Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-07-2015 Ran by cfka (2015-07-30 19:48:03) Running from C:\Documents and Settings\cfka\Moje dokumenty\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1659004503-630328440-839522115-500 - Administrator - Enabled) ASPNET (S-1-5-21-1659004503-630328440-839522115-1004 - Limited - Enabled) cfka (S-1-5-21-1659004503-630328440-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\cfka Gość (S-1-5-21-1659004503-630328440-839522115-501 - Limited - Disabled) Pomocnik (S-1-5-21-1659004503-630328440-839522115-1000 - Limited - Disabled) SUPPORT_388945a0 (S-1-5-21-1659004503-630328440-839522115-1002 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET Smart Security 7.0 (Enabled - Up to date) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FW: Zapora osobista ESET (Disabled) {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) CCleaner wersja 4.17.4808 (HKLM\...\CCleaner_is1) (Version: 4.17.4808 - ) Creative EAX Settings (HKLM\...\EAXSet) (Version: - ) Creative Speaker Settings (HKLM\...\SPEAKER) (Version: - ) Detektor Winampa (HKU\S-1-5-21-1659004503-630328440-839522115-1003\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Device Control (HKLM\...\Device Control) (Version: - ) EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc) Glary Utilities 5.21 (HKLM\...\Glary Utilities 5) (Version: 5.21.0.40 - Glarysoft Ltd) Google Chrome (HKLM\...\Google Chrome) (Version: 44.0.2403.125 - Google Inc.) Google Update Helper (Version: 1.3.28.1 - Google Inc.) Hidden High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation) Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9713 - NVIDIA Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation) NVIDIA nView Desktop Manager (HKLM\...\NVIDIA nView Desktop Manager) (Version: 6.14.10.00 - NVIDIA Corporation) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Realtek AC'97 Audio (HKLM\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: 5.36 - Realtek Semiconductor Corp.) SopCast 3.9.6 (HKLM\...\SopCast) (Version: 3.9.6 - www.sopcast.com) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden Winamp (HKLM\...\Winamp) (Version: 5.63 - Nullsoft, Inc) Windows Imaging Component (HKLM\...\WIC) (Version: 3.0.0.0 - Microsoft Corporation) Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.175805 - Microsoft Corporation) WinRAR 5.21 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 02-05-2015 13:54:58 Punkt kontrolny systemu 03-05-2015 17:06:38 Punkt kontrolny systemu 04-05-2015 17:44:38 Punkt kontrolny systemu 12-05-2015 19:36:26 Punkt kontrolny systemu 26-06-2015 12:51:06 Punkt kontrolny systemu 27-06-2015 12:52:50 Punkt kontrolny systemu 28-06-2015 19:32:17 Punkt kontrolny systemu 29-06-2015 20:03:13 Punkt kontrolny systemu 23-07-2015 18:19:48 Punkt kontrolny systemu 24-07-2015 19:54:25 Punkt kontrolny systemu 26-07-2015 12:04:24 Punkt kontrolny systemu 28-07-2015 11:08:37 Punkt kontrolny systemu 29-07-2015 21:34:53 Zainstalowane REALTEK GbE & FE Ethernet PCI-E NIC Driver 29-07-2015 22:46:23 Zainstalowane Realtek High Definition Audio Driver 29-07-2015 23:06:18 Zainstalowane NVIDIA ForceWare Network Access Manager 29-07-2015 23:16:28 Usunięte REALTEK GbE & FE Ethernet PCI-E NIC Driver 29-07-2015 23:17:26 Zainstalowane Realtek High Definition Audio Driver 30-07-2015 10:59:46 Usunięte Realtek High Definition Audio Driver ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2001-10-26 15:45 - 2015-04-12 11:53 - 00000880 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 http://www.driver-soft.com 127.0.0.1 www.driver-soft.com 127.0.0.1 http://www.driver-soft.com 127.0.0.1 www.driver-soft.com ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\GlaryInitialize 5.job => D:\programy\Glary.Utilities.PRO.v5.21.0.40\Glary Utilities 5\Initialize.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2004-08-04 00:44 - 2008-04-14 22:50 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2005-05-03 19:38 - 2005-05-03 19:38 - 00064512 _____ () C:\WINDOWS\system32\P17.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5} => ""="" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1659004503-630328440-839522115-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Idylla.bmp DNS Servers: 217.113.224.134 - 217.113.224.135 Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) StandardProfile\AuthorizedApplications: [C:\Program Files\Google\Chrome\Application\chrome.exe] => Enabled:Google Chrome StandardProfile\AuthorizedApplications: [C:\Program Files\Counter Strike 1.6 Standard\hl.exe] => Enabled:Half-Life Launcher StandardProfile\AuthorizedApplications: [D:\gry\Counter-Strike 1.6 v23\hl.exe] => Enabled:Half-Life Launcher StandardProfile\AuthorizedApplications: [C:\Documents and Settings\cfka\Dane aplikacji\ACEStream\engine\ace_engine.exe] => Enabled:AceStream ==================== Faulty Device Manager Devices ============= Name: Urządzenie audio na High Definition Audio Description: Urządzenie audio na High Definition Audio Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: NVIDIA nForce Serial ATA Controller Description: NVIDIA nForce Serial ATA Controller Class Guid: {4D36E96A-E325-11CE-BFC1-08002BE10318} Manufacturer: NVIDIA Corporation Service: nvgts Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (06/28/2015 06:48:24 PM) (Source: SecurityCenter) (EventID: 1802) (User: ) Description: Usługa Centrum zabezpieczeń systemu Windows nie może ustanowić kwerend zdarzeń z WMI, aby monitorować zaporę i program antywirusowy innej firmy. Error: (04/21/2015 09:17:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: CFKA-6B4EB0C8AB) Description: Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later. Error: (04/13/2015 03:15:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Aplikacja zawieszająca hl.exe, wersja 1.1.1.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error: (04/11/2015 03:15:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd chrome.exe, wersja 41.0.2272.118, moduł powodujący błąd chrome.dll, wersja 41.0.2272.118, adres błędu 0x002448eb. Przetwarzanie zdarzenia określonego nośnika dla [chrome.exe!ws!] Error: (07/11/2015 01:18:17 PM) (Source: MsiInstaller) (EventID: 11309) (User: CFKA-6B4EB0C8AB) Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it. Error: (07/11/2015 01:17:31 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Aplikacja zawieszająca GammaControlv3setup.tmp, wersja 51.52.0.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error: (07/11/2015 01:17:15 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: Określony serwer nie może wykonać żądanej operacji. Error: (07/11/2015 01:17:15 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: Operacja została zwrócona, ponieważ przekroczono limit czasu. Error: (07/11/2015 01:07:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd chrome.exe, wersja 41.0.2272.118, moduł powodujący błąd chrome.dll, wersja 41.0.2272.118, adres błędu 0x002448eb. Przetwarzanie zdarzenia określonego nośnika dla [chrome.exe!ws!] System errors: ============= Error: (07/30/2015 07:43:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Usługa bramy warstwy aplikacji niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/30/2015 07:43:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (07/30/2015 07:43:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa NVIDIA Display Driver Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/30/2015 06:39:05 PM) (Source: 0) (EventID: 5) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:39:05 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:38:59 PM) (Source: 0) (EventID: 5) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:38:59 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:38:22 PM) (Source: 0) (EventID: 5) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:38:22 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Scsi\nvgts2 Error: (07/30/2015 06:37:12 PM) (Source: 0) (EventID: 5) (User: ) Description: \Device\Scsi\nvgts2 Microsoft Office: ========================= Error: (06/28/2015 06:48:24 PM) (Source: SecurityCenter) (EventID: 1802) (User: ) Description: Error: (04/21/2015 09:17:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: CFKA-6B4EB0C8AB) Description: Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.(NULL)(NULL)(NULL) Error: (04/13/2015 03:15:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: hl.exe1.1.1.1hungapp0.0.0.000000000 Error: (04/11/2015 03:15:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: chrome.exe41.0.2272.118chrome.dll41.0.2272.118002448eb Error: (07/11/2015 01:18:17 PM) (Source: MsiInstaller) (EventID: 11309) (User: CFKA-6B4EB0C8AB) Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL) Error: (07/11/2015 01:17:31 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: GammaControlv3setup.tmp51.52.0.0hungapp0.0.0.000000000 Error: (07/11/2015 01:17:15 PM) (Source: crypt32) (EventID: 8) (User: ) Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtOkreślony serwer nie może wykonać żądanej operacji. Error: (07/11/2015 01:17:15 PM) (Source: crypt32) (EventID: 8) (User: ) Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtOperacja została zwrócona, ponieważ przekroczono limit czasu. Error: (07/11/2015 01:07:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: chrome.exe41.0.2272.118chrome.dll41.0.2272.118002448eb ==================== Memory info =========================== Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ Percentage of memory in use: 51% Total physical RAM: 894.42 MB Available physical RAM: 431.47 MB Total Virtual: 2167.78 MB Available Virtual: 1750.7 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:29.29 GB) (Free:16.69 GB) NTFS ==>[drive with boot components (Windows XP)] Drive d: (Dysk lokalny ) (Fixed) (Total:45.23 GB) (Free:9.39 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 74.5 GB) (Disk ID: F6F6F6F6) Partition 1: (Active) - (Size=29.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=45.2 GB) - (Type=OF Extended) ==================== End of log ============================