Additional scan result of Farbar Recovery Scan Tool (x64

Transkrypt

Additional scan result of Farbar Recovery Scan Tool (x64
6842
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Jacek at 2015-01-08 19:56:15
Running from C:\Users\Jacek\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG Internet Security 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2015 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29544 - BitTorrent Inc.)
Adblock Plus dla IE (32-bitowego i 64-bitowego) (HKLM\...\{E1782B54-CBF6-4572-8FA7-8817433815C1}) (Version: 1.3 - Eyeo GmbH)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.0.2.12610 - Adobe Systems Inc.)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5577 - AVG Technologies)
AVG 2015 (Version: 15.0.4257 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5577 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.5.7 - AVG Technologies)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.6 - Licomp EMPiK
Multimedia)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.6 - Licomp EMPiK Multimedia) Hidden
Camtasia Studio 8 (HKLM-x32\...\{DB93E2C2-851F-44B2-B09C-351D2C624AE1}) (Version: 8.0.4.1060 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Counter-Strike 1.6 (HKLM-x32\...\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}) (Version: 1.6 - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.3.0297 - DT Soft Ltd)
Detektor Winampa (HKU\S-1-5-21-3012084760-990230296-27709176-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Football Manager 2012 (HKLM-x32\...\Football Manager 2012_is1) (Version: - )
Galería de fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
GG (HKU\S-1-5-21-3012084760-990230296-27709176-1000\...\GG) (Version: 11 - GG Network S.A.)
Google Chrome (HKU\S-1-5-21-3012084760-990230296-27709176-1000\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Drive (HKLM-x32\...\{56D4499E-AC3E-4B8D-91C9-C700C148C44B}) (Version: 1.13.5782.599 - Google, Inc.)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GTAIII (HKLM-x32\...\{92B94569-6683-4617-8C54-EB27A1B51B30}) (Version: - )
Heroes III (Wersja Polska) (HKLM-x32\...\Heroes III (Wersja Polska)) (Version: - )
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.600 - Oracle)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft
Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft
Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3)
(HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0415-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0C0A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional 2007 Trial (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0415-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft
Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft
Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version:
9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version:
9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version:
9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 -
Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 Microsoft Corporation)
Minecraft Pingwin Pack 5 wersja 5.0 (HKLM-x32\...\{8CB84F44-615F-4B3A-A193-E825D7E3362C}_is1) (Version: 5.0 - AvenisHD)
MorphVOX Pro (HKLM-x32\...\{4bfc0d50-0417-46a0-ab1e-475fb1a90916}) (Version: 4.4.17.22603 - Screaming Bee)
MorphVOX Pro (x32 Version: 4.4.17.22603 - Screaming Bee) Hidden
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 pl) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 pl)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
Nero 9 Lite (HKLM-x32\...\{de12bcea-e323-4ce6-84da-393f8a5b9e8f}) (Version: - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3.2 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{1C4551A6-4743-4093-91E4-1477CD655043}) (Version: 9.09.0203 - NVIDIA Corporation)
Opera Stable 26.0.1656.60 (HKLM-x32\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.0.10.69 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Poczta usługi Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 5.1.31.0 - Razer Inc.)
RMVB Player 1.0.1 (HKLM-x32\...\RMVB Player_is1) (Version: - vsevensoft.com)
San Andreas Mod Installer (HKLM-x32\...\San Andreas Mod Installer1.1) (Version: 1.1 - cpmusick)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3012084760-990230296-27709176-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)
The Sims™ 2 (HKLM-x32\...\{2C82E097-694E-44ea-A947-2750679469CF}) (Version: - Electronic Arts)
The Sims™ Historie z bezludnej wyspy (HKLM-x32\...\{64EEA791-0271-4B53-00AC-2BF05F5FBEF6}) (Version: - Electronic Arts)
tricomfi (HKLM-x32\...\{74f1e872-8d6f-4cc7-58d6-c60d8dfe43ed}) (Version: 1.0.0 - estdemin)
Unity Web Player (HKU\S-1-5-21-3012084760-990230296-27709176-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642)
(HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ,
s.r.o.)
