Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja: 24-05-2019 Uruchomiony przez Kazz (26-05-2019 12:55:01) Uruchomiony z C:\ Microsoft Windows XP Home Edition Dodatek Service Pack 2 (X86) (2017-05-03 07:33:41) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1292428093-839522115-1343024091-500 - Administrator - Enabled) Gość (S-1-5-21-1292428093-839522115-1343024091-501 - Limited - Disabled) Kazz (S-1-5-21-1292428093-839522115-1343024091-1004 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Kazz Pomocnik (S-1-5-21-1292428093-839522115-1343024091-1000 - Limited - Disabled) SUPPORT_388945a0 (S-1-5-21-1292428093-839522115-1343024091-1002 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKLM\...\uTorrent) (Version: 2.2.1 - ) Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated) ALLPlayer V3.X (HKLM\...\ALLPlayer V3.2_is1) (Version: - MarBit COMPUTERS) ALLSubtitleSearcher 1.1 (HKLM\...\{4B99950B-795E-404F-8A60-E84B20B9A6C5}_is1) (Version: - ALLCinema, Inc.) Archiwizator WinRAR (HKLM\...\WinRAR archiver) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform) Conexant D480 MDC V.92 Modem (HKLM\...\CNXT_MODEM_PCI_VEN_8086&DEV_24x6&SUBSYS_542214F1) (Version: - ) Cool PDF Reader 3.16 (HKLM\...\Cool PDF Reader_is1) (Version: 3.1.6.308 - CoolPDF Software, Inc.) ddt4all version 1.0 (HKLM\...\ddt4all_is1) (Version: 1.0 - ) Dell Photo Printer 720 (HKLM\...\Dell Photo Printer 720) (Version: - ) EaseUS Partition Master 12.0 (HKLM\...\EaseUS Partition Master_is1) (Version: - EaseUS) eduSensus Komputerowy korektor mowy 2008 (HKLM\...\eduSensus Komputerowy korektor mowy 2008_is1) (Version: - KSM PG & YDP) ffdshow [rev 2754] [2009-03-10] (HKLM\...\ffdshow_is1) (Version: 1.0 - ) FordScan2.20 (HKLM\...\FordScan_is1) (Version: - gUeRRa) FORScan version 2.3.16.beta (HKLM\...\{63310483-6490-44CD-B351-8F66C2923070}_is1) (Version: 2.3.16.beta - Alexey Savin) FTDI USB Serial Converter Drivers (HKLM\...\FTDICOMM) (Version: - ) Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.) Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden Haali Media Splitter (HKLM\...\HaaliMkx) (Version: - ) Intel(R) Extreme Graphics 2 Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4363 - ) Karaoke Kolêdy Polskie (HKLM\...\{3FA2D4E2-4858-4DF5-ACCD-8AB773B560F3}_is1) (Version: 1 - Techland) Karaoke Radiowe Hity (HKLM\...\{C8A97605-0DD6-4C9D-8054-7B511496735F}_is1) (Version: 1.0 - Techland) mCore (HKLM\...\{E81667C6-2856-46D6-ABEA-6A2F42166779}) (Version: 9.03.0000 - Intel Corporation) Hidden mDriver (HKLM\...\{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}) (Version: 9.03.0000 - Intel) Hidden mDrWiFi (HKLM\...\{F6090A17-0967-4A8A-B3C3-422A1B514D49}) (Version: 9.03.0000 - Intel Corporation) Hidden mHlpDell (HKLM\...\{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}) (Version: 9.03.0000 - Intel) Hidden Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK (HKLM\...\{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK (HKLM\...\{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM\...\{90110415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) mIWA (HKLM\...\{3E9D596A-61D4-4239-BD19-2DB984D2A16F}) (Version: 9.03.0000 - Intel Corporation) Hidden mLogView (HKLM\...\{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}) (Version: 9.03.0000 - Intel Corporation) Hidden mMHouse (HKLM\...\{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}) (Version: 9.03.0000 - Intel Corporation) Hidden Mozilla Firefox 52.9.0 ESR (x86 pl) (HKLM\...\Mozilla Firefox 52.9.0 ESR (x86 pl)) (Version: 52.9.0 - Mozilla) mPfMgr (HKLM\...\{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}) (Version: 9.03.0000 - Intel Corporation) Hidden mPfWiz (HKLM\...