Problem z blokowaniem komputera przez dysk twardy

Całe forum

Przeszukaj

Całe forum

Użytkownicy

Tryb drzewa \| Tryb normalny Problem z blokowaniem komputera przez dysk twardy
Jaru Wdrażany Liczba postów: 10	Post: #1 Problem z blokowaniem komputera przez dysk twardy Mój komputer oszalał, co kilkadziesiąt minut dioda dysku świeci się ciągłym światłem i komputer zostaje zablokowany na kilka minut. Wyłączyłem zbędne usługi i programy z autostartu. Regularnie sprawdzam kompa CCleaner, Malwarebytes i Nortonem 360, niestety nic to nie daje. Nie potrafię namierzyć złośliwego procesu lub jakiegoś konfliktu. Bardzo proszę o pomoc. Mój komp to laptop Asus G74S z prockiem Intel Core i7 2630QM 2,0 GHz., pamięć 22 GB RAM, grafika Nvidia GeForce 560M, HDD - dwa dyski twarde Toshiba 1TB. 18.03.2015 20:31
Podziękowania od:

LadyInBlue Pani SuperMod Liczba postów: 19.073	Post: #2 RE: Problem z blokowaniem komputera przez dysk twardy Zrób logi za pomocą FRST [poradnik na ten temat znajdziesz tutaj na forum] i daj je tutaj. Żyj tak, aby twoim znajomym zrobiło się nudno, kiedy umrzesz. Windows ❼ Forum 18.03.2015 20:38
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #3 RE: Problem z blokowaniem komputera przez dysk twardy Kod: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015 Ran by Jaroslaw Halupka (administrator) on PV on 18-03-2015 21: 35: 21 Running from C: \Users\Jarosław Hałupka\Downloads Loaded Profiles: Jaroslaw Halupka (Available profiles: Jaroslaw Halupka) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http: //www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C: \Windows\System32\nvvsvc.exe (NVIDIA Corporation) C: \Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C: \Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C: \Windows\System32\nvvsvc.exe (ABBYY) C: \Program Files (x86)\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe () C: \Program Files\Asus\Rotation Desktop for G Series\AsusUacSvc.exe (Atheros) C: \Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C: \Program Files (x86)\Bluetooth Suite\AdminService.exe (Autodesk, Inc.) C: \Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (ASUSTek Computer Inc.) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.) C: \Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTek Computer Inc.) C: \Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C: \Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (ASUSTeK Computer Inc.) C: \Program Files (x86)\ASUS\Splendid\ColorUService.exe (Autodesk) C: \Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Intel Corporation) C: \Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C: \Program Files\Bonjour\mDNSResponder.exe () C: \ProgramData\DatacardService\HWDeviceService64.exe (Microsoft Corporation) C: \Windows\System32\cmd.exe () C: \Program Files\Autodesk\mrstand3.6.51-max2009\bin\rayserver.exe (Malwarebytes Corporation) C: \Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Huawei Technologies Co., Ltd.) C: \ProgramData\DatacardService\DCSHelper.exe (Microsoft Corporation) C: \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C: \Program Files\NVIDIA Corporation\Display\nvtray.exe () C: \Program Files (x86)\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe () C: \Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe (Microsoft Corporation) C: \Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (NVIDIA Corporation) C: \Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (Symantec Corporation) C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\n360.exe (Symantec Corporation) C: \Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccsvchst.exe (NVIDIA Corporation) C: \Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C: \Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C: \Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Protexis Inc.) C: \Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C: \Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (Microsoft Corporation) C: \Windows\System32\rundll32.exe (Realtek Semiconductor) C: \Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C: \Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C: \Windows\System32\rundll32.exe (Atheros Communications) C: \Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C: \Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Sentelic Corporation) C: \Program Files\FSP\FspUip.exe (Intel® Corporation) C: \Program Files\Intel\TurboBoost\SignalIslandUi.exe (Symantec Corporation) C: \Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccsvchst.exe (ASUSTeK Computer Inc.) C: \Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Microsoft Corporation) C: \Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Mister Group) C: \Program Files (x86)\System Explorer\service\SystemExplorerService64.exe (Intel(R) Corporation) C: \Program Files\Intel\TurboBoost\TurboBoost.exe (Symantec Corporation) C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\n360.exe () C: \ExpressGateUtil\VAWinService.exe (Intel Corporation) C: \Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C: \Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Microsoft Corporation) C: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe (Microsoft Corporation) C: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\fdhost.exe (Mister Group) C: \Program Files (x86)\System Explorer\SystemExplorer.exe (Intel Corporation) C: \Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Windows (R) Win 7 DDK provider) C: \Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C: \Windows\AsScrPro.exe (Autodesk, Inc.) C: \Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe () C: \Program Files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Microsoft Corporation) C: \Windows\System32\perfmon.exe (C. Ghisler & Co.) C: \totalcmd\TOTALCMD.EXE (Malwarebytes Corporation) C: \Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation) C: \Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Mozilla Corporation) C: \Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe (Adobe Systems, Inc.) C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [THXCfg64] => C: \Windows\system32\RunDLL32.exe C: \Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64 HKLM\...\Run: [RTHDVCPL] => C: \Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] => C: \Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] => C: \Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C: \Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C: \Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [Autodesk Sync] => C: \Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.) HKLM\...\Run: [AtherosBtStack] => C: \Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C: \Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations) HKLM\...\Run: [fspuip] => C: \Program Files\FSP\fspuip.exe [4285952 2011-06-19] (Sentelic Corporation) HKLM\...\Run: [ShadowPlay] => C: \Windows\system32\rundll32.exe C: \Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [fst_pl_68] => [X] HKLM-x32\...\Run: [Wireless Console 3] => C: \Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321072 2012-02-02] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [USBChargerPlusTray] => C: \Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1120936 2012-01-30] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [THX TruStudio NB Settings] => C: \Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909312 2011-03-16] (Creative Technology Ltd) HKLM-x32\...\Run: [SystemExplorerAutoStart] => C: \Program Files (x86)\System Explorer\SystemExplorer.exe [3391200 2015-02-17] (Mister Group) HKLM-x32\...\Run: [QuickTime Task] => C: \Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [Nikon Message Center 2] => C: \Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [HControlUser] => C: \Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [FLxHCIm64] => C: \Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [48128 2012-07-19] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [ATKOSD2] => C: \Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [318080 2011-12-22] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C: \Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-24] (ASUS) HKLM-x32\...\Run: [ASUS Screen Saver Protector] => C: \Windows\AsScrPro.exe [3058304 2011-09-27] (ASUS) HKLM-x32\...\Run: [APSDaemon] => C: \Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.) HKLM-x32\...\Run: [ADSK DLMSession] => C: \Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1632216 2012-05-15] (Autodesk, Inc.) HKLM-x32\...\Run: [CPMonitor] => C: \Program Files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe [84464 2011-04-01] () HKU\S-1-5-19\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-20\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Policies\Explorer: [] HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Policies\Explorer: [NoFolderOptions] 0 HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: E - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: F - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: G - G: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {1b30bf0c-e897-11e0-b349-14dae9426e2a} - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {1f1dd620-e619-11e2-9093-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {20951630-a9bb-11e2-9350-742f686997ea} - F: \iStudio.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {24d58410-05e1-11e3-9a0f-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {24d58442-05e1-11e3-9a0f-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {2e188ffb-eb0d-11e2-b75b-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {2eb6e9bd-e8b5-11e2-841c-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {37ed18ac-7ac4-11e2-a04b-14dae9426e2a} - H: \Setup.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {41f93ed8-e878-11e0-ab4a-806e6f6e6963} - G: \InstAll.