wartość błędu: 2147942523. Error: (01/20/2016 11:11:45 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może załadować zadań podczas uruchamiania usługi. Dane dodatkowe: Wartość błędu: 2147942523. Error: (01/20/2016 11:11:45 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może uruchomić zadań wyzwalanych podczas uruchamiania komputera. Dodatkowe dane: Wartość błędu: 2147942523. Error: (01/20/2016 10:37:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows. Error: (01/20/2016 10:40:06 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {30D49246-D217-465F-B00B-AC9DDD652EB7} Error: (01/20/2016 10:37:43 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (01/20/2016 10:34:43 PM) (Source: Microsoft Antimalware) (EventID: 3002) (User: ) Description: Funkcja ochrony w czasie rzeczywistym programu %%860 napotkała błąd i nie można było jej wykonać. Funkcja: %%835 Kod błędu: 0x80004005 Opis błędu: Nieokreślony błąd. Przyczyna: %%842 Error: (01/20/2016 10:34:23 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może załadować zadań podczas uruchamiania usługi. Dane dodatkowe: Wartość błędu: 2147942523. Error: (01/20/2016 10:34:23 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może załadować zadań podczas uruchamiania usługi. Dane dodatkowe: Wartość błędu: 2147942523. Error: (01/20/2016 10:34:23 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: ZARZĄDZANIE NT) Description: Usługa Harmonogram zadań nie może uruchomić zadań wyzwalanych podczas uruchamiania komputera. Dodatkowe dane: Wartość błędu: 2147942523. CodeIntegrity: =================================== Date: 2016-01-19 23:58:00.545 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:58:00.389 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:57:53.517 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:57:53.330 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:57:12.970 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:57:12.892 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:56:45.880 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:56:45.740 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:56:45.160 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-19 23:56:45.074 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: AMD Phenom(tm) II X2 555 Processor Procent pamięci w użyciu: 43% Całkowita pamięć fizyczna: 3325.55 MB Dostępna pamięć fizyczna: 1883.25 MB Całkowita pamięć wirtualna: 6649.43 MB Dostępna pamięć wirtualna: 5238.11 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:38.96 GB) (Free:2.37 GB) NTFS Drive d: (Dane) (Fixed) (Total:78.13 GB) (Free:0.62 GB) NTFS Drive e: (Gry) (Fixed) (Total:90.33 GB) (Free:0 GB) NTFS Drive f: (filmy) (Fixed) (Total:90.56 GB) (Free:1.3 GB) NTFS Drive h: (ADATA UFD) (Removable) (Total:28.89 GB) (Free:1.16 GB) FAT32 Drive i: (ADATA) (Removable) (Total:30.22 GB) (Free:12.64 GB) FAT32 Drive j: () (Fixed) (Total:465.76 GB) (Free:11.05 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 42C142C0) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=39 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=259 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 30.2 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=30.2 GB) - (Type=0B) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: A205E382) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 28.9 GB) (Disk ID: C3072E18) Partition 1: (Not Active) - (Size=28.9 GB) - (Type=0C) ==================== Koniec Addition.txt ============================