Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-09-2014 Ran by Magdalena at 2014-09-05 19:00:31 Running from C:\Users\Magdalena\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: COMODO Defense+ (Enabled - Up to date) {CE351521-78FA-2048-BB22-B68A4A5CA7EC} FW: COMODO Firewall (Enabled) {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) AnyPC Client (HKLM\...\{1AFA1FEF-8CF9-4A51-AC46-64FAA7F3D9E2}) (Version: 1.0.0.23 - Doctorsoft) Asystent rejestracji usługi Windows Live (HKLM\...\{51958BA7-21E4-4A8B-9098-CD8375BD17B2}) (Version: 5.000.818.5 - Microsoft Corporation) Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros) Badanie mające na celu poprawę produktów HP Deskjet 2540 series