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {4b0a653c-08fc-11e3-9731-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {542d8c6c-ea4e-11e2-91d6-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {593bd4d1-20a6-11e3-b614-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {5a944963-e864-11e0-b4fe-14dae9426e2a} - D: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {5a94498a-e864-11e0-b4fe-14dae9426e2a} - D: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {62698068-e894-11e0-9e5b-14dae9426e2a} - D: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {6a55c262-08fd-11e3-9f4b-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {6b6cc25f-8f28-11e3-8536-742f686997ea} - H: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {6b6cc261-8f28-11e3-8536-742f686997ea} - H: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {6d48ff07-0bea-11e3-8f48-742f686997ea} - H: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {72ca3b93-e926-11e0-bd2e-14dae9426e2a} - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {72ca3ba8-e926-11e0-bd2e-14dae9426e2a} - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {77496eca-0515-11e3-aa3f-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {876bd087-c115-11e2-8ac7-742f686997ea} - F: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {876bd089-c115-11e2-8ac7-742f686997ea} - F: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {89a7e197-06a8-11e3-a1e4-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {96d2e73d-07f6-11e3-87c8-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {96d2e769-07f6-11e3-87c8-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {986e9ed3-846b-11e3-9a00-742f686997ea} - H: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {a5dff98d-7626-11e3-b107-742f686997ea} - H: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {ab336140-579d-11e3-892b-806e6f6e6963} - G: \AutoRun.exe navigator.hta HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {b01a9568-09a6-11e3-ba2b-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {b01a960a-09a6-11e3-ba2b-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {b15d7f3b-0766-11e3-a3df-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {b15d7f76-0766-11e3-a3df-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {bd855d3a-9305-11e3-9247-742f686997ea} - H: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {c2b851b6-83c2-11e3-9355-742f686997ea} - H: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {d5c6cd18-e93c-11e0-a61e-742f686997ea} - I: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {d83b1d7b-f785-11e2-b4d1-14dae9426e2a} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {db38a541-0843-11e3-a2bb-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {db38a56a-0843-11e3-a2bb-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {e6248d5a-c9ec-11e2-81a5-742f686997ea} - F: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {e7e6e205-e4bd-11e2-afb5-742f686997ea} - E: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {eaa14814-c82a-11e2-ae62-742f686997ea} - E: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {eaa1481c-c82a-11e2-ae62-742f686997ea} - F: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {eaab2e0d-0a8d-11e3-926c-742f686997ea} - G: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {f2fef09c-83c0-11e3-ad8b-14dae9426e2a} - I: \AutoRun.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {f7bc6f2a-ea66-11e0-bd28-742f686997ea} - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\MountPoints2: {f97fc20b-8dfc-11e1-8c2d-14dae9426e2a} - F: \AutoRunCardDetector.exe HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-18\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION Startup: C: \Users\Jarosław Hałupka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.6.lnk ShortcutTarget: Intel(R) Turbo Boost Technology Monitor 2.6.lnk -> C: \Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C: \Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C: \Program Files (x86)\Norton 360\Engine64\21.6.0.32\buShell.dll (Symantec Corporation) ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C: \Program Files (x86)\Norton 360\Engine64\21.6.0.32\buShell.dll (Symantec Corporation) ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C: \Program Files (x86)\Norton 360\Engine64\21.6.0.32\buShell.dll (Symantec Corporation) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C: \Users\Jarosław Hałupka\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120141211 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120141211 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http: //www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http: //www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http: //www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http: //www.google.com HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http: //www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=N360&pvid=21.6.0.32 HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http: //www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=N360&pvid=21.6.0.32 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http: //www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=N360&pvid=21.6.0.32 HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http: //www.google.pl/ URLSearchHook: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 - (No Name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - No File SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 -> DefaultScope {D2FA1CE3-12E0-4205-95F9-81B135B70637} URL = https: //www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 -> {D2FA1CE3-12E0-4205-95F9-81B135B70637} URL = https: //www.google.com/search?q={searchTerms} BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C: \Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2014-10-26] (RealDownloader) BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C: \Program Files (x86)\Norton 360\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20] (Symantec Corporation) BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C: \Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C: \Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-10-26] (RealDownloader) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll [2014-09-20] (Symantec Corporation) BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\IPS\IPSBHO.DLL [2014-07-23] (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C: \Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14] (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C: \Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13] (Atheros Commnucations) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C: \Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14] (Oracle Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C: \Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C: \Program Files (x86)\Norton 360\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20] (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll [2014-09-20] (Symantec Corporation) DPF: HKLM-x32 {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} https: //www.bph.pl/corpo/static/components/bph/SignActivX.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http: //fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {FC11A119-C2F7-46F4-9E32-937ABA26816E} file: ///G: /RA/CdViewer.cab Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{7CD365B1-3FD3-4BF9-9F5D-9FE5639FC7E7}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C: \Users\Jarosław Hałupka\AppData\Roaming\Mozilla\Firefox\Profiles\x00sw8lh.default-1425925165912 FF Homepage: hxxp: //www.google.pl/ FF Plugin: @adobe.com/FlashPlayer -> C: \Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-12] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: [url=http: //windows7forum.pl/microsoft-33418-u]Microsoft[/url].com/NpCtrl,version=1.0 -> c: \Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C: \Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-12] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C: \Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @garmin.com/GpsControl -> C: \Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2011-07-26] (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C: \Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C: \Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-04-14] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C: \Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-04-14] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: [url=http: //windows7forum.pl/microsoft-33418-u]Microsoft[/url].com/NpCtrl,version=1.0 -> c: \Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C: \Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-06-21] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C: \Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-06-21] (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=17.0.15.10 -> c: \program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2014-12-17] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.15 -> C: \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-10-26] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=17.0.15.10 -> c: \program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2014-12-17] (RealPlayer Cloud) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C: \Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C: \Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.) FF Plugin-x32: Adobe Reader -> C: \Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3800235173-1714985790-885244548-1000: @unity3d.com/UnityPlayer,version=1.0 -> C: \Users\Jarosław Hałupka\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-01-10] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2014-12-17] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-10-27] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-10-27] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-10-27] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-10-27] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-10-27] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C: \Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2014-12-17] (RealPlayer Cloud) FF Extension: BPH Sign Plugin - C: \Users\Jarosław Hałupka\AppData\Roaming\Mozilla\Firefox\Profiles\x00sw8lh.default-1425925165912\Extensions\SignPlugin@bph.pl [2015-03-11] FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C: \ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2013.2.1.33\coFFPlgn FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C: \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C: \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-12-17] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C: \ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn FF Extension: Norton Toolbar - C: \ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2015-03-18] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-03-24] FF HKLM-x32\...