WapSter AQQ (HKLM-x32\...\AQQ) (Version: 2.4.1.10 - Creative Team S.A.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 4.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinRAR 5.00 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Your Product (HKLM-x32\...\Your Product1.0) (Version: 1.0 - Your Company)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID:
HKU\S-1-5-21-3012084760-990230296-27709176-1000_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 ->
C:\Users\Jacek\AppData\Roaming\tricomfi\tivesen.dll () <==== ATTENTION
CustomCLSID:
HKU\S-1-5-21-3012084760-990230296-27709176-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 ->
C:\Users\Jacek\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID:
HKU\S-1-5-21-3012084760-990230296-27709176-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 ->
C:\Users\Jacek\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.)
CustomCLSID:
HKU\S-1-5-21-3012084760-990230296-27709176-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 ->
C:\Users\Jacek\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
==================== Restore Points =========================
08-01-2015 17:02:14 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-01-06 17:09 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1
localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {079E9B19-8D94-4F07-8D33-61F34335815D} - \Microsoft\Windows\Maintenance\SMupdate2 No Task File <==== ATTENTION
Task: {0B2AEBDF-5727-4451-8478-7B91382E151F} - System32\Tasks\{784602B8-B3C7-40C4-B412-068EB216EC8B} => pcalua.exe -a
E:\setup.exe -d E:\
Task: {0ED801B1-D526-4B0C-8B25-5F176EF9DDB7} - System32\Tasks\{9DA3EA7B-0F84-45E4-8413-79411CDE6D64} => pcalua.exe -a
"C:\Program Files (x86)\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe" -c -runfromtemp -l0x0415
Task: {0FAB7A0A-0F84-4F1A-9CB4-E8A87C8E227A} - System32\Tasks\{1FF988CA-ECF7-440E-BDB0-D6837E0D73A2} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\samp.exe
Task: {153887B1-11B1-4DB9-A639-39BE25616C0F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2013-05-17] (Google Inc.)
Task: {1E5DB930-4A6B-48E7-A91B-E0776C86E70F} - System32\Tasks\{02B09D8C-48F1-4610-9AA2-C67B5884E1AE} => pcalua.exe -a
"C:\Users\Jacek\Desktop\gry michala\CS1.6v44\Uninstall.exe"
Task: {2A5E653A-05E0-4193-9253-2DB66515D47B} - System32\Tasks\{8A0EEF99-6A9C-4515-8C42-C162E83FC144} => pcalua.exe -a
E:\Autorun.exe -d E:\
Task: {2E4E52CB-891E-404F-B3D7-A8C1C3188C2A} - System32\Tasks\Razer_Game_Booster_AutoUpdate => D:\Program Files (x86)\WARZ\The
War Z\Razer Game Booster\AutoUpdate.exe
Task: {2FDBD4DF-7ECD-417C-920D-B470540E2DC4} - System32\Tasks\{B591315F-8A11-4314-928D-BD04B85A5BD5} => pcalua.exe -a
C:\Users\Jacek\Downloads\steaminstall_cs.exe -d C:\Users\Jacek\Downloads
Task: {3238776A-DB3D-474B-ABDD-2353955EDEF2} - System32\Tasks\{702EC75B-BCF1-4A4D-BCD4-80F643996DCC} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\gta_sa.exe
Task: {341A336C-23AD-444D-A624-D5213FF30CFA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe
[2014-09-26] (Piriform Ltd)
Task: {3BFBA833-FAA3-42B3-A076-35BAC5B6B7C0} - System32\Tasks\Opera scheduled Autoupdate 1396873136 => D:\Program Files
(x86)\Opera\launcher.exe [2014-12-17] (Opera Software)
Task: {3F8F08B6-748B-460D-ACED-23C2FB7DDA73} - System32\Tasks\Adobe Flash Player Updater =>
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {4D6F5BD4-E039-4DEB-8354-B5DDDB27FBFA} - System32\Tasks\{5095A6E3-5093-47E3-B84B-BB5E21258EA8} => pcalua.exe -a
