Skocz do zawartości
  • 👋 Witaj na MPCForum!

    Przeglądasz forum jako gość, co oznacza, że wiele świetnych funkcji jest jeszcze przed Tobą! 😎

    • Pełny dostęp do działów i ukrytych treści
    • Możliwość pisania i odpowiadania w tematach
    • System prywatnych wiadomości
    • Zbieranie reputacji i rozwijanie swojego profilu
    • Członkostwo w jednej z największych społeczności graczy

    👉 Dołączenie zajmie Ci mniej niż minutę – a zyskasz znacznie więcej!

    Zarejestruj się teraz

Powered by easytoshop


Rekomendowane odpowiedzi

Opublikowano

Witam. Jestem już na skraju wytrzymania z moich Chromem.. Otóż już od jakichś 4 miesięcy borykam się z problemem adware. Próbowałem tym Adw Cleaner ale to nic nie dało. Otóż gdy wchodzę na jakąkolwiek stronę (nawet to forum) to wyskakuje mi nowa strona z reklamą bądź coś takiego http://scr.hu/2dc5/vdupu. Nie mam już zielonego pojęcia co mam z tym zrobić. To jest mega denerwujące i nie wiem jak mam sobie z tym poradzić (w sprawie informatyki jestem zielony). Mam zainstalowanego Ad Blocka normalnego i tego plus i one nic nie dają. Prosiłbym o szybką pomoc... System to Windows 7 32 bit.

 

Edit:

 

Chciałbym dodać, że moja przeglądarka (wydaje mi się, że przez właśnie adware) została bardzo spowolniona...

Opublikowano

Te reklamy mogą być wyświetlane przez jakieś rozszerzenie do przeglądarki. Wpisz w pasku adresu chrome://extensions. Otworzy się karta z listą rozszerzeń. Usuń wszystkie, których nie znasz lub nie używasz.

Opublikowano

Proszę oto logi:

 

Shortcut

Users shortcut scan result (x86) Version: 23-02-2015 01

Ran by MICHAŁ at 2015-02-24 20:32:04

Running from C:\Users\MICHAŁ\Downloads

Boot Mode: Normal

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

 

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1045-7B44-AA1000000001}\SC_Reader.ico ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> C:\Program Files\WinRAR\CoNowego.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Aplikacji kamery internetowej.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\HWSetup.lnk -> C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Pomoc dla aplikacji kamery internetowej.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\Web Camera Application Help.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Narzędzie zgłaszania błędów Origin.lnk -> C:\Program Files\Origin\OriginER.exe (Electronic Arts)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin Error Reporter.lnk -> C:\Program Files\Origin\OriginER.exe (Electronic Arts)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk -> C:\Program Files\Origin\Origin.exe (Electronic Arts)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Usuń Origin.lnk -> C:\Program Files\Origin\OriginUninstall.exe (Electronic Arts, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\Silverlight.Configuration.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk -> C:\Riot Games\League of Legends\lol.launcher.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infinite Crisis\6EDD581C692E\InfiniteCrisis.lnk -> C:\Program Files\InfiniteCrisis\TurbineLauncher.exe (Turbine, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infinite Crisis\6EDD581C692E\Uninstall.lnk -> C:\Program Files\InfiniteCrisis\uninstall.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE\Testy Bplus\Deinstalacja programu Testy Bplus.lnk -> C:\Program Files\Grupa IMAGE\Testy Bplus\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE\Testy Bplus\Testy Bplus.lnk -> C:\Program Files\Grupa IMAGE\Testy Bplus\Loader.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_PL\Elsword.lnk -> C:\Program Files\Gameforge4D\Elsword_PL\elsword.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS FIFA World\EA SPORTS FIFA World.lnk -> C:\Program Files\Origin Games\FIFA World\fifaworld.exe (Electronic Arts)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS FIFA World\Plik Przeczytaj.lnk -> C:\Program Files\Origin Games\FIFA World\Support\readme\Przeczytaj.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS FIFA World\Pomoc techniczna.lnk -> C:\Program Files\Origin Games\FIFA World\Support\EA Help\Pomoc techniczna.rtf ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS FIFA World\Umowa użytkownika EA SPORTS FIFA World.lnk -> C:\Program Files\Origin Games\FIFA World\Support\eula\pl_PL_eula.rtf ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\AMD Catalyst Control Center.lnk -> C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk -> C:\Windows\System32\NetProj.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\Links\Desktop.lnk -> C:\Users\MICHAŁ\Desktop ()

Shortcut: C:\Users\MICHAŁ\Links\Downloads.lnk -> C:\Users\MICHAŁ\Downloads ()

Shortcut: C:\Users\MICHAŁ\Desktop\screenSHU.lnk -> C:\Program Files\screenSHU\screenSHU.exe ()

Shortcut: C:\Users\MICHAŁ\Desktop\Shards of War.lnk -> C:\Users\MICHAŁ\AppData\Local\Programs\Shards of War\ShardsOfWarLauncher.exe ()

Shortcut: C:\Users\MICHAŁ\Desktop\Testy Bplus.lnk -> C:\Program Files\Grupa IMAGE\Testy Bplus\Loader.exe ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\screenSHU.lnk -> C:\Program Files\screenSHU\screenSHU.exe ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> C:\Program Files\WinRAR\CoNowego.txt ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uninstall Ghost Recon Phantoms - EU.lnk -> C:\Users\MICHAŁ\AppData\Local\Apps\2.0\4E1PW00R.J5M\PDXMTTNH.CC7\laun...app_2e973cc213891be7_0001.0024_eafc301c6e5bc8c2\Uninstaller.exe (Ubisoft)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shards of War\Deinstalacja programu Shards of War.lnk -> C:\Users\MICHAŁ\AppData\Local\Programs\Shards of War\unins000.exe ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shards of War\Shards of War.lnk -> C:\Users\MICHAŁ\AppData\Local\Programs\Shards of War\ShardsOfWarLauncher.exe ()

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Public\Desktop\Adobe Reader X.lnk -> C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)

Shortcut: C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk -> C:\Program Files\Origin Games\FIFA World\fifaworld.exe (Electronic Arts)

Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

Shortcut: C:\Users\Public\Desktop\InfiniteCrisis.lnk -> C:\Program Files\InfiniteCrisis\TurbineLauncher.exe (Turbine, Inc.)

Shortcut: C:\Users\Public\Desktop\Origin.lnk -> C:\Program Files\Origin\Origin.exe (Electronic Arts)

Shortcut: C:\Users\Public\Desktop\Play League of Legends.lnk -> C:\Riot Games\League of Legends\lol.launcher.exe ()

 

 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab about

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab update

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Pomoc.lnk -> C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.exe (ATI Technologies Inc.) -> Start Help -help

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) ->  -extoff

ShortcutWithArgument: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter

ShortcutWithArgument: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

 

InternetURL: C:\Users\MICHAŁ\Favorites\Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url -> hxxp://allegro.pl/

InternetURL: C:\Users\MICHAŁ\Favorites\Google.url -> https://www.google.pl/

InternetURL: C:\Users\MICHAŁ\Favorites\YouTube.url -> hxxp://www.youtube.com/?gl=PL&hl=pl

InternetURL: C:\Users\MICHAŁ\Favorites\Windows Live\Galeria gadżetów Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkID=70742

InternetURL: C:\Users\MICHAŁ\Favorites\Windows Live\Poczta usługi Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681

InternetURL: C:\Users\MICHAŁ\Favorites\Windows Live\Programy usługi Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700

InternetURL: C:\Users\MICHAŁ\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\MSN Gospodarka.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68923

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\MSN Rozrywka.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68924

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68921

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\MSN Technologie.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55143

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\MSN Wideo.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68922

InternetURL: C:\Users\MICHAŁ\Favorites\MSN — witryny sieci Web\Portal MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=54729

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Centrum bezpieczeństwa Microsoft.url -> hxxp://go.microsoft.com/fwlink/?LinkID=72887

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Dodatki programu Internet Explorer.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Microsoft Office Online.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72885

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Microsoft Technet.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72886

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Microsoft w Polsce.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Oryginalne oprogramowanie firmy Microsoft.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72900

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Strona główna programu Internet Explorer.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Strona główna systemu Windows.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\Technologia RSS.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72889

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\W domu.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406

InternetURL: C:\Users\MICHAŁ\Favorites\Microsoft — witryny sieci Web\W pracy.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72407

InternetURL: C:\Users\MICHAŁ\Favorites\Links for Polska\Bezpieczeństwo w trybie online.url -> hxxp://go.microsoft.com/fwlink/?LinkId=142211

InternetURL: C:\Users\MICHAŁ\Favorites\Links for Polska\Bezpieczny Internet.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129626

InternetURL: C:\Users\MICHAŁ\Favorites\Links for Polska\Kultura.pl.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129625

InternetURL: C:\Users\MICHAŁ\Favorites\Links for Polska\Pogodynka.pl — oficjalny serwis pogodowy IMGW.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129624

InternetURL: C:\Users\MICHAŁ\Favorites\Links for Polska\Polska.pl.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129622

InternetURL: C:\Users\MICHAŁ\Favorites\Links\Galeria obiektów Web Slice.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\Users\MICHAŁ\Favorites\Links\Sugerowane witryny.url -> https://ieonline.microsoft.com/#ieslice

InternetURL: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Ghost Recon Phantoms - EU Poradnik dla początkujących.url -> hxxp://ghost-recon.ubi.com/ghost-recon-phantoms/pl-PL/guide/index.aspx

InternetURL: C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shards of War\Strona WWW programu Shards of War.url -> hxxp://www.shardsofwar.com

 

==================== End of log =============================

 

Addition

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-02-2015 01

Ran by MICHAŁ at 2015-02-24 20:31:43

Running from C:\Users\MICHAŁ\Downloads

Boot Mode: Normal

==========================================================

 

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader X (10.1.12) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{7FEFA920-0095-A7D7-C394-096E1A5470C5}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.26 - Atheros Communications Inc.)

Conexant Audio Driver For AMD HDMI Codec (HKLM\...\CNXT_AUDIO_HDA_HDMI) (Version: 4.98.26.0 - Conexant)

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.64 - Conexant)

EA SPORTS FIFA World (HKLM\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.3.0.58666 - Electronic Arts, Inc.)