\Firefox\Extensions: [{338950EA-82DB-44C1-930D-0C28E023C9F0}] - C: \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: Default -> www.wp.pl/?src01=dp120141211 CHR StartupUrls: Default -> "hxxp: //www.wp.pl/?src01=dp120141211", "https: //www.google.pl/" CHR Profile: C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-13] CHR Extension: (Google Drive) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-13] CHR Extension: (YouTube) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-13] CHR Extension: (Google Search) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-13] CHR Extension: (Norton Identity Safe) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-24] CHR Extension: (Norton Security Toolbar) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-12-02] CHR Extension: (Google Wallet) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-27] CHR Extension: (Gmail) - C: \Users\Jarosław Hałupka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-13] CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https: //clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-03] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https: //clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-03] CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ABBYY.Licensing.PDFTransformer.Classic.3.0; C: \Program Files (x86)\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [759048 2010-02-01] (ABBYY) S4 Apple Mobile Device Service; C: \Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) R2 AsusUacSvc; C: \Program Files\Asus\Rotation Desktop for G Series\AsusUacSvc.exe [113840 2010-07-27] () [File not signed] R2 Atheros Bt&Wlan Coex Agent; C: \Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros) [File not signed] R2 AtherosSvc; C: \Program Files (x86)\Bluetooth Suite\adminservice.exe [74912 2011-03-13] (Atheros Commnucations) [File not signed] R2 Autodesk Content Service; C: \Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R2 Autodesk Licensing Service; C: \Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [79360 2011-10-01] (Autodesk) [File not signed] S4 AxAutoMntSrv; C: \Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) S4 Canon Driver Information Assist Service; C: \Program Files\Canon\DIAS\CnxDIAS.exe [5762408 2009-07-31] (CANON INC.) S3 Creative ALchemy AL6 Licensing Service; C: \Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-09-27] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C: \Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-09-27] (Creative Labs) [File not signed] S4 EpsonBidirectionalService; C: \Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed] S4 EpsonScanSvc; C: \Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation) S3 Futuremark SystemInfo Service; C: \Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2014-11-25] (Futuremark) S3 hpqcxs08; C: \Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed] S4 hpqddsvc; C: \Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed] S4 HPSupportSolutionsFrameworkService; C: \Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-03-06] (Hewlett-Packard Company) R2 HWDeviceService64.exe; C: \ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S3 IDriverT; C: \Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 maxmr3651; C: \Program Files\Autodesk\mrstand3.6.51-max2009\bin\rayservice.bat [1523 2014-03-14] () [File not signed] R2 MBAMScheduler; C: \Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C: \Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 mi-raysat_3dsMax2009_32; C: \Program Files (x86)\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [86016 2008-06-02] () [File not signed] R2 mi-raysat_3dsMax2009_64; C: \Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe [86016 2008-06-02] () [File not signed] R2 MSSQL$SQLEXPRESS; c: \Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation) R3 MSSQLFDLauncher; c: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [42160 2014-07-10] (Microsoft Corporation) R2 MSSQLSERVER; c: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation) R2 N360; C: \Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe [265040 2014-09-21] (Symantec Corporation) R2 NCO; C: \Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation) R2 Net Driver HPZ12; C: \Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] R2 NvNetworkService; C: \Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C: \Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S4 Pml Driver HPZ12; C: \Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] R2 RealNetworks Downloader Resolver Service; C: \Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-10-26] () S4 RealPlayer Cloud Service; c: \program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-12-17] (RealNetworks, Inc.) S4 RealPlayerUpdateSvc; C: \Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2014-10-30] () S2 ReportServer; c: \Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2194088 2014-07-10] (Microsoft Corporation) S2 SPMLM; C: \Windows\system32\spm\spmd.exe [631296 2008-05-28] (mental images GmbH) [File not signed] S4 SQLAgent$SQLEXPRESS; c: \Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation) S4 SQLSERVERAGENT; c: \Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation) S4 StarWindServiceAE; C: \Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed] R2 SystemExplorerHelpService; C: \Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Mister Group) S2 UI Assistant Service; C: \Program Files (x86)\PLAY ONLINE\AssistantServices.exe [260976 2011-05-31] () R2 VideAceWindowsService; C: \ExpressGateUtil\VAWinService.exe [91464 2011-03-26] () S4 WinDefend; C: \Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 HPSLPSVC; C: \Users\JAROSA~1\AppData\Local\Temp\7zS13F3\hpslpsvc64.dll [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AiCharger; C: \Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-01-30] (ASUSTek Computer Inc.) R1 ATKWMIACPIIO_; C: \Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [17536 2011-09-07] (ASUS) R1 BHDrvx64; C: \Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20150309.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation) R3 bthathfax; C: \Windows\System32\DRIVERS\bthathfax.sys [75424 2011-03-13] (Microsoft Corporation) R1 ccSet_N360; C: \Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 ccSet_NST; C: \Windows\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation) S3 cecsvad; C: \Windows\System32\drivers\cecvad.sys [23040 2011-12-08] () S3 CSRBC; C: \Windows\System32\Drivers\csrbcx64.sys [38400 2014-04-29] (CSR plc.) R1 eeCtrl; C: \Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-15] (Symantec Corporation) R3 EraserUtilRebootDrv; C: \Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-10] (Symantec Corporation) R3 FLxHCIh; C: \Windows\System32\DRIVERS\FLxHCIh.sys [76584 2012-07-19] (Fresco Logic) R3 fspad_win764; C: \Windows\System32\DRIVERS\fspad_win764.sys [53760 2011-06-19] (Windows (R) Win 7 DDK provider) S3 GemCCID; C: \Windows\System32\DRIVERS\GemCCID.sys [126720 2012-03-28] (Gemalto) R1 IDSVia64; C: \Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20150317.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation) R3 kbfiltr; C: \Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 MBAMProtector; C: \Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C: \Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-18] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C: \Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) R3 NAVENG; C: \Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20150317.025\ENG64.SYS [129752 2015-03-03] (Symantec Corporation) R3 NAVEX15; C: \Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20150317.025\EX64.SYS [2137304 2015-03-03] (Symantec Corporation) R3 nvvad_WaveExtensible; C: \Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S4 RsFx0153; C: \Windows\System32\DRIVERS\RsFx0153.sys [322736 2014-07-10] (Microsoft Corporation) R0 sptd; C: \Windows\System32\Drivers\sptd.sys [386680 2013-11-27] (Duplex Secure Ltd.) R3 SRTSP; C: \Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation) R1 SRTSPX; C: \Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation) R0 SymDS; C: \Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation) R0 SymEFA; C: \Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C: \Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-17] (Symantec Corporation) R1 SymIM; C: \Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation) R1 SymIRON; C: \Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation) R1 SymNetS; C: \Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) U3 ab6j82sk; C: \Windows\System32\Drivers\ab6j82sk.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero size file/folder) S3 cpuz138; \?\C: \Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 EraserUtilDrv11411; \?\C: \Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11411.sys [X] S3 GPUZ; \?