"C:\Program Files (x86)\EA GAMES\The Sims 2\EAUninstall.exe"
Task: {622A84B5-A145-4F0B-9F0E-58519488432A} - System32\Tasks\{9D9D59A6-F754-4768-987E-1B96B2DEBFF4} => D:\Program Files
(x86)\RAVIAA\patcher.exe
Task: {6582B8FE-6E15-4801-84C3-AE8F3B47D64D} - System32\Tasks\{885A37C0-3B86-4AAF-953D-331B9E12A93D} => D:\Program Files\CS
1.6\hl.exe
Task: {6AE01567-F61B-49FB-A84E-D77A2FA12346} - System32\Tasks\{8E85283F-45CB-473C-B979-A09CB7D20F70} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\gta_sa.exe
Task: {6DE14840-CB16-47A1-A953-852EE383A685} - System32\Tasks\{D5F0919F-081E-4D04-BB91-16ED946828FB} => pcalua.exe -a
E:\setup.exe -d E:\
Task: {72CF7989-8D87-442D-9080-620112304C0B} - System32\Tasks\{FFBEBF80-0CCF-41CC-ADFD-9B5D7FE415C2} => pcalua.exe -a
C:\Users\Jacek\Downloads\MinecraftZyczu.exe -d C:\Users\Jacek\Downloads
Task: {7B14F6D1-DF21-4086-BE1C-42F8FDE72049} System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3012084760-990230296-27709176-1000Core =>
C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-17] (Google Inc.)
Task: {8157050E-2462-433D-82C1-8D830BAFAD36} - System32\Tasks\{688004D4-9A50-4B29-8456-C7A31ADC2B3C} => D:\Program Files\CS
1.6\hl.exe
Task: {82672B9D-CD55-4FBE-B830-7146F7279329} - System32\Tasks\{B8B54362-7EFF-414A-ABB4-7587AD768ED9} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\gta_sa.exe
Task: {8D57A09C-CEAE-477E-9A0F-C747E62E5991} - System32\Tasks
ewSI_23 => C:\Users\Jacek\AppData\Roaming
ewSI_23\s_inst.exe [2014-07-02] ()
Task: {A854D340-D9B9-4442-97DD-2BD237151FE7} - System32\Tasks\{42609E71-7F52-4B0A-A22D-F04064A5F32E} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\gta_sa.exe
Task: {A88C174E-7BEF-4EAB-BEF6-EF9FFD478B19} - System32\Tasks\{81A6E140-D563-4174-BD24-AADF3CA8EA08} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\samp.exe
Task: {A9169A08-4B64-4F07-BBB8-E0F065BADF89} - System32\Tasks\{A5F7141C-B18A-48C8-AC83-2294B47CEA63} => pcalua.exe -a
C:\Users\Jacek\Downloads\UniSpiker-2.6.exe -d C:\Users\Jacek\Downloads
Task: {B7FA7A77-FE76-4546-80CB-AB72979B2E24} - System32\Tasks\{003DE0BA-08CE-4597-BFED-5B1AEE241FD6} => pcalua.exe -a
E:\setupsrc\Autorun.exe -d E:\
Task: {C836CA64-ED6C-4D3D-B1A3-7177F4811AC4} System32\Tasks\SPBIW_UpdateTask_Time_323632323033353238312d3437415a556c2a3223346c41 => Wscript.exe //B
"C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {C8628693-423B-4902-A053-5A2719F1DD99} - System32\Tasks\{537A15CD-7D64-4544-AFB3-8B0AAEE83920} => D:\Program Files
(x86)\RAVIAA\patcher.exe
Task: {CAE19782-AE39-45A8-B54F-ADF54592327D} - System32\Tasks\{A7D73FD4-2E50-4B77-B148-5AC1592B4C5C} => D:\Program Files\CS
1.6\cstrike.exe
Task: {CBC1618F-59E6-4B54-BCEA-DA33EBBB2911} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe
<==== ATTENTION
Task: {D0BCF6FA-BA40-44C0-BC15-379C194D4FEF} - System32\Tasks\{F7B1C3ED-4C9A-4622-9A10-E5AB5538CD33} => pcalua.exe -a
C:\Users\Jacek\Desktop\MinecraftZyczu.exe -d C:\Users\Jacek\Desktop
Task: {D909884B-452A-4908-B844-9CDD0024D041} - \Microsoft\Windows\Multimedia\SMupdate3 No Task File <==== ATTENTION
Task: {E5DDCE25-1C1D-426C-9C5E-F7CD56E4B190} - System32\Tasks\Game_Booster_AutoUpdate => D:\Game Booster 3\AutoUpdate.exe
Task: {E808B108-4C1C-425A-BD96-1DD5F75B06FC} - System32\Tasks\{7FDEB80A-FD36-469B-919D-680833784ABF} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\samp.exe
Task: {E9B3EE0E-1380-4B2D-A42C-F9CE05A89AB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2013-05-17] (Google Inc.)