\{90B0D222-8C21-4B35-9262-53B042F18AF9}) (Version: 9.03.0000 - Intel Corporation) Hidden mProSafe (HKLM\...\{23FB368F-1399-4EAC-817C-4B83ECBE3D83}) (Version: 9.00.0000 - Intel) Hidden mSCfg (HKLM\...\{829CD169-E692-48E8-9BDE-A3E8D8B65538}) (Version: 9.03.0000 - Intel Corporation) Hidden mSSO (HKLM\...\{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}) (Version: 9.03.0000 - Intel Corporation) Hidden MSXML 6.0 Parser (KB933579) (HKLM\...\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}) (Version: 6.10.1200.0 - Microsoft Corporation) mWlsSafe (HKLM\...\{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}) (Version: 9.00.0000 - Intel) Hidden mWMI (HKLM\...\{63DB9CCD-2B56-4217-9A3D-507AC78320CA}) (Version: 9.03.0000 - Intel Corporation) Hidden mZConfig (HKLM\...\{94658027-9F16-4509-BBD7-A59FE57C3023}) (Version: 9.03.0000 - Intel Corporation) Hidden NapiProjekt (2.1.0.2287) (HKLM\...\NapiProjekt_is1) (Version: - ) ODF Add-in for Microsoft Word (HKLM\...\{E6738F45-D704-4D83-9E51-24695E717D09}) (Version: 1.0.0 - Clever Age) oggcodecs 0.71.0946 (HKLM\...\oggcodecs) (Version: 0.71.0946 - illiminable) OKI Alert Info (HKLM\...\{9427081E-AC7E-49D4-964F-E2E27C7175BF}) (Version: 1.3.3 - Okidata) OKI Configuration Tool (HKLM\...\{0F55DD09-15EC-4F5D-B517-94852884AEF5}) (Version: 1.6.11 - Okidata) OKI Device Setting (HKLM\...\{D4E9C626-14A8-4AEB-92F3-BE65EC4CFAEF}) (Version: 1.6.11 - Okidata) OKI Network Extension (HKLM\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata) OKI Network Setting (HKLM\...\{099DE9EF-2781-4A72-BD0F-53AAC78A93B2}) (Version: 1.0.5 - Okidata) OKI Storage Manager (HKLM\...\{C7BCF2EA-4AE1-4AF0-9EAB-2252015C4DF2}) (Version: 1.0.8 - Okidata) OKI User Setting (HKLM\...\{C8244493-32A4-4275-8145-D16FFE1D8E36}) (Version: 1.4.7 - Okidata) OpenAL (HKLM\...\OpenAL) (Version: - ) Oprogramowanie Intel(R) PROSet/Wireless (HKLM\...\ProInst) (Version: 11.01.0000 - Intel Corporation) Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - plk) (Version: - Microsoft Corporation) Pakiet zgodności dla systemu Office 2007 (HKLM\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation) PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.9.0 - Prolific Technology INC) Real Alternative 2.0.2 Lite (HKLM\...\RealAlt_is1) (Version: 2.0.2 - ) ScanMaster-ELM 1.4.0.0 DEMO (HKLM\...\ScanMaster-ELM DEMO_is1) (Version: 1.4.0.0 - WGSoft.de) ScanXL Professional (HKLM\...\{2BE87846-415C-4098-A6AE-226931D1C01A}) (Version: 3.2.0 - Palmer Performance Engineering) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 8.2.4.6 - Synaptics) WebFldrs XP (HKLM\...\{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden Winamp (remove only) (HKLM\...\Winamp) (Version: - ) Windows Imaging Component (HKLM\...\WIC) (Version: 3.0.0.0 - Microsoft Corporation) XML Paper Specification Shared Components Language Pack 1.0 (HKLM\...\XPSEPSCLP) (Version: - Microsoft Corporation) Hidden XML Paper Specification Shared Components Pack 1.0 (HKLM\...\XpsEPSC) (Version: - Microsoft Corporation) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1292428093-839522115-1343024091-1004_Classes\CLSID\{010833F3-751A-402F-9FCC-C365B6A12E41}\localserver32 -> E:\Program Files\BESTplayer.exe (Karol Winnicki) [Brak podpisu cyfrowego] CustomCLSID: HKU\S-1-5-21-1292428093-839522115-1343024091-1004_Classes\CLSID\{0A2B8EBA-9B2D-43D7-B82C-CC2D85936BE4}\InprocServer32 -> E:\Program Files\Clever Age\ODF Add-in for Microsoft Word\OdfWord2003Addin.dll (Clever Age) [Brak podpisu cyfrowego] CustomCLSID: HKU\S-1-5-21-1292428093-839522115-1343024091-1004_Classes\CLSID\{17272F86-B718-34B3-91D6-8ADDA044B4E8}\InprocServer32 -> E:\Program Files\Clever Age\ODF Add-in for Microsoft Word\OdfWord2003Addin.dll (Clever Age) [Brak podpisu cyfrowego] CustomCLSID: HKU\S-1-5-21-1292428093-839522115-1343024091-1004_Classes\CLSID\{F209EB38-7C63-3360-95FF-F253FCDF0905}\InprocServer32 -> E:\Program Files\Clever Age\ODF Add-in for Microsoft Word\OdfWord2003Addin.dll (Clever Age) [Brak podpisu cyfrowego] SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - E:\WINDOWS\system32\SHELL32.dll (Microsoft Windows Publisher -> Microsoft Corporation) SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - E:\WINDOWS\system32\SHELL32.dll (Microsoft Windows Publisher -> Microsoft Corporation) SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - E:\WINDOWS\system32\webcheck.dll (Microsoft Windows Publisher -> Microsoft Corporation) SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - E:\WINDOWS\system32\stobject.dll (Microsoft Windows Publisher -> Microsoft Corporation) ShellExecuteHooks: URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - E:\WINDOWS\system32\shell32.dll [8412672 2004-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => E:\WINDOWS\system32\igfxpph.dll [2005-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) WMI:subscription\__FilterToConsumerBinding->\\.\root\subscription:MSFT_UCScenarioControl.Name=\"Microsoft WMI Updating Consumer Scenario Control\"",Filter="\\.\root\subscription:__EventFilter.Name=\"Microsoft WMI Updating Consumer Scenario Control\":: WMI:subscription\__EventFilter->Microsoft WMI Updating Consumer Scenario Control::[Query => SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario'] ==================== Załadowane moduły (filtrowane) ============== 2007-02-21 11:13 - 2007-02-21 11:13 - 000118784 _____ () [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL 2004-08-04 12:00 - 2004-08-04 12:00 - 000006144 _____ () \??\E:\WINDOWS\system32\csrss.exe 2004-08-04 12:00 - 2004-08-04 12:00 - 000504832 _____ () \??\E:\WINDOWS\system32\winlogon.exe 2007-02-21 11:16 - 2007-02-21 11:16 - 000983040 _____ (Intel Corporation ) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 2007-02-21 11:12 - 2007-02-21 11:12 - 000765952 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\C1XStngs.dll 2007-02-21 11:59 - 2007-02-21 11:59 - 000102400 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\C8021PLK.dll 2007-02-21 11:10 - 2007-02-21 11:10 - 000348160 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\DbEngine.dll 2007-02-21 11:28 - 2007-02-21 11:28 - 000643072 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\EvtEng.exe 2007-02-21 11:11 - 2007-02-21 11:11 - 000348160 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\IntStngs.dll 2007-02-21 11:17 - 2007-02-21 11:17 - 000606208 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\MurocApi.dll 2007-02-21 11:11 - 2007-02-21 11:11 - 000901120 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll 2007-02-21 11:10 - 2007-02-21 11:10 - 000516096 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\PsRegApi.dll 2007-02-21 11:10 - 2007-02-21 11:10 - 000327680 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 2007-02-21 11:17 - 2007-02-21 11:17 - 000094208 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll 2007-02-21 11:10 - 2007-02-21 11:10 - 000413696 _____ (Intel Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL 2007-02-21 11:19 - 2007-02-21 11:19 - 000294912 _____ (Intel(R) Corporation) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\WLKeeper.exe 2006-03-08 09:21 - 2006-03-08 09:21 - 001089536 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] E:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) ===================