\C: \Windows\TEMP\GPUZ.sys [X] S2 sbapifs; system32\DRIVERS\sbapifs.sys [X] U2 TMAgent; No ImagePath [hr] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-18 21: 35 - 2015-03-18 21: 36 - 00044157 _____ () C: \Users\Jarosław Hałupka\Downloads\FRST.txt 2015-03-18 21: 35 - 2015-03-18 21: 35 - 00000000 ____D () C: \FRST 2015-03-18 21: 34 - 2015-03-18 21: 34 - 02095616 _____ (Farbar) C: \Users\Jarosław Hałupka\Downloads\FRST64.exe 2015-03-18 21: 34 - 2015-03-18 21: 34 - 01135104 _____ (Farbar) C: \Users\Jarosław Hałupka\Downloads\FRST(2).exe 2015-03-18 21: 33 - 2015-03-18 21: 33 - 01135104 _____ (Farbar) C: \Users\Jarosław Hałupka\Downloads\FRST(1).exe 2015-03-18 21: 32 - 2015-03-18 21: 32 - 01135104 _____ (Farbar) C: \Users\Jarosław Hałupka\Downloads\FRST.exe 2015-03-18 13: 19 - 2015-03-18 13: 19 - 00000000 ___RD () C: \Users\Jarosław Hałupka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2015-03-18 08: 43 - 2015-03-18 13: 18 - 00000336 _____ () C: \Windows\setupact.log 2015-03-18 08: 43 - 2015-03-18 08: 43 - 00000000 _____ () C: \Windows\setuperr.log 2015-03-18 08: 42 - 2015-03-18 08: 42 - 01445088 _____ () C: \Windows\system32\FNTCACHE.DAT 2015-03-18 00: 45 - 2015-03-18 00: 45 - 00451440 _____ () C: \Users\Jarosław Hałupka\AppData\Local\GDIPFONTCACHEV1.DAT 2015-03-17 23: 36 - 2015-03-17 23: 36 - 01102128 _____ () C: \Users\Jarosław Hałupka\Downloads\ProcessMonitor.zip 2015-03-17 23: 36 - 2015-03-17 23: 36 - 00000000 ____D () C: \Users\Jarosław Hałupka\Downloads\ProcessMonitor 2015-03-17 18: 51 - 2015-03-17 18: 51 - 00000000 ____D () C: \Users\Jarosław Hałupka\AppData\Local\SvchostViewer 2015-03-17 18: 32 - 2015-03-17 18: 32 - 00040538 _____ () C: \Users\Jarosław Hałupka\Downloads\SvchostViewer0.5.0.1.zip 2015-03-16 13: 17 - 2015-03-16 13: 17 - 00001142 _____ () C: \Users\Public\Desktop\OpenOffice 4.1.1.lnk 2015-03-16 13: 17 - 2015-03-16 13: 17 - 00000000 ___SD () C: \ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2015-03-16 13: 15 - 2015-03-16 13: 15 - 00000000 ____D () C: \Users\Jarosław Hałupka\Desktop\OpenOffice 4.1.1 (pl) Installation Files 2015-03-16 13: 12 - 2015-03-16 13: 14 - 131579802 _____ () C: \Users\Jarosław Hałupka\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_pl.exe 2015-03-15 12: 59 - 2013-09-10 03: 47 - 00078936 ____R (Symantec Corporation) C: \Windows\system32\Drivers\SymIMV.sys 2015-03-15 12: 57 - 2015-03-15 12: 57 - 00880208 _____ (Google Inc.) C: \Users\Jarosław Hałupka\Downloads\ChromeSetup.exe 2015-03-11 08: 56 - 2015-02-20 05: 41 - 00041984 _____ (Microsoft Corporation) C: \Windows\system32\lpk.dll 2015-03-11 08: 56 - 2015-02-20 05: 40 - 00100864 _____ (Microsoft Corporation) C: \Windows\system32\fontsub.dll 2015-03-11 08: 56 - 2015-02-20 05: 40 - 00046080 _____ (Adobe Systems) C: \Windows\system32\atmlib.dll 2015-03-11 08: 56 - 2015-02-20 05: 40 - 00014336 _____ (Microsoft Corporation) C: \Windows\system32\dciman32.dll 2015-03-11 08: 56 - 2015-02-20 05: 13 - 00070656 _____ (Microsoft Corporation) C: \Windows\SysWOW64\fontsub.dll 2015-03-11 08: 56 - 2015-02-20 05: 13 - 00034304 _____ (Adobe Systems) C: \Windows\SysWOW64\atmlib.dll 2015-03-11 08: 56 - 2015-02-20 05: 13 - 00010240 _____ (Microsoft Corporation) C: \Windows\SysWOW64\dciman32.dll 2015-03-11 08: 56 - 2015-02-20 05: 12 - 00025600 _____ (Microsoft Corporation) C: \Windows\SysWOW64\lpk.dll 2015-03-11 08: 56 - 2015-02-20 04: 29 - 00372224 _____ (Adobe Systems Incorporated) C: \Windows\system32\atmfd.dll 2015-03-11 08: 56 - 2015-02-20 04: 09 - 00299008 _____ (Adobe Systems Incorporated) C: \Windows\SysWOW64\atmfd.dll 2015-03-11 08: 56 - 2015-02-03 04: 34 - 05554104 _____ (Microsoft Corporation) C: \Windows\system32\ntoskrnl.exe 2015-03-11 08: 56 - 2015-02-03 04: 34 - 00693176 _____ (Microsoft Corporation) C: \Windows\system32\winload.efi 2015-03-11 08: 56 - 2015-02-03 04: 34 - 00094656 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\mountmgr.sys 2015-03-11 08: 56 - 2015-02-03 04: 33 - 00616360 _____ (Microsoft Corporation) C: \Windows\system32\winresume.efi 2015-03-11 08: 56 - 2015-02-03 04: 31 - 14632960 _____ (Microsoft Corporation) C: \Windows\system32\wmp.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 04121600 _____ (Microsoft Corporation) C: \Windows\system32\mf.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 01574400 _____ (Microsoft Corporation) C: \Windows\system32\quartz.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00782848 _____ (Microsoft Corporation) C: \Windows\system32\wmdrmsdk.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00641024 _____ (Microsoft Corporation) C: \Windows\system32\msscp.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00503808 _____ (Microsoft Corporation) C: \Windows\system32\srcore.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00500224 _____ (Microsoft Corporation) C: \Windows\system32\AUDIOKSE.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00432128 _____ (Microsoft Corporation) C: \Windows\system32\mfplat.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00371712 _____ (Microsoft Corporation) C: \Windows\system32\qdvd.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00325632 _____ (Microsoft Corporation) C: \Windows\system32\msnetobj.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00229376 _____ (Microsoft Corporation) C: \Windows\system32\wintrust.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00206848 _____ (Microsoft Corporation) C: \Windows\system32\mfps.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00188416 _____ (Microsoft Corporation) C: \Windows\system32\pcasvc.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00063488 _____ (Microsoft Corporation) C: \Windows\system32\setbcdlocale.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00050176 _____ (Microsoft Corporation) C: \Windows\system32\srclient.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00037376 _____ (Microsoft Corporation) C: \Windows\system32\pcadm.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00011264 _____ (Microsoft Corporation) C: \Windows\system32\msmmsp.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00009728 _____ (Microsoft Corporation) C: \Windows\system32\spwmp.dll 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00005120 _____ (Microsoft Corporation) C: \Windows\system32\msdxm.ocx 2015-03-11 08: 56 - 2015-02-03 04: 31 - 00005120 _____ (Microsoft Corporation) C: \Windows\system32\dxmasf.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 12625920 _____ (Microsoft Corporation) C: \Windows\system32\wmploc.DLL 2015-03-11 08: 56 - 2015-02-03 04: 30 - 01480192 _____ (Microsoft Corporation) C: \Windows\system32\crypt32.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 01202176 _____ (Microsoft Corporation) C: \Windows\system32\drmv2clt.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 01069056 _____ (Microsoft Corporation) C: \Windows\system32\cryptui.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00842240 _____ (Microsoft Corporation) C: \Windows\system32\blackbox.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00680960 _____ (Microsoft Corporation) C: \Windows\system32\audiosrv.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00631808 _____ (Microsoft Corporation) C: \Windows\system32\evr.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00497664 _____ (Microsoft Corporation) C: \Windows\system32\drmmgrtn.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00440832 _____ (Microsoft Corporation) C: \Windows\system32\AudioEng.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00296960 _____ (Microsoft Corporation) C: \Windows\system32\rstrui.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00296448 _____ (Microsoft Corporation) C: \Windows\system32\AudioSes.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00284672 _____ (Microsoft Corporation) C: \Windows\system32\EncDump.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00187904 _____ (Microsoft Corporation) C: \Windows\system32\cryptsvc.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00146944 _____ (Microsoft Corporation) C: \Windows\system32\appidpolicyconverter.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00140288 _____ (Microsoft Corporation) C: \Windows\system32\cryptnet.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00126464 _____ (Microsoft Corporation) C: \Windows\system32\audiodg.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00112640 _____ (Microsoft Corporation) C: \Windows\system32\smss.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00082432 _____ (Microsoft Corporation) C: \Windows\system32\cryptsp.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00058880 _____ (Microsoft Corporation) C: \Windows\system32\appidapi.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00055808 _____ (Microsoft Corporation) C: \Windows\system32\rrinstaller.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00043520 _____ (Microsoft Corporation) C: \Windows\system32\csrsrv.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00032256 _____ (Microsoft Corporation) C: \Windows\system32\appidsvc.dll 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00024576 _____ (Microsoft Corporation) C: \Windows\system32\mfpmp.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00017920 _____ (Microsoft Corporation) C: \Windows\system32\appidcertstorecheck.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00011264 _____ (Microsoft Corporation) C: \Windows\system32\pcawrk.exe 2015-03-11 08: 56 - 2015-02-03 04: 30 - 00009728 _____ (Microsoft Corporation) C: \Windows\system32\pcalua.exe 2015-03-11 08: 56 - 2015-02-03 04: 29 - 00008704 _____ (Microsoft Corporation) C: \Windows\system32\pcaevts.dll 2015-03-11 08: 56 - 2015-02-03 04: 28 - 00006656 _____ (Microsoft Corporation) C: \Windows\system32\apisetschema.dll 2015-03-11 08: 56 - 2015-02-03 04: 28 - 00002048 _____ (Microsoft Corporation) C: \Windows\system32\mferror.dll 2015-03-11 08: 56 - 2015-02-03 04: 19 - 00663552 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\PEAuth.sys 2015-03-11 08: 56 - 2015-02-03 04: 16 - 03973048 _____ (Microsoft Corporation) C: \Windows\SysWOW64\ntkrnlpa.exe 2015-03-11 08: 56 - 2015-02-03 04: 16 - 03917760 _____ (Microsoft Corporation) C: \Windows\SysWOW64\ntoskrnl.exe 2015-03-11 08: 56 - 2015-02-03 04: 12 - 11411968 _____ (Microsoft Corporation) C: \Windows\SysWOW64\wmp.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 03209728 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mf.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 01329664 _____ (Microsoft Corporation) C: \Windows\SysWOW64\quartz.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 01174528 _____ (Microsoft Corporation) C: \Windows\SysWOW64\crypt32.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 01005056 _____ (Microsoft Corporation) C: \Windows\SysWOW64\cryptui.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00988160 _____ (Microsoft Corporation) C: \Windows\SysWOW64\drmv2clt.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00744960 _____ (Microsoft Corporation) C: \Windows\SysWOW64\blackbox.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00617984 _____ (Microsoft Corporation) C: \Windows\SysWOW64\wmdrmsdk.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00519680 _____ (Microsoft Corporation) C: \Windows\SysWOW64\qdvd.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00504320 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msscp.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00489984 _____ (Microsoft Corporation) C: \Windows\SysWOW64\evr.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00442880 _____ (Microsoft Corporation) C: \Windows\SysWOW64\AUDIOKSE.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00406016 _____ (Microsoft Corporation) C: \Windows\SysWOW64\drmmgrtn.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00374784 _____ (Microsoft Corporation) C: \Windows\SysWOW64\AudioEng.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00354816 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mfplat.