Task: {EDE1BA8C-6B95-4543-8310-A4609069FA6B} - System32\Tasks\{8B1C1795-0F5F-46AE-BCC2-CD94088A8615} => D:\Program Files\CS
1.6\hl.exe
Task: {EF694CEC-B2C0-44B2-8D0D-611B7BBF7CFC} - System32\Tasks\{8970D51E-0850-4211-A14C-7381A39A1F14} => pcalua.exe -a
E:\setup.exe -d E:\
Task: {F7D6E1ED-F0A6-4983-AA31-446FF55CDE72} System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3012084760-990230296-27709176-1000UA =>
C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-17] (Google Inc.)
Task: {FAA2F0CF-5AC8-4D62-B60E-4CE836EC5D9B} - System32\Tasks\{E90EE867-D226-4C95-874F-06F0DB959E7C} => D:\Program Files
(x86)\Rockstar Games\GTA - San Andreas\samp.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3012084760-990230296-27709176-1000Core.job =>
C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3012084760-990230296-27709176-1000UA.job =>
C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks
ewSI_23.job => C:\Users\Jacek\AppData\Roaming
ewSI_23\s_inst.exe
==================== Loaded Modules (whitelisted) =============
2014-09-25 19:44 - 2014-09-25 19:44 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll
2014-12-09 15:27 - 2014-12-09 15:27 - 00157696 _____ () C:\Users\Jacek\AppData\Roaming\tricomfi\tivesen.dll
2014-12-09 15:26 - 2014-12-09 15:26 - 00133120 _____ () C:\Users\Jacek\AppData\Roaming\tricomfi\colers.dll
2014-12-15 08:56 - 2014-12-15 08:56 - 01686552 _____ () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
2014-12-09 17:24 - 2014-12-09 17:24 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-12-10 12:08 - 2014-12-10 12:08 - 16841392 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\Users\Jacek\Dane aplikacji:NT
AlternateDataStreams: C:\Users\Jacek\Dane aplikacji:NT2
AlternateDataStreams: C:\Users\Jacek\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jacek\AppData\Roaming:NT2
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3012084760-990230296-27709176-500 - Administrator - Disabled)
Gość (S-1-5-21-3012084760-990230296-27709176-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3012084760-990230296-27709176-1002 - Limited - Enabled)
Jacek (S-1-5-21-3012084760-990230296-27709176-1000 - Administrator - Enabled) => C:\Users\Jacek
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be
obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/03/2015 09:50:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443, sygnatura czasowa: 0x5475dd5d
Nazwa modułu powodującego błąd: mozalloc.dll, wersja: 34.0.5.5443, sygnatura czasowa: 0x5475d664
Kod wyjątku: 0x80000003
Przesunięcie błędu: 0x00001425
Identyfikator procesu powodującego błąd: 0x16cc
Godzina uruchomienia aplikacji powodującej błąd: 0xplugin-container.exe0
Ścieżka aplikacji powodującej błąd: plugin-container.exe1
Ścieżka modułu powodującego błąd: plugin-container.exe2
Identyfikator raportu: plugin-container.exe3
Error: (01/03/2015 05:52:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: wmpnetwk.exe, wersja: 12.0.7601.17514, sygnatura czasowa: 0x4ce7ae7f
Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18409, sygnatura czasowa: 0x5315a05a
Kod wyjątku: 0x0000046b
Przesunięcie błędu: 0x000000000000940d
Identyfikator procesu powodującego błąd: 0x1330
Godzina uruchomienia aplikacji powodującej błąd: 0xwmpnetwk.exe0
Ścieżka aplikacji powodującej błąd: wmpnetwk.exe1
Ścieżka modułu powodującego błąd: wmpnetwk.exe2
Identyfikator raportu: wmpnetwk.exe3
Error: (01/03/2015 03:25:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/03/2015 03:25:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/03/2015 00:30:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443, sygnatura czasowa: 0x5475dd5d
Nazwa modułu powodującego błąd: mozalloc.dll, wersja: 34.0.5.5443, sygnatura czasowa: 0x5475d664
Kod wyjątku: 0x80000003
Przesunięcie błędu: 0x00001425
Identyfikator procesu powodującego błąd: 0x15d0
Godzina uruchomienia aplikacji powodującej błąd: 0xplugin-container.exe0
