ADW cleaner: # AdwCleaner v4.200 - Logfile created 03/04/2015 at 18:58:27 # Updated 29/03/2015 by Xplode # Database : 2015-03-29.1 # Operating system : Windows 7 Home Premium Service Pack 1 (x64) # Username : user - USER-KOMPUTER # Running from : C:\Users\user\Desktop\AdwCleaner.exe # Option : Cleaning ***** ***** ***** ***** File Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage File Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage-journal File Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage File Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal ***** ***** ***** ***** ***** ***** ***** ***** -\\ Internet Explorer v11.0.9600.17689 -\\ Google Chrome v41.0.2272.118 - Deleted : hxxp://start.qone8.com/?type=hp&ts=1398268286&from=smt&uid=WDCXWD5000BEVT-24A0RT0_WD-WXH1A807042070420 ************************* AdwCleaner.txt - - AdwCleaner.txt - - AdwCleaner.txt - - AdwCleaner.txt - - AdwCleaner.txt - - AdwCleaner.txt - - ########## EOF - C:\AdwCleaner\AdwCleaner.txt - ##########
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by user at 2015-04-03 19:07:13
Running from C:\Users\user\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with " hidden " flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2635233316-2967414218-1795866016-1000\...\uTorrent) (Version: 3.4.2.38913 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Adobe Reader XI (11.0.10) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.2.2215 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0407 - Disc Soft Ltd)
Energy Management (HKLM-x32\...\{0CE226F3-EB27-4ECD-BBF5-F088716779FD}) (Version: 5.4.0.8 - Lenovo)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (10/19/2009 5.4.0.1) (HKLM\...\0A4175B489A1B4A6E07E11B063A6263480C51D71) (Version: 10/19/2009 5.4.0.1 - Lenovo)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Pytacz Master 5 (HKLM-x32\...\{0D2B124C-8E6B-4427-BC36-68676507D5F3}_is1) (Version: 5.3.2 - MichalJe)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
24-03-2015 16:31:55 Windows Update
25-03-2015 23:40:33 Windows Update
28-03-2015 11:30:17 avast! antivirus system restore point
28-03-2015 11:33:09 Instalacja pakietu sterownika urządzenia: Avast Usługa sieciowa
28-03-2015 15:08:21 Windows Update
29-03-2015 23:56:16 Windows Update
03-04-2015 17:31:48 Windows Update
03-04-2015 17:44:58 Instalacja pakietu sterownika urządzenia: Disc Soft Ltd Kontrolery magazynu
03-04-2015 17:49:45 Installed Microsoft Office Enterprise 2007
03-04-2015 17:57:30 Installed Microsoft Office Enterprise 2007
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1B0B80F1-164A-41F2-A0EF-A5C9215833E0} - System32\Tasks\avast! Emergency Update = & gt; C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-03-28] (Avast Software s.r.o.)
Task: {560DD749-873E-43AA-89BF-2167179FA899} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent = & gt; C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {7FADE05C-2159-4C2A-8F3F-566964ED84AC} - System32\Tasks\GoogleUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)
Task: {8D2995E0-1C58-4072-B861-40A79A575C21} - System32\Tasks\CCleanerSkipUAC = & gt; C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)
Task: {9770263C-0656-4040-9738-CE3EA28AB983} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser = & gt; C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {BE8516C1-4C4A-469A-BA56-1C4FEC6FA24B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess = & gt; C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C57AD19F-FE30-48E1-A923-38BC029F2D34} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)
Task: {FDEC4812-7F6C-4A03-9D54-D10579E7C952} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig = & gt; C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2012-01-10 22:12 - 2012-01-10 22:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-02-23 18:34 - 2009-07-15 16:55 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2015-02-23 18:34 - 2009-07-15 16:55 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2015-03-28 11:32 - 2015-03-28 11:32 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-03-28 11:32 - 2015-03-28 11:32 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-03 11:34 - 2015-04-03 11:34 - 02923520 _____ () C:\Program Files\AVAST Software\Avast\defs\15040300\algo.dll
2015-04-02 13:17 - 2015-03-30 23:07 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libglesv2.dll
2015-04-02 13:17 - 2015-03-30 23:07 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libegl.dll
2015-03-28 11:32 - 2015-03-28 11:32 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-04-02 13:17 - 2015-03-30 23:07 - 09279304 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\pdf.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The " AlternateShell " will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2635233316-2967414218-1795866016-1000\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.254
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-2635233316-2967414218-1795866016-500 - Administrator - Disabled)
Gość (S-1-5-21-2635233316-2967414218-1795866016-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2635233316-2967414218-1795866016-1002 - Limited - Enabled)
user (S-1-5-21-2635233316-2967414218-1795866016-1000 - Administrator - Enabled) = & gt; C:\Users\user
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/03/2015 07:00:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (04/03/2015 06:59:30 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1512) WebCacheLocal: Wystąpił błąd -1811 podczas otwierania pliku dziennika C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\V0100011.log.