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00265216 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msnetobj.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00195584 _____ (Microsoft Corporation) C: \Windows\SysWOW64\AudioSes.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00179200 _____ (Microsoft Corporation) C: \Windows\SysWOW64\wintrust.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00143872 _____ (Microsoft Corporation) C: \Windows\SysWOW64\cryptsvc.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00103936 _____ (Microsoft Corporation) C: \Windows\SysWOW64\cryptnet.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00103424 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mfps.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00081408 _____ (Microsoft Corporation) C: \Windows\SysWOW64\cryptsp.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00050688 _____ (Microsoft Corporation) C: \Windows\SysWOW64\appidapi.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00043008 _____ (Microsoft Corporation) C: \Windows\SysWOW64\srclient.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00008192 _____ (Microsoft Corporation) C: \Windows\SysWOW64\spwmp.dll 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00004096 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msdxm.ocx 2015-03-11 08: 56 - 2015-02-03 04: 12 - 00004096 _____ (Microsoft Corporation) C: \Windows\SysWOW64\dxmasf.dll 2015-03-11 08: 56 - 2015-02-03 04: 11 - 12625408 _____ (Microsoft Corporation) C: \Windows\SysWOW64\wmploc.DLL 2015-03-11 08: 56 - 2015-02-03 04: 11 - 00050176 _____ (Microsoft Corporation) C: \Windows\SysWOW64\rrinstaller.exe 2015-03-11 08: 56 - 2015-02-03 04: 11 - 00023040 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mfpmp.exe 2015-03-11 08: 56 - 2015-02-03 04: 09 - 00002048 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mferror.dll 2015-03-11 08: 56 - 2015-02-03 04: 08 - 00006656 _____ (Microsoft Corporation) C: \Windows\SysWOW64\apisetschema.dll 2015-03-11 08: 56 - 2015-02-03 03: 32 - 00061440 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\appid.sys 2015-03-11 08: 56 - 2015-01-31 04: 48 - 03179520 _____ (Microsoft Corporation) C: \Windows\system32\rdpcorets.dll 2015-03-11 08: 56 - 2015-01-31 04: 48 - 00016384 _____ (Microsoft Corporation) C: \Windows\system32\RdpGroupPolicyExtension.dll 2015-03-11 08: 56 - 2015-01-31 00: 56 - 00243200 _____ (Microsoft Corporation) C: \Windows\system32\rdpudd.dll 2015-03-11 08: 56 - 2014-10-31 23: 24 - 00619056 _____ (Microsoft Corporation) C: \Windows\system32\winload.exe 2015-03-11 08: 55 - 2015-03-06 06: 56 - 00155576 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\ksecpkg.sys 2015-03-11 08: 55 - 2015-03-06 06: 56 - 00095680 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\ksecdd.sys 2015-03-11 08: 55 - 2015-03-06 06: 42 - 01461760 _____ (Microsoft Corporation) C: \Windows\system32\lsasrv.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00728064 _____ (Microsoft Corporation) C: \Windows\system32\kerberos.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00341504 _____ (Microsoft Corporation) C: \Windows\system32\schannel.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00314880 _____ (Microsoft Corporation) C: \Windows\system32\msv1_0.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00309760 _____ (Microsoft Corporation) C: \Windows\system32\ncrypt.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00210944 _____ (Microsoft Corporation) C: \Windows\system32\wdigest.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00136192 _____ (Microsoft Corporation) C: \Windows\system32\sspicli.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00086528 _____ (Microsoft Corporation) C: \Windows\system32\TSpkg.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00029184 _____ (Microsoft Corporation) C: \Windows\system32\sspisrv.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00028160 _____ (Microsoft Corporation) C: \Windows\system32\secur32.dll 2015-03-11 08: 55 - 2015-03-06 06: 42 - 00022016 _____ (Microsoft Corporation) C: \Windows\system32\credssp.dll 2015-03-11 08: 55 - 2015-03-06 06: 41 - 00064000 _____ (Microsoft Corporation) C: \Windows\system32\auditpol.exe 2015-03-11 08: 55 - 2015-03-06 06: 41 - 00031232 _____ (Microsoft Corporation) C: \Windows\system32\lsass.exe 2015-03-11 08: 55 - 2015-03-06 06: 38 - 00146432 _____ (Microsoft Corporation) C: \Windows\system32\msaudite.dll 2015-03-11 08: 55 - 2015-03-06 06: 36 - 00686080 _____ (Microsoft Corporation) C: \Windows\system32\adtschema.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00550912 _____ (Microsoft Corporation) C: \Windows\SysWOW64\kerberos.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00259584 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msv1_0.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00248832 _____ (Microsoft Corporation) C: \Windows\SysWOW64\schannel.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00221184 _____ (Microsoft Corporation) C: \Windows\SysWOW64\ncrypt.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00172032 _____ (Microsoft Corporation) C: \Windows\SysWOW64\wdigest.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00065536 _____ (Microsoft Corporation) C: \Windows\SysWOW64\TSpkg.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00022016 _____ (Microsoft Corporation) C: \Windows\SysWOW64\secur32.dll 2015-03-11 08: 55 - 2015-03-06 06: 10 - 00017408 _____ (Microsoft Corporation) C: \Windows\SysWOW64\credssp.dll 2015-03-11 08: 55 - 2015-03-06 06: 09 - 00096768 _____ (Microsoft Corporation) C: \Windows\SysWOW64\sspicli.dll 2015-03-11 08: 55 - 2015-03-06 06: 09 - 00050176 _____ (Microsoft Corporation) C: \Windows\SysWOW64\auditpol.exe 2015-03-11 08: 55 - 2015-03-06 06: 07 - 00146432 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msaudite.dll 2015-03-11 08: 55 - 2015-03-06 06: 06 - 00686080 _____ (Microsoft Corporation) C: \Windows\SysWOW64\adtschema.dll 2015-03-11 08: 55 - 2015-02-13 06: 26 - 12875264 _____ (Microsoft Corporation) C: \Windows\SysWOW64\shell32.dll 2015-03-11 08: 55 - 2015-02-13 06: 22 - 14177280 _____ (Microsoft Corporation) C: \Windows\system32\shell32.dll 2015-03-11 08: 55 - 2015-02-03 04: 31 - 00215552 _____ (Microsoft Corporation) C: \Windows\system32\ubpm.dll 2015-03-11 08: 55 - 2015-02-03 04: 12 - 00171520 _____ (Microsoft Corporation) C: \Windows\SysWOW64\ubpm.dll 2015-03-11 08: 55 - 2015-01-31 00: 56 - 00459336 _____ (Microsoft Corporation) C: \Windows\system32\Drivers\cng.sys 2015-03-11 08: 54 - 2015-03-06 06: 39 - 00060416 _____ (Microsoft Corporation) C: \Windows\system32\msobjs.dll 2015-03-11 08: 54 - 2015-03-06 06: 07 - 00060416 _____ (Microsoft Corporation) C: \Windows\SysWOW64\msobjs.dll 2015-03-11 08: 54 - 2015-02-26 04: 25 - 03204096 _____ (Microsoft Corporation) C: \Windows\system32\win32k.sys 2015-03-11 08: 54 - 2015-02-24 04: 15 - 00389800 _____ (Microsoft Corporation) C: \Windows\system32\iedkcs32.dll 2015-03-11 08: 54 - 2015-02-24 03: 32 - 00342696 _____ (Microsoft Corporation) C: \Windows\SysWOW64\iedkcs32.dll 2015-03-11 08: 54 - 2015-02-21 02: 16 - 25021440 _____ (Microsoft Corporation) C: \Windows\system32\mshtml.dll 2015-03-11 08: 54 - 2015-02-21 01: 41 - 12827648 _____ (Microsoft Corporation) C: \Windows\SysWOW64\ieframe.dll 2015-03-11 08: 54 - 2015-02-21 01: 27 - 00418304 _____ (Microsoft Corporation) C: \Windows\SysWOW64\dxtmsft.dll 2015-03-11 08: 54 - 2015-02-21 01: 27 - 00285696 _____ (Microsoft Corporation) C: \Windows\SysWOW64\dxtrans.dll 2015-03-11 08: 54 - 2015-02-21 01: 25 - 19720192 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mshtml.dll 2015-03-11 08: 54 - 2015-02-21 00: 58 - 00092160 _____ (Microsoft Corporation) C: \Windows\system32\mshtmled.dll 2015-03-11 08: 54 - 2015-02-21 00: 32 - 00076288 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mshtmled.dll 2015-03-11 08: 54 - 2015-02-20 04: 06 - 02724864 _____ (Microsoft Corporation) C: \Windows\system32\mshtml.tlb 2015-03-11 08: 54 - 2015-02-20 04: 05 - 00004096 _____ (Microsoft Corporation) C: \Windows\system32\ieetwcollectorres.dll 2015-03-11 08: 54 - 2015-02-20 03: 50 - 00066560 _____ (Microsoft Corporation) C: \Windows\system32\iesetup.dll 2015-03-11 08: 54 - 2015-02-20 03: 49 - 00584192 _____ (Microsoft Corporation) C: \Windows\system32\vbscript.dll 2015-03-11 08: 54 - 2015-02-20 03: 49 - 00048640 _____ (Microsoft Corporation) C: \Windows\system32\ieetwproxystub.dll 2015-03-11 08: 54 - 2015-02-20 03: 48 - 02886144 _____ (Microsoft Corporation) C: \Windows\system32\iertutil.dll 2015-03-11 08: 54 - 2015-02-20 03: 47 - 00088064 _____ (Microsoft Corporation) C: \Windows\system32\MshtmlDac.dll 2015-03-11 08: 54 - 2015-02-20 03: 41 - 00054784 _____ (Microsoft Corporation) C: \Windows\system32\jsproxy.dll 2015-03-11 08: 54 - 2015-02-20 03: 40 - 00034304 _____ (Microsoft Corporation) C: \Windows\system32\iernonce.dll 2015-03-11 08: 54 - 2015-02-20 03: 36 - 00633856 _____ (Microsoft Corporation) C: \Windows\system32\ieui.dll 2015-03-11 08: 54 - 2015-02-20 03: 35 - 00144384 _____ (Microsoft Corporation) C: \Windows\system32\ieUnatt.exe 2015-03-11 08: 54 - 2015-02-20 03: 35 - 00114688 _____ (Microsoft Corporation) C: \Windows\system32\ieetwcollector.exe 2015-03-11 08: 54 - 2015-02-20 03: 34 - 00814080 _____ (Microsoft Corporation) C: \Windows\system32\jscript9diag.dll 2015-03-11 08: 54 - 2015-02-20 03: 32 - 06035456 _____ (Microsoft Corporation) C: \Windows\system32\jscript9.dll 2015-03-11 08: 54 - 2015-02-20 03: 26 - 00968704 _____ (Microsoft Corporation) C: \Windows\system32\MsSpellCheckingFacility.exe 2015-03-11 08: 54 - 2015-02-20 03: 22 - 02724864 _____ (Microsoft Corporation) C: \Windows\SysWOW64\mshtml.tlb 2015-03-11 08: 54 - 2015-02-20 03: 22 - 00490496 _____ (Microsoft Corporation) C: \Windows\system32\dxtmsft.dll 2015-03-11 08: 54 - 2015-02-20 03: 13 - 00077824 _____ (Microsoft Corporation) C: \Windows\system32\JavaScriptCollectionAgent.dll 2015-03-11 08: 54 - 2015-02-20 03: 09 - 00503296 _____ (Microsoft Corporation) C: \Windows\SysWOW64\vbscript.dll 2015-03-11 08: 54 - 2015-02-20 03: 08 - 00199680 _____ (Microsoft Corporation) C: \Windows\system32\msrating.dll 2015-03-11 08: 54 - 2015-02-20 03: 08 - Notatka została dodana 19.03.2015 10:56. Ostatnia edycja dokonana 19.03.2015 10:56 przez LadyInBlue: Logi umieszczamy w znaczniku [code] (Ten post był ostatnio modyfikowany: 18.03.2015 21:53 przez Jaru.) 18.03.2015 21:53
Podziękowania od:

