Logi z frst są w załączniku
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 26-11-2014 01
Ran by rafał at 2014-11-29 12:41:49
Running from C:\Users\rafał\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with " hidden " flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
Avast Premier (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software)
Counter-Strike 1.6 ProGressive (HKLM\...\Counter-Strike 1.6) (Version: ProGressive - Skilluj.com)
CrystalDiskInfo 6.2.1 (HKLM\...\CrystalDiskInfo_is1) (Version: 6.2.1 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Farming Simulator 15 (HKLM\...\Farming Simulator 15_is1) (Version: - )
Flashtool (HKLM\...\Flashtool) (Version: 0.9.11.0 - Androxyde)
GTA San Andreas (HKLM\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Light 33.0 (x86 en-US) (HKLM\...\Light 33.0 (x86 en-US)) (Version: 33.0 - Light)
LinuxLive USB Creator (HKLM\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
Malwarebytes Anti-Malware wersja 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM\...\{90850415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9713 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Sterownik 3D Vision 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Sterownik kontrolera 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
Panel sterowania NVIDIA 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Screenshot Captor 4.9.1 (HKLM\...\ScreenshotCaptor_is1) (Version: - )
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)
Sony PC Companion 2.10.235 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.235 - Sony)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - )
Streamripper (Remove only) (HKLM\...\Streamripper) (Version: - )
Testy Bplus 5.1.3.75 (HKLM\...\{81999787-A518-4218-86D5-C5D25E6808F5}_is1) (Version: 5.1.3.75 - Grupa IMAGE sp. z o.o.)
ViPER4Windows wersja 1.0.5 (HKLM\...\{1A0B530D-277E-4735-8A36-65DCF7E157CB}_is1) (Version: 1.0.5 - ViPERs Audio, Inc)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2098677238-3970768381-1918672107-1001_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}\localserver32 - & gt; C:\Users\RAFA~1\AppData\Local\Temp\3989d2.exe ()
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {795F1566-0A36-44B1-9138-C020E16D4E26} - System32\Tasks\{2B51180C-39E0-42DF-9E87-FB3DDBC988AF} = & gt; C:\Program Files\Rockstar Games\GTA San Andreas\gta_sa.exe [2014-11-11] ()
Task: {A6757A3D-781B-4DB8-B497-9AA467BA609B} - System32\Tasks\avast! Emergency Update = & gt; C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-23] (AVAST Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Loaded Modules (whitelisted) =============
2014-11-28 19:44 - 2014-11-28 19:44 - 02904064 _____ () C:\Program Files\AVAST Software\Avast\defs\14112801\algo.dll
2014-11-02 12:33 - 2014-07-02 20:42 - 00107992 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-11-23 08:22 - 2014-11-23 08:22 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-16 08:37 - 2014-10-13 18:15 - 03579392 _____ () C:\Program Files\Light\mozjs.dll
2013-12-13 03:47 - 2013-12-13 03:47 - 00333824 _____ () C:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
2009-03-31 04:54 - 2009-03-31 04:54 - 00040960 _____ () C:\Program Files\Winamp\Plugins\gen_sripper.dll
2009-03-31 05:11 - 2009-03-31 05:11 - 00069632 _____ () C:\PROGRAM FILES\STREAMRIPPER\wstreamripper.exe
2008-09-15 01:12 - 2008-09-15 01:12 - 01465925 _____ () C:\PROGRAM FILES\STREAMRIPPER\libiconv-2.dll
2008-09-15 01:12 - 2008-09-15 01:12 - 00490650 _____ () C:\PROGRAM FILES\STREAMRIPPER\libintl-8.dll
2009-03-31 05:10 - 2009-03-31 05:10 - 00200704 _____ () C:\PROGRAM FILES\STREAMRIPPER\streamripper.dll
2005-12-31 17:18 - 2005-12-31 17:18 - 00040960 _____ () C:\PROGRAM FILES\STREAMRIPPER\ogg.dll
2005-12-31 17:15 - 2005-12-31 17:15 - 01150976 _____ () C:\PROGRAM FILES\STREAMRIPPER\vorbis.dll
2008-11-26 22:28 - 2008-11-26 22:28 - 00059904 _____ () C:\PROGRAM FILES\STREAMRIPPER\zlib1.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The " AlternateShell " will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: c2cautoupdatesvc = & gt; 2
MSCONFIG\Services: c2cpnrsvc = & gt; 2
MSCONFIG\Services: SkypeUpdate = & gt; 2
MSCONFIG\Services: Sony PC Companion = & gt; 3
MSCONFIG\Services: SysMain = & gt; 2
MSCONFIG\startupfolder: C:^Users^rafał^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Torpedo.lnk = & gt; C:\Windows\pss\Torpedo.lnk.Startup