Error: (04/03/2015 06:51:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (04/03/2015 06:40:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (04/03/2015 06:27:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: jsdrv.exe, wersja: 1.38.1.1731, sygnatura czasowa: 0x551d7840
Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.18409, sygnatura czasowa: 0x53159a86
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0000d1c8
Identyfikator procesu powodującego błąd: 0x804
Godzina uruchomienia aplikacji powodującej błąd: 0xjsdrv.exe0
Ścieżka aplikacji powodującej błąd: jsdrv.exe1
Ścieżka modułu powodującego błąd: jsdrv.exe2
Identyfikator raportu: jsdrv.exe3
Error: (04/03/2015 06:12:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA " Win32_Processor " AND TargetInstance.LoadPercentage & gt; 990x80041003
Error: (04/03/2015 06:09:29 PM) (Source: MsiInstaller) (EventID: 1024) (User: user-Komputer)
Description: Produkt: Microsoft Office Enterprise 2007 - nie można zainstalować aktualizacji '2007 Microsoft Office Suite Service Pack 2 (SP2)'. Kod błędu 1603. Instalator Windows może tworzyć dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania. Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania: http://go.microsoft.com/fwlink/?LinkId=23127
Error: (04/03/2015 06:09:28 PM) (Source: MsiInstaller) (EventID: 11719) (User: user-Komputer)
Description: Produkt: Microsoft Office Enterprise 2007 — Błąd 1719.Nie można uzyskać dostępu do usługi Instalator Windows. Może mieć to miejsce, jeśli Instalator Windows jest niepoprawnie zainstalowany. Skontaktuj się z działem Pomocy technicznej, aby uzyskać pomoc.
Error: (04/03/2015 05:53:02 PM) (Source: MsiInstaller) (EventID: 11935) (User: user-Komputer)
Description: Produkt: Microsoft Office Office 64-bit Components 2007 — Błąd 1935.Podczas instalacji składnika zestawu {8731EA9C-B0D8-8F16-A01F-C8B3B9A1E18E} wystąpił błąd. HRESULT: 0x80070091. interfejs zestawu: IAssemblyCacheItem, funkcja: Commit, nazwa zestawu: Microsoft.VC80.MFC,version= " 8.0.50727.42 " ,type= " win32 " ,processorArchitecture= " amd64 " ,publicKeyToken= " 1fc8b3b9a1e18e3b "
Error: (04/03/2015 05:48:19 PM) (Source: MsiInstaller) (EventID: 11309) (User: user-Komputer)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.
System errors:
=============
Error: (04/03/2015 07:00:40 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005
Error: (04/03/2015 06:58:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:58:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:58:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Disc Soft Lite Bus Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (04/03/2015 06:58:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Adobe Acrobat Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (04/03/2015 06:58:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:49:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:49:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Instalator modułów systemu Windows niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:49:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (04/03/2015 06:49:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Disc Soft Lite Bus Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU P6100 @ 2.00GHz
Percentage of memory in use: 47%
Total physical RAM: 3894.85 MB
Available physical RAM: 2058.18 MB
Total Pagefile: 7787.89 MB
Available Pagefile: 5708.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:426.73 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 17CF98A5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================