Elsword_PL (HKLM\...\Elsword_PL_is1) (Version:  - )

Ghost Recon Phantoms - EU (HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\61e5da2b7c463135) (Version: 1.36.4809.2 - Ubisoft)

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.122 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

InfiniteCrisis_6EDD581C692E (HKLM\...\InfiniteCrisis_6EDD581C692E) (Version:  - Turbine, Inc)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)

League of Legends (Version: 3.0.1 - Riot Games) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Origin (HKLM\...\Origin) (Version: 9.4.12.2807 - Electronic Arts, Inc.)

PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Realtek WLAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0016 - REALTEK Semiconductor Corp.)

screenSHU - the fastest screen capture ever. (HKLM\...\screenSHU) (Version:  - )

Shards of War (HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\1d128bf6-25c8-4b8a-bfa2-12b013ab230e_is1) (Version: 62469 - Bigpoint GmbH)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)

Testy Bplus 5.1.3.75 (HKLM\...\{81999787-A518-4218-86D5-C5D25E6808F5}_is1) (Version: 5.1.3.75 - Grupa IMAGE sp. z o.O.)

TOSHIBA Hardware Setup (HKLM\...\{8E9CEA3B-EBD1-439C-A01D-830CB39613C6}) (Version: 2.00.06 - TOSHIBA Corporation)

TOSHIBA Web Camera Application (HKLM\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.15 - TOSHIBA Corporation)

Update for PriceFountain (HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\Price Fountain) (Version:  - Update for PriceFountain) <==== ATTENTION

WinRAR 5.01 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

==================== Restore Points  =========================

 

04-02-2015 18:54:57 Zaplanowany punkt kontrolny

12-02-2015 14:29:58 Windows Update

13-02-2015 14:21:03 Windows Update

14-02-2015 11:52:30 Windows Update

22-02-2015 18:09:33 Zaplanowany punkt kontrolny

23-02-2015 18:56:26 Zainstalowany program DirectX

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2014-11-30 20:30 - 2014-11-30 20:34 - 00000898 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

127.0.0.1 genuine.microsoft.com

127.0.0.1 mpa.one.microsoft.com

127.0.0.1 sls.microsoft.com

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {494192A9-926D-490C-91EE-54F801B9CA78} - System32\Tasks\{551965DD-D431-41AD-B631-A84AA67B7E71} => C:\Program Files\Origin Games\FIFA World\fifaworld.exe [2014-12-11] (Electronic Arts)

Task: {4E6B1C5B-F822-442F-8AB0-8800552B7710} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: {5CCB032D-1FD9-407D-BE6F-5C16B7784180} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-15] (Google Inc.)

Task: {7E758EEA-F0DE-450A-817E-23AFCC895736} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-15] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-04 18:21 - 2013-09-04 18:21 - 02112000 _____ () C:\Program Files\screenSHU\screenSHU.exe

2011-06-08 08:32 - 2011-06-08 08:32 - 00011362 _____ () C:\Program Files\screenSHU\mingwm10.dll

2011-06-08 08:32 - 2011-06-08 08:32 - 00043008 _____ () C:\Program Files\screenSHU\libgcc_s_dw2-1.dll

2013-12-06 15:04 - 2013-12-06 15:04 - 00114688 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

2014-05-29 10:56 - 2014-05-29 10:56 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe

2014-11-15 11:37 - 2014-11-06 00:57 - 08911176 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.122\pdf.dll

2014-11-15 11:37 - 2014-11-06 00:56 - 01681224 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.122\ffmpegsumo.dll

2014-11-15 11:37 - 2014-11-06 00:57 - 14910280 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.122\PepperFlash\pepflashplayer.dll

2014-11-15 11:37 - 2014-11-06 00:56 - 01042760 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.122\libglesv2.dll

2014-11-15 11:37 - 2014-11-06 00:56 - 00211272 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.122\libegl.dll

2014-11-18 17:39 - 2015-02-24 17:40 - 00123632 _____ () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe

2014-10-29 00:57 - 2015-02-24 17:40 - 00123680 _____ () C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4\maintainer.exe

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

==================== EXE Association (whitelisted) ===============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\Control Panel\Desktop\\Wallpaper ->

DNS Servers: 192.168.1.1

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

==================== Accounts: =============================

Administrator (S-1-5-21-3201730312-3109150386-4203161257-500 - Administrator - Disabled)

Gość (S-1-5-21-3201730312-3109150386-4203161257-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3201730312-3109150386-4203161257-1002 - Limited - Enabled)

MICHAŁ (S-1-5-21-3201730312-3109150386-4203161257-1000 - Administrator - Enabled) => C:\Users\MICHAŁ

 

==================== Faulty Device Manager Devices =============

 

Name: Teredo Tunneling Pseudo-Interface

Description: Karta tunelowania Teredo firmy Microsoft

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (02/23/2015 09:42:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nazwa aplikacji powodującej błąd: TurbineLauncher.exe, wersja: 200.13.7739.8124, sygnatura czasowa: 0x549371bd

Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000

Kod wyjątku: 0xc0000005

Przesunięcie błędu: 0x0024bccc

Identyfikator procesu powodującego błąd: 0xb6c

Godzina uruchomienia aplikacji powodującej błąd: 0xTurbineLauncher.exe0

Ścieżka aplikacji powodującej błąd: TurbineLauncher.exe1

Ścieżka modułu powodującego błąd: TurbineLauncher.exe2

Identyfikator raportu: TurbineLauncher.exe3

Error: (02/23/2015 09:42:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nazwa aplikacji powodującej błąd: TurbineLauncher.exe, wersja: 200.13.7739.8124, sygnatura czasowa: 0x549371bd

Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000

Kod wyjątku: 0xc0000005

Przesunięcie błędu: 0x002ab3fc

Identyfikator procesu powodującego błąd: 0xa30

Godzina uruchomienia aplikacji powodującej błąd: 0xTurbineLauncher.exe0

Ścieżka aplikacji powodującej błąd: TurbineLauncher.exe1

Ścieżka modułu powodującego błąd: TurbineLauncher.exe2

Identyfikator raportu: TurbineLauncher.exe3

 

Error: (02/23/2015 06:56:25 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu.

.

To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym.

 

Operacja:

   Zbieranie danych modułu zapisującego

Kontekst:

   Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}

   Nazwa modułu zapisującego: System Writer

   Identyfikator wystąpienia modułu zapisującego: {b8f5d0db-dcea-4060-86b8-4ac46f870128}

 

Error: (02/23/2015 11:18:05 AM) (Source: ESENT) (EventID: 481) (User: )

Description: taskhost (1912) WebCacheLocal: Próba odczytu z pliku "C:\Users\MICHAŁ\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" na pozycji względnej 294912 (0x0000000000048000) w ilości 32768 (0x00008000) bajtów zakończyła się niepomyślnie po taskhost0 s z błędem systemowym 23 (0x00000017): "Błąd danych (CRC). ". Operacja odczytu zostanie zakończona z błędem -1021 (0xfffffc03). Jeśli ta sytuacja będzie się powtarzać, plik może być uszkodzony i być może konieczne będzie przywrócenie go z wcześniejszej kopii zapasowej.

Error: (02/23/2015 11:17:48 AM) (Source: ESENT) (EventID: 481) (User: )

Description: taskhost (1912) WebCacheLocal: Próba odczytu z pliku "C:\Users\MICHAŁ\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" na pozycji względnej 294912 (0x0000000000048000) w ilości 32768 (0x00008000) bajtów zakończyła się niepomyślnie po taskhost0 s z błędem systemowym 23 (0x00000017): "Błąd danych (CRC). ". Operacja odczytu zostanie zakończona z błędem -1021 (0xfffffc03). Jeśli ta sytuacja będzie się powtarzać, plik może być uszkodzony i być może konieczne będzie przywrócenie go z wcześniejszej kopii zapasowej.

 

Error: (02/23/2015 11:17:27 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x00000000.

Error: (02/23/2015 11:17:27 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Wystąpił błąd aktywacji licencji (slui.exe), kod błędu:

0x800401F9

Error: (02/19/2015 10:26:48 PM) (Source: ESENT) (EventID: 481) (User: )

Description: taskhost (1692) WebCacheLocal: Próba odczytu z pliku "C:\Users\MICHAŁ\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" na pozycji względnej 294912 (0x0000000000048000) w ilości 32768 (0x00008000) bajtów zakończyła się niepomyślnie po taskhost0 s z błędem systemowym 23 (0x00000017): "Błąd danych (CRC). ". Operacja odczytu zostanie zakończona z błędem -1021 (0xfffffc03). Jeśli ta sytuacja będzie się powtarzać, plik może być uszkodzony i być może konieczne będzie przywrócenie go z wcześniejszej kopii zapasowej.

 

Error: (02/19/2015 10:26:23 PM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x00000000.

Error: (02/19/2015 10:26:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Wystąpił błąd aktywacji licencji (slui.exe), kod błędu:

0x800401F9

 

System errors:

=============

Error: (02/24/2015 08:31:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:31:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:31:32 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:31:32 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:31:12 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:31:12 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:30:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:30:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie C:.

 

Error: (02/24/2015 08:30:44 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:30:32 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Microsoft Office Sessions:

=========================

Error: (02/23/2015 09:42:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: TurbineLauncher.exe200.13.7739.8124549371bdunknown0.0.0.000000000c00000050024bcccb6c01d04fa9366f3ac2C:\Program Files\InfiniteCrisis\TurbineLauncher.exeunknown76724fc9-bb9c-11e4-aeb8-00266c8ac3fa

 

Error: (02/23/2015 09:42:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: TurbineLauncher.exe200.13.7739.8124549371bdunknown0.0.0.000000000c0000005002ab3fca3001d04fa927b4e276C:\Program Files\InfiniteCrisis\TurbineLauncher.exeunknown6e42912c-bb9c-11e4-aeb8-00266c8ac3fa

Error: (02/23/2015 06:56:25 PM) (Source: VSS) (EventID: 8194) (User: )

Description: 0x80070005, Odmowa dostępu.

 

Operacja:

   Zbieranie danych modułu zapisującego

 

Kontekst:

   Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}

   Nazwa modułu zapisującego: System Writer

   Identyfikator wystąpienia modułu zapisującego: {b8f5d0db-dcea-4060-86b8-4ac46f870128}

 

FRST

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-02-2015 01

Ran by MICHAŁ (administrator) on MICHAŁ-KOMPUTER on 24-02-2015 20:31:17

Running from C:\Users\MICHAŁ\Downloads

Loaded Profiles: MICHAŁ (Available profiles: MICHAŁ)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Polski (Polska)

Internet Explorer Version 11 (Default browser: Opera)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe

(TOSHIBA CORPORATION.) C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

() C:\Program Files\screenSHU\screenSHU.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

() C:\Windows\System32\PnkBstrA.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe

() C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4\maintainer.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

 

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [smartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [496184 2010-03-10] (Conexant Systems, Inc.)

HKLM\...\Run: [TWebCamera] => C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2010-02-24] (TOSHIBA CORPORATION.)

HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1697064 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

HKLM\...\Run: [startCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-12-06] (Advanced Micro Devices, Inc.)

HKLM\...\Run: [sunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\Run: [screenSHU] => C:\Program Files\screenSHU\screenSHU.exe [2112000 2013-09-04] ()

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3619160 2015-02-01] (Electronic Arts)

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\Run: [Yahoo! Search] => C:\Users\MICHAŁ\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\dsrlte.exe

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\RunOnce: [Application Restart #0] => C:\Program Files\Google\Chrome\Application\chrome.exe [854344 2014-11-06] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-05-31] (Microsoft Corporation)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR Profile: C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-29]

CHR Extension: (YouTube) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-29]

CHR Extension: (AdBlock Premium) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-11-15]

CHR Extension: (AdBlock) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-12]

CHR Extension: (Google Wallet) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-29]

CHR Extension: (Gmail) - C:\Users\MICHAŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-29]

 

========================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [276992 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed]

R2 MaintainerSvc2.04.9173792; C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4\maintainer.exe [123680 2015-02-24] ()

R2 MaintainerSvc6.37.565328; C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe [123632 2015-02-24] ()

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [1910128 2015-02-01] (Electronic Arts)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-05-29] ()

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 0c632643; "C:\Windows\system32\rundll32.exe" "c:\progra~2\intere~1\InterenetOptimizerSvc.dll",service

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 amdkmdag; C:\Windows\System32\DRIVERS\atipmdag.sys [5340160 2010-03-15] (ATI Technologies Inc.) [File not signed]

S3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [152064 2010-03-15] (Advanced Micro Devices, Inc.) [File not signed]

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [50432 2013-09-19] (Advanced Micro Devices)

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI32.sys [516152 2010-03-05] (Conexant Systems Inc.)

S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [99400 2012-05-12] (MotioninJoy)

R3 PGEffect; C:\Windows\System32\DRIVERS\pgeffect.sys [24064 2009-06-22] (TOSHIBA Corporation)

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

S3 vtany; \??\C:\Windows\vtany.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-02-24 20:30 - 2015-02-24 20:31 - 00009920 _____ () C:\Users\MICHAŁ\Downloads\FRST.txt

2015-02-24 20:27 - 2015-02-24 20:27 - 00000000 ____D () C:\Users\MICHAŁ\Downloads\FRST-OlderVersion

2015-02-24 20:26 - 2015-02-24 20:26 - 00000004 _____ () C:\Users\MICHAŁ\AppData\Roaming\appdataFr2.bin

2015-02-23 21:41 - 2015-02-23 21:41 - 00000000 ____D () C:\Users\MICHAŁ\AppData\Local\Turbine

2015-02-23 18:56 - 2015-02-23 18:56 - 00001046 _____ () C:\Users\Public\Desktop\InfiniteCrisis.lnk

2015-02-23 18:56 - 2015-02-23 18:56 - 00000000 ____D () C:\ProgramData\Turbine

2015-02-23 18:56 - 2015-02-23 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infinite Crisis

2015-02-23 18:55 - 2015-02-23 21:42 - 00000000 ____D () C:\Program Files\InfiniteCrisis

2015-02-23 17:07 - 2015-02-23 17:17 - 144015416 _____ () C:\Users\MICHAŁ\Downloads\InfiniteCrisis-GLOBAL_Setup.exe

2015-02-23 11:40 - 2015-02-24 20:31 - 00000000 ____D () C:\FRST

2015-02-23 11:40 - 2015-02-24 20:27 - 01127424 _____ (Farbar) C:\Users\MICHAŁ\Downloads\FRST.exe

2015-02-23 11:11 - 2015-02-23 11:12 - 02126848 _____ () C:\Users\MICHAŁ\Downloads\adwcleaner_4.111.exe

2015-02-21 00:21 - 2015-02-21 00:21 - 00037888 _____ () C:\Users\MICHAŁ\Downloads\LO II(11).xls

2015-02-19 19:27 - 2015-02-19 19:27 - 00000000 ____D () C:\Users\MICHAŁ\AppData\Local\UWebKit151

2015-02-19 19:26 - 2015-02-19 19:26 - 00001287 _____ () C:\Users\MICHAŁ\Desktop\Shards of War.lnk

2015-02-19 19:26 - 2015-02-19 19:26 - 00000000 ____D () C:\Users\MICHAŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shards of War

2015-02-19 19:24 - 2015-02-19 19:25 - 23999840 _____ (Bigpoint GmbH ) C:\Users\MICHAŁ\Downloads\ShardsOfWarSetup.exe

2015-02-13 14:28 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-02-13 14:28 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-11 21:01 - 2015-01-15 08:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 21:01 - 2015-01-15 08:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-02-11 21:01 - 2015-01-15 08:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-02-11 21:01 - 2015-01-15 08:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-02-11 21:01 - 2015-01-15 08:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 21:01 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-02-11 21:01 - 2015-01-15 08:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-02-11 21:01 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-02-11 21:01 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 21:01 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-02-11 21:01 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 21:01 - 2015-01-15 05:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 21:01 - 2015-01-09 02:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-11 21:00 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-02-11 21:00 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 21:00 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 21:00 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 21:00 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-02-11 21:00 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-02-11 21:00 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 21:00 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-02-11 21:00 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-02-11 21:00 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 21:00 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 21:00 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-02-11 21:00 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-02-11 21:00 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-02-11 21:00 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-02-11 21:00 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-02-11 21:00 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-02-11 21:00 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 21:00 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-02-11 21:00 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-02-11 21:00 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 21:00 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-02-11 21:00 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 21:00 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 21:00 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 21:00 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-02-11 21:00 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 21:00 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 21:00 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 21:00 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-02-11 21:00 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-02-11 20:59 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 20:59 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-03 16:39 - 2015-02-03 16:39 - 00615824 _____ () C:\Users\MICHAŁ\Downloads\Java_setup.exe

2015-01-29 20:44 - 2015-01-30 16:11 - 00004750 _____ () C:\Users\MICHAŁ\Desktop\olaaa.txt

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-02-24 20:25 - 2014-05-29 07:17 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-24 20:23 - 2014-05-28 12:13 - 01782350 _____ () C:\Windows\WindowsUpdate.log

2015-02-24 20:22 - 2009-07-14 05:39 - 00063732 _____ () C:\Windows\setupact.log

2015-02-24 20:09 - 2009-07-14 05:34 - 00031200 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-24 20:09 - 2009-07-14 05:34 - 00031200 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-24 19:40 - 2014-11-15 11:35 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-24 17:40 - 2014-11-18 22:29 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7

2015-02-24 17:40 - 2014-10-29 19:54 - 00000000 ____D () C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4

2015-02-24 11:40 - 2014-11-15 11:35 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-23 11:29 - 2014-06-04 13:28 - 00000000 ____D () C:\Users\MICHAŁ\AppData\Local\screenSHU

2015-02-23 11:18 - 2014-07-25 12:16 - 00000000 ____D () C:\ProgramData\Origin

2015-02-23 11:18 - 2014-07-25 12:16 - 00000000 ____D () C:\Program Files\Origin

2015-02-23 11:17 - 2014-05-29 11:15 - 00028932 _____ () C:\Windows\PFRO.log

2015-02-23 11:17 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-23 11:16 - 2014-11-15 11:07 - 00000000 ____D () C:\AdwCleaner

2015-02-23 11:14 - 2014-12-12 15:23 - 00000000 ____D () C:\ProgramData\McAfee Security Scan

2015-02-19 22:29 - 2014-11-05 23:47 - 00000000 ____D () C:\ProgramData\boost_interprocess

2015-02-16 19:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache

2015-02-13 18:38 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL

2015-02-12 15:07 - 2009-07-14 05:33 - 00268232 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-12 14:41 - 2014-06-03 16:48 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-12 14:35 - 2014-06-03 16:48 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-12 14:33 - 2014-06-21 19:58 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-05 19:25 - 2014-05-29 07:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-02-05 19:25 - 2014-05-29 07:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-02-01 11:05 - 2014-07-25 12:28 - 00000000 ____D () C:\Users\MICHAŁ\AppData\Roaming\Origin

==================== Files in the root of some directories =======

2015-02-24 20:26 - 2015-02-24 20:26 - 0000004 _____ () C:\Users\MICHAŁ\AppData\Roaming\appdataFr2.bin

2014-05-29 10:56 - 2014-05-29 10:56 - 0138904 _____ () C:\Users\MICHAŁ\AppData\Roaming\PnkBstrK.sys

2014-11-07 16:59 - 2014-11-15 10:25 - 0000092 _____ () C:\Users\MICHAŁ\AppData\Roaming\WB.CFG

Some content of TEMP:

====================

C:\Users\MICHAŁ\AppData\Local\Temp\APNSetup.exe

C:\Users\MICHAŁ\AppData\Local\Temp\dsrsetup.exe

C:\Users\MICHAŁ\AppData\Local\Temp\ebcbb6666ade69cd8d720558fe8f075d.dll

C:\Users\MICHAŁ\AppData\Local\Temp\Quarantine.exe

C:\Users\MICHAŁ\AppData\Local\Temp\res.dll

C:\Users\MICHAŁ\AppData\Local\Temp\sqlite3.dll

 

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll

[2014-05-31 14:19] - [2010-11-20 13:21] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2015-02-23 19:57

 

==================== End Of Log ============================

Opublikowano

Czy po skończony scanie FRST laptop miał się zrestartować? Proszę logi z FIXLOG

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-02-2015 01

Ran by MICHAŁ at 2015-02-25 15:09:45 Run:1

Running from C:\Users\MICHAŁ\Desktop\FRST

Loaded Profiles: MICHAŁ (Available profiles: MICHAŁ)

Boot Mode: Normal

 

==============================================

 

Content of fixlist:

*****************

CloseProcesses:

C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4

C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\...\Run: [Yahoo! Search] => C:\Users\MICHAŁ\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\dsrlte.exe

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

R2 MaintainerSvc2.04.9173792; C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4\maintainer.exe [123680 2015-02-24] ()

R2 MaintainerSvc6.37.565328; C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe [123632 2015-02-24] ()

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

S3 vtany; \??\C:\Windows\vtany.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

CMD: dir /a "C:\Program Files (x86)"

CMD: dir /a "C:\Program Files"

CMD: dir /a "C:\Users\MICHAŁ\AppData\Roaming"

CMD: dir /a "C:\Users\MICHAŁ\AppData\Local"

CMD: dir /a "C:\Users\MICHAŁ\AppData"

EmptyTemp:

*****************

Processes closed successfully.

C:\ProgramData\0fd8dc4b-3fdb-4d7c-a6d4-ff64cff56cc4 => Moved successfully.

C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7 => Moved successfully.

HKU\S-1-5-21-3201730312-3109150386-4203161257-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Yahoo! Search => value deleted successfully.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

MaintainerSvc2.04.9173792 => Service deleted successfully.

MaintainerSvc6.37.565328 => Service deleted successfully.

EagleXNt => Service deleted successfully.

Synth3dVsc => Service deleted successfully.

tsusbhub => Service deleted successfully.

VGPU => Service deleted successfully.

vtany => Service deleted successfully.

xhunter1 => Service deleted successfully.

=========  dir /a "C:\Program Files (x86)" =========

Wolumin w stacji C nie ma etykiety.

Numer seryjny woluminu: 5275-F894

 

Katalog: C:\

 

Nie mo�na odnale�� pliku.

 

========= End of CMD: =========

 

=========  dir /a "C:\Program Files" =========

Wolumin w stacji C nie ma etykiety.

Numer seryjny woluminu: 5275-F894

 

Katalog: C:\Program Files

 

2015-02-25  11:28    <DIR>          .

2015-02-25  11:28    <DIR>          ..

2014-05-29  14:38    <DIR>          Adobe

2014-05-29  06:24    <DIR>          ATI

2014-06-21  21:51    <DIR>          ATI Technologies

2015-02-25  11:28    <DIR>          Common Files

2014-05-29  06:37    <DIR>          CONEXANT

2009-07-14  05:41               174 desktop.ini

2014-06-01  18:58    <DIR>          DVD Maker

2015-02-25  11:28    <DIR>          Electronic Arts

2014-06-04  21:28    <DIR>          Gameforge4D

2014-06-04  19:59    <DIR>          GameforgeLive

2014-07-23  18:53    <DIR>          GOGcom

2014-11-15  11:36    <DIR>          Google

2014-11-12  13:57    <DIR>          Grupa IMAGE

2015-02-23  21:42    <DIR>          InfiniteCrisis

2014-05-29  07:07    <DIR>          InstallShield Installation Information

2015-02-12  14:56    <DIR>          Internet Explorer

2014-11-12  15:47    <DIR>          Java

2009-07-14  09:28    <DIR>          Microsoft Games

2014-09-03  20:39    <DIR>          Microsoft Silverlight

2014-05-31  13:33    <DIR>          Microsoft.NET

2014-07-25  21:49    <DIR>          MotioninJoy

2009-07-14  05:52    <DIR>          MSBuild

2014-07-25  20:40    <DIR>          Opera

2015-02-23  11:18    <DIR>          Origin

2014-07-25  12:29    <DIR>          Origin Games

2014-06-18  23:50    <DIR>          Pando Networks

2014-06-20  19:16    <DIR>          Realtek WLAN Driver

2009-07-14  05:52    <DIR>          Reference Assemblies

2014-06-04  13:27    <DIR>          screenSHU

2014-05-29  07:26    <DIR>          Synaptics

2014-05-29  06:59    <DIR>          TOSHIBA

2009-07-14  05:53    <DIR>          Uninstall Information

2014-06-04  14:45    <DIR>          Windows Defender

2014-07-11  08:50    <DIR>          Windows Journal

2014-06-01  18:58    <DIR>          Windows Mail

2014-06-04  14:45    <DIR>          Windows Media Player

2014-05-28  13:27    <DIR>          Windows NT

2014-06-01  18:58    <DIR>          Windows Photo Viewer

2014-06-01  18:58    <DIR>          Windows Portable Devices

2014-06-01  18:58    <DIR>          Windows Sidebar

2014-05-29  19:58    <DIR>          WinRAR

               1 plik(�w)                174 bajt�w

              42 katalog(�w)  137�114�243�072 bajt�w wolnych

 

========= End of CMD: =========

 

=========  dir /a "C:\Users\MICHAŁ\AppData\Roaming" =========

Wolumin w stacji C nie ma etykiety.

Numer seryjny woluminu: 5275-F894

 

Katalog: C:\Users\MICHA�\AppData\Roaming

 

2015-02-24  20:26    <DIR>          .

2015-02-24  20:26    <DIR>          ..

2014-05-29  14:41    <DIR>          Adobe

2015-02-24  20:26                 4 appdataFr2.bin

2014-05-29  06:28    <DIR>          ATI

2014-11-12  13:57    <DIR>          Grupa IMAGE

2014-05-28  13:27    <DIR>          Identities

2014-06-19  13:31    <DIR>          LolClient

2014-05-29  07:17    <DIR>          Macromedia

2009-07-14  09:28    <DIR>          Media Center Programs

2014-06-21  19:58    <DIR>          Microsoft

2014-07-25  20:40    <DIR>          Opera Software

2015-02-01  11:05    <DIR>          Origin

2014-05-29  10:56           138�904 PnkBstrK.sys

2014-07-06  19:35    <DIR>          Riot Games

2014-10-06  21:26    <DIR>          Tibia

2014-11-15  10:25                92 WB.CFG

2014-05-29  06:24    <DIR>          WinBatch

2014-05-29  19:58    <DIR>          WinRAR

               3 plik(�w)            139�000 bajt�w

              16 katalog(�w)  137�114�243�072 bajt�w wolnych

 

========= End of CMD: =========

 

=========  dir /a "C:\Users\MICHAŁ\AppData\Local" =========

Wolumin w stacji C nie ma etykiety.

Numer seryjny woluminu: 5275-F894

 

Katalog: C:\Users\MICHA�\AppData\Local

 

2015-02-23  21:41    <DIR>          .

2015-02-23  21:41    <DIR>          ..

2014-12-12  15:25    <DIR>          Adobe

2014-06-21  20:04    <DIR>          AMD

2014-05-29  08:31    <DIR>          Apps

2014-05-29  06:28    <DIR>          ATI

2014-05-28  13:27    <JUNCTION>     Dane aplikacji [C:\Users\MICHA�\AppData\Local]

2015-01-16  13:45    <DIR>          Deployment

2014-08-25  19:22    <DIR>          Diagnostics

2014-11-15  11:33    <DIR>          EmieBrowserModeList

2010-01-01  23:44    <DIR>          EmieSiteList

2010-01-01  23:44    <DIR>          EmieUserList

2014-11-12  13:57            58�400 GDIPFONTCACHEV1.DAT

2014-05-29  08:33    <DIR>          Google

2014-05-28  13:27    <JUNCTION>     Historia [C:\Users\MICHA�\AppData\Local\Microsoft\Windows\History]

2015-02-23  11:16         1�515�964 IconCache.db

2014-06-08  15:09    <DIR>          Microsoft

2014-07-25  20:40    <DIR>          Opera Software

2014-07-25  12:28    <DIR>          Origin

2014-06-19  19:54    <DIR>          PMB Files

2015-02-19  19:26    <DIR>          Programs

2014-05-29  14:57    <DIR>          PunkBuster

2015-02-23  11:29    <DIR>          screenSHU

2015-02-25  15:09    <DIR>          Temp

2014-05-28  13:27    <JUNCTION>     Temporary Internet Files [C:\Users\MICHA�\AppData\Local\Microsoft\Windows\Temporary Internet Files]

2015-02-23  21:41    <DIR>          Turbine

2015-02-19  19:27    <DIR>          UWebKit151

2014-05-28  13:27    <DIR>          VirtualStore

               2 plik(�w)          1�574�364 bajt�w

              26 katalog(�w)  137�114�243�072 bajt�w wolnych

========= End of CMD: =========

 

=========  dir /a "C:\Users\MICHAŁ\AppData" =========

 

Wolumin w stacji C nie ma etykiety.

Numer seryjny woluminu: 5275-F894

Katalog: C:\Users\MICHA�\AppData

2014-05-28  13:27    <DIR>          .

2014-05-28  13:27    <DIR>          ..

2015-02-23  21:41    <DIR>          Local

2010-01-02  00:02    <DIR>          LocalLow

2015-02-24  20:26    <DIR>          Roaming

               0 plik(�w)                  0 bajt�w

               5 katalog(�w)  137�114�238�976 bajt�w wolnych

========= End of CMD: =========

EmptyTemp: => Removed 1.4 GB temporary data.

 

The system needed a reboot.

 

==== End of Fixlog 15:10:48 ====

Opublikowano

Z fixów to tyle.

W dzienniku zdarzeń są błędy

 

Error: (02/24/2015 08:30:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie \Device\HarddiskVolume1.

 

Error: (02/24/2015 08:30:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.

Uruchom narzędzie chkdsk na woluminie C:.

uruchom CHKDSK.

  • 2 tygodnie później...

Zarchiwizowany

Ten temat przebywa obecnie w archiwum. Dodawanie nowych odpowiedzi zostało zablokowane.

×
×
  • Dodaj nową pozycję...