Ścieżka aplikacji powodującej błąd: plugin-container.exe1
Ścieżka modułu powodującego błąd: plugin-container.exe2
Identyfikator raportu: plugin-container.exe3
Error: (01/02/2015 08:36:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service Razer Game Scanner since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/02/2015 03:36:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service Razer Game Scanner since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/02/2015 03:16:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service Razer Game Scanner since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/02/2015 11:21:12 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
Details:
AddWin32ServiceFiles: Unable to back up image of service Razer Game Scanner since QueryServiceConfig API failed
System Error:
Nie można odnaleźć określonego pliku.
.
Error: (01/02/2015 08:44:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Flnzexzhuuk.exe, wersja: 1.35.12.18, sygnatura czasowa: 0x50be00b6
Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18409, sygnatura czasowa: 0x53159a86
Kod wyjątku: 0xe06d7363
Przesunięcie błędu: 0x0000c42d
Identyfikator procesu powodującego błąd: 0xf7c
Godzina uruchomienia aplikacji powodującej błąd: 0xFlnzexzhuuk.exe0
Ścieżka aplikacji powodującej błąd: Flnzexzhuuk.exe1
Ścieżka modułu powodującego błąd: Flnzexzhuuk.exe2
Identyfikator raportu: Flnzexzhuuk.exe3
System errors:
=============
Error: (01/08/2015 07:38:21 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/08/2015 07:38:21 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/08/2015 05:03:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663:
Aktualizacja zabezpieczeń produktu Microsoft Office 2007 suites (KB2687499).
Error: (01/08/2015 05:03:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663:
Aktualizacja produktu Microsoft Office 2007 suites (KB2767849).
Error: (01/08/2015 05:00:56 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/08/2015 04:11:33 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/08/2015 04:11:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa AMD External Events Utility niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (01/08/2015 02:55:53 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/08/2015 02:55:53 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/07/2015 08:08:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663:
Aktualizacja zabezpieczeń produktu Microsoft Office 2007 suites (KB2687499).
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-01-06 17:07:22.812
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not
be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be
malicious software from an unknown source.
Date: 2015-01-06 17:07:22.188
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not
be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be
malicious software from an unknown source.
Date: 2013-02-16 17:08:03.231
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Jacek\Desktop\xqz ring0 by dedi\injectDLL.sys
because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or
damaged, or that might be malicious software from an unknown source.
Date: 2013-02-16 17:08:02.987
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Jacek\Desktop\xqz ring0 by dedi\injectDLL.sys
because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or
damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
Percentage of memory in use: 52%
Total physical RAM: 4093.98 MB
Available physical RAM: 1933.43 MB
Total Pagefile: 8186.13 MB
Available Pagefile: 5646.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.56 GB) (Free:3.83 GB) NTFS
Drive d: () (Fixed) (Total:368.1 GB) (Free:221.84 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F506C4F1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=368.1 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Zrodlo: http://wklej.se/6842

Podobne dokumenty