LadyInBlue Pani SuperMod Liczba postów: 19.073	Post: #4 RE: Problem z blokowaniem komputera przez dysk twardy Widać, że log jest nie cały, daj go np na http://wklej.to/ i daj tu link Żyj tak, aby twoim znajomym zrobiło się nudno, kiedy umrzesz. Windows ❼ Forum 18.03.2015 22:09
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #5 RE: Problem z blokowaniem komputera przez dysk twardy http://wklej.to/Jsbms witaj, w sumie FRST wygenerował dwa pliki : FRST i Addition. Wstawiłem linka do pierwszego. http://wklej.to/I8RiI (Ten post był ostatnio modyfikowany: 18.03.2015 22:27 przez Jaru.) 18.03.2015 22:16
Podziękowania od:

thermalfake Ostatni Mohikanin Liczba postów: 13.580	Post: #6 RE: Problem z blokowaniem komputera przez dysk twardy Przy okazji wykonaj dość prostą rzecz - wygeneruj raport wydajności bo takie przestoje są rejestrowane jak i iwele innych rzeczy o których zwykły user nie zdaje sobie sprawy. Start -> cmd -> perfmon/report Zapisać html'a i umieścić do pobrania. Możesz sobie także zapuścić monitor zasobów (resmon.exe), przejść do zakładki Dysk i przesortować malejąco obie kolumny Razem. Zacznij obserwować co się dzieje kiedy zaczyna się drążenie operacjami I/O na dysku. W zamian za pomoc oczekuję poprawnej pisowni. Stop niechlujstwu. Jak mądrze zadawać pytania? - przejrzyj poradnik na forum. Nie udzielam porad via PW. 18.03.2015 23:09
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #7 RE: Problem z blokowaniem komputera przez dysk twardy Błąd: Wystąpił błąd podczas próby wygenerowania raportu. Podczas oczekiwania na zakończenie pracy narzędzia generowania raportów upłynął limit czasu. od kilku dni próbuję wydostać jakieś informacje z monitora zasobów. Wczoraj wyłączyłem plik stronicowania, podejrzewając, że może mieć coś wspólnego ze sprawą, gdyż wykazywał największą aktywność na dysku. Owszem, system nawet trochę przyspieszył w ogólnym, ale osobistym odczuciu, z tym że, problem jednak pozostał i nadal co kilkanaście, czasem dwadzieścia minut wszystko się zawiesza a dioda dysku chce wyskoczyć z obudowy laptopa. Po chwieli (2-3 minuty) wszystko wraca do normy i t.d. Niestety, monitor zasobów i wydajności (brak odpowiedzi), ciągle się wiesza, nie mogę więc wygenerować raportów. Wybaczcie, zapomniałem dodać, wczoraj przetestowałem system w trybie awaryjnym, wszystko chodziło ok., żadnych atrakcji. (Ten post był ostatnio modyfikowany: 18.03.2015 23:40 przez Jaru.) 18.03.2015 23:24
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #8 RE: Problem z blokowaniem komputera przez dysk twardy Uruchom notatnik w systemie i wklej do niego: Kod: HKLM-x32\...\Run: [fst_pl_68] => [X] HKU\S-1-5-19\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-20\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-18\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION URLSearchHook: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 - (No Name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - No File SearchScopes: HKLM-x32 -> DefaultScope value is missing. CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - [Not Found] S2 HPSLPSVC; C: \Users\JAROSA~1\AppData\Local\Temp\7zS13F3\hpslpsvc64.dll [X] U3 ab6j82sk; C: \Windows\System32\Drivers\ab6j82sk.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero size file/folder) S3 cpuz138; \?\C: \Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 EraserUtilDrv11411; \?\C: \Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11411.sys [X] S3 GPUZ; \?\C: \Windows\TEMP\GPUZ.sys [X] S2 sbapifs; system32\DRIVERS\sbapifs.sys [X] U2 TMAgent; No ImagePath Task: {3B473A45-704C-48C7-A021-513B1DA6B94D} - \EPUpdater No Task File <==== ATTENTION Task: {EE627D4D-DFF1-4991-AC75-4E747C51750E} - \BrowserDefendert No Task File <==== ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\.exe: exefile => <===== ATTENTION! HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\exefile: <===== ATTENTION! EmptyTemp: Zapisz notatnik jako "fixlist',umieść obok "FRST",uruchom "FRST" a w nim opcje "Fix".Po czyszczeniu i restarcie kompa otrzymasz raport z czyszczenia "fixlog",pokaż go na forum. Do aktualizacji: Java 7 Update 55 Pokaż jeszcze screen z "CrystalDiskinfo". (Ten post był ostatnio modyfikowany: 19.03.2015 00:56 przez Illidan.) 19.03.2015 00:44
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #9 RE: Problem z blokowaniem komputera przez dysk twardy Kod: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Jaroslaw Halupka at 2015-03-19 09: 48: 14 Run: 2 Running from C: \instal\FRST Loaded Profiles: Jaroslaw Halupka (Available profiles: Jaroslaw Halupka) Boot Mode: Normal ============================================== Content of fixlist: *************** HKLM-x32\...\Run: [fst_pl_68] => [X] HKU\S-1-5-19\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-20\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-18\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION URLSearchHook: HKU\S-1-5-21-3800235173-1714985790-885244548-1000 - (No Name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - No File SearchScopes: HKLM-x32 -> DefaultScope value is missing. CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - [Not Found] S2 HPSLPSVC; C: \Users\JAROSA~1\AppData\Local\Temp\7zS13F3\hpslpsvc64.dll [X] U3 ab6j82sk; C: \Windows\System32\Drivers\ab6j82sk.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero size file/folder) S3 cpuz138; \?\C: \Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 EraserUtilDrv11411; \?\C: \Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11411.sys [X] S3 GPUZ; \?\C: \Windows\TEMP\GPUZ.sys [X] S2 sbapifs; system32\DRIVERS\sbapifs.sys [X] U2 TMAgent; No ImagePath Task: {3B473A45-704C-48C7-A021-513B1DA6B94D} - \EPUpdater No Task File <==== ATTENTION Task: {EE627D4D-DFF1-4991-AC75-4E747C51750E} - \BrowserDefendert No Task File <==== ATTENTION HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\.exe: exefile => <===== ATTENTION! HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\exefile: <===== ATTENTION! EmptyTemp: *************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HKLM-x32\...\Run: [fst_pl_68] => [X] => Value not found. HKU\S-1-5-19\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-20\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-21-3800235173-1714985790-885244548-1000\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-18\...\Winlogon: [Shell] C: \Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION => Error: No automatic fix found for this entry. HKLM\SOFTWARE\Policies\Google => Key not found. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-21-3800235173-1714985790-885244548-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{4c60e5ab-5c68-4c59-abaa-885010b24b32} => Value not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nppllibpnmahfaklnpggkibhkapjkeob => Key not found. HPSLPSVC => Service not found. ab6j82sk => Service not found. cpuz138 => Service not found. EraserUtilDrv11411 => Error deleting Service GPUZ => Service not found. sbapifs => Service not found. TMAgent => Service not found. Task: {3B473A45-704C-48C7-A021-513B1DA6B94D} - \EPUpdater No Task File <==== ATTENTION => Error: No automatic fix found for this entry. Task: {EE627D4D-DFF1-4991-AC75-4E747C51750E} - \BrowserDefendert No Task File <==== ATTENTION => Error: No automatic fix found for this entry. HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\.exe => Key not found. HKU\S-1-5-21-3800235173-1714985790-885244548-1000\Software\Classes\exefile => Key not found. Zrobiłem jak prosiłeś, z tym że, po kilku chwilach od uruchomienia FRST/FIX program się zawieszał. Objawy te same, ciągła praca dysku, uniemożliwiająca uruchomienie czegokolwiek. Menedźer zadań udało się uruchomić po kilku minutach, w końcu zrezygnowałem i zamknąłem proces. Operację powtórzyłem kilkukrotnie z tym samym skutkiem, wcześniej wyłączyłem automatyczną ochronę antywirusową Norton 360. FIXLOG się utworzył ale mam wątpliwości czy jest wiarygodny (przerwany proces FRST). Nie wiem czy to może mieć jakieś znaczenie ale FRST zawieszał się każdorazowo przy przechodzeniu przez katalog Firefox-a. (Ten post był ostatnio modyfikowany: 19.03.2015 10:18 przez Jaru.) 19.03.2015 10:07
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #10 RE: Problem z blokowaniem komputera przez dysk twardy Niestety, nie wiem w jaki sposób zamieścić screen-a z CrystalDiskInfo w odpowiedzi na posta. CrystalDiskInfo rzeczywiście podświetlił na żółto rekord poniżej : ID=C5 ; Attribute name=Liczba sektorów niestabilnych (oczekujących na remapowanie) ; Bieżący=100 ; Najgorszy=100 ; Próg=0 ; Wartość RAW=0000000000008 19.03.2015 11:09
Podziękowania od:

LadyInBlue Pani SuperMod Liczba postów: 19.073	Post: #11 RE: Problem z blokowaniem komputera przez dysk twardy Wchodzisz na jakikolwiek hosting obrazków, wgrywasz tam obrazek i pojawiają Ci się linki, min "Link na forum". Żyj tak, aby twoim znajomym zrobiło się nudno, kiedy umrzesz. Windows ❼ Forum 19.03.2015 11:19
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #12 RE: Problem z blokowaniem komputera przez dysk twardy dziękuję, było jeszcze tak... http://www.fotosik.pl/pokaz_obrazek/b8cd...b1a3e.html przepraszam ale zdaje się, że nie do końca poprawnie wysłałem link, poprawiam (Ten post był ostatnio modyfikowany: 19.03.2015 12:09 przez Jaru.) 19.03.2015 11:52
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #13 RE: Problem z blokowaniem komputera przez dysk twardy Szanowni koledzy i koleżanki, może ktoś ma jeszcze jakiś pomysł, jak mi pomóc Liczę na waszą szczerość 19.03.2015 15:23
Podziękowania od:

irocket Senior Moderator Liczba postów: 2.337	Post: #14 RE: Problem z blokowaniem komputera przez dysk twardy Sprawdź temperatury podczas pracy np programem Aida (komputer -> czujnik). 50st to dla dysku dużo, powyżej 45 to już nie wróży najlepiej. 19.03.2015 15:38
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #15 RE: Problem z blokowaniem komputera przez dysk twardy No cóż, sprawdziłem, temperatura może najniższa nie jest, ale w tej sytuacji, kiedy co chwila włącza się jakiś proces intensywnie wprawiający w ruch dysk twardy, to raczej nie ma czemu się dziwić. Problem polega na tym jak ten proces namierzyć i wyłączyć? 19.03.2015 16:01
Podziękowania od:

irocket Senior Moderator Liczba postów: 2.337	Post: #16 RE: Problem z blokowaniem komputera przez dysk twardy Chociażby zwykły monitor zasobów, karta Dysk, posortowane malejąco według kolumny "razem" 19.03.2015 16:22
Podziękowania od:

Jaru Wdrażany Liczba postów: 10	Post: #17 RE: Problem z blokowaniem komputera przez dysk twardy ok. monitor zasobów poniżej http://ifotos.pl/zobacz/monitor-z_wnqxhan.jpg 19.03.2015 16:44
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #18 RE: Problem z blokowaniem komputera przez dysk twardy Usuwanie wykonane,problemem z dyskiem C poza temperaturą,która nie wynika raczej z obciążenia jak sugerujesz tylko z ogólnego przegrzewania się kompa,ja zapytam kiedy go czyściłeś ostatnio tu jeszcze.Ale idźmy dalej...dysk C ma "Bad Sectors" które czekają na remapowanie i to jest na pewno problemem że dysk pracuje niestabilnie,system na nim.Tu trzeba by było dokonać remapowania w "MHDD": http://forum.komputerswiat.pl/topic/1754...ntry150735 Z tym że wiąże się to z utratą danych i reinstalacją systemu.Co do temperatur to ...być może wysoka temperatura uszkodziła już dysk,ale to tylko na razie moje przypuszczenie,podaj screen jak sugerował kolega,tylko może lepiej z "HwMonitor",zobaczymy jak to wygląda u Ciebie.Usuwanie wykonane,acz...co do problemów z FRST to możliwe ze Antywirus blokował go,więc następnym razem wyłączymy go lub w trybie awaryjnym systemu zrobi się usuwanie.Jeszcze zrób skan tym programem i pokaż log: http://windows7forum.pl/usuwanie-zlosliw...er-39332-t Z tym że na dysku C to nie procesy,wirusy odpowiadają za jego kiepskie chodzenie tylko jego uszkodzenie o którym wspomniałem ale dokończmy na razie czyszczenie systemu. 20.03.2015 01:29
Podziękowania od:

Podobne wątki
Wątek:	Autor	Odpowiedzi:	Wyświetleń:	Ostatni post
punkt przywracania komputera - problem	sojer	3	1.410	15.04.2019 19:43 Ostatni post: LadyInBlue
Problem z zużyciem RAM jaki i procesora przez komputer	Kieszuś	2	1.594	28.06.2016 17:32 Ostatni post: Kieszuś
Problem z odczytem plików ISO przez system	Tokate	4	2.105	13.01.2016 16:53 Ostatni post: irocket
Partycja zastrzezona przez system - problem z usunięciem	odessa4	1	2.179	08.08.2015 20:50 Ostatni post: thermalfake
Rozwiązany Problem z "explorer.exe" czarny ekran z kursorem po włączeniu komputera	SGS3N	1	3.998	23.07.2015 17:11 Ostatni post: SGS3N
Zniknął mi dysk D!	xVadrix	2	2.474	09.07.2015 21:42 Ostatni post: thermalfake

« Starszy wątek | Nowszy wątek »

Autor: Jaru
Temat został oceniony na 0 w skali 1-5 gwiazdek.
Zebrano 1 głosów.

Problem z blokowaniem komputera przez dysk twardy

Problem z blokowaniem komputera przez dysk twardy

Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy

RE: Problem z blokowaniem komputera przez dysk twardy