MSCONFIG\startupreg: DAEMON Tools Lite = & gt; " C:\Program Files\DAEMON Tools Lite\DTLite.exe " -autorun
MSCONFIG\startupreg: Skype = & gt; " C:\Program Files\Skype\Phone\Skype.exe " /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion = & gt; " C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe " /Background
========================= Accounts: ==========================
Administrator (S-1-5-21-2098677238-3970768381-1918672107-500 - Administrator - Disabled)
Gość (S-1-5-21-2098677238-3970768381-1918672107-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2098677238-3970768381-1918672107-1003 - Limited - Enabled)
rafał (S-1-5-21-2098677238-3970768381-1918672107-1001 - Administrator - Enabled) = & gt; C:\Users\rafał
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/29/2014 10:52:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " 1 " .
Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (11/29/2014 10:48:21 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " 1 " .
Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (11/29/2014 08:09:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/28/2014 04:42:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/28/2014 04:36:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/27/2014 06:55:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/27/2014 05:01:53 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu.
.
To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym.
Operacja:
Zbieranie danych modułu zapisującego
Kontekst:
Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}
Nazwa modułu zapisującego: System Writer
Identyfikator wystąpienia modułu zapisującego: {e9f4c2d8-3e79-4e05-b58c-78d7d38d1469}
Error: (11/27/2014 04:56:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: ntvdm.exe, wersja: 6.1.7600.16385, sygnatura czasowa: 0x4a5bc158
Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0000ffff
Identyfikator procesu powodującego błąd: 0x1394
Godzina uruchomienia aplikacji powodującej błąd: 0xntvdm.exe0
Ścieżka aplikacji powodującej błąd: ntvdm.exe1
Ścieżka modułu powodującego błąd: ntvdm.exe2
Identyfikator raportu: ntvdm.exe3
Error: (11/27/2014 03:29:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/26/2014 07:33:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
System errors:
=============
Error: (11/29/2014 11:03:48 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.
Error: (11/22/2014 11:06:17 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.
Error: (11/20/2014 08:33:06 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:33:04 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:33:03 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:33:02 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:33:01 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:32:59 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:32:58 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Error: (11/20/2014 08:32:57 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systemu plików na dysku jest uszkodzona i nie nadaje się do użytku.
Uruchom narzędzie chkdsk na woluminie I:.
Microsoft Office Sessions:
=========================
Error: (11/29/2014 10:52:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
Error: (11/29/2014 10:48:21 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language= " & #x2a; " ,processorArchitecture= " amd64 " ,publicKeyToken= " 6595b64144ccf1df " ,type= " win32 " ,version= " 6.0.0.0 " c:\flashtool\FlashTool64.exe
Error: (11/29/2014 08:09:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/28/2014 04:42:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/28/2014 04:36:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/27/2014 06:55:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/27/2014 05:01:53 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Odmowa dostępu.
Operacja:
Zbieranie danych modułu zapisującego
Kontekst:
Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}
Nazwa modułu zapisującego: System Writer
Identyfikator wystąpienia modułu zapisującego: {e9f4c2d8-3e79-4e05-b58c-78d7d38d1469}
Error: (11/27/2014 04:56:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ntvdm.exe6.1.7600.163854a5bc158unknown0.0.0.000000000c00000050000ffff139401d00a5aaee40c75C:\Windows\system32\ntvdm.exeunknownf0cf3009-764d-11e4-983e-000fea3eae42
Error: (11/27/2014 03:29:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (11/26/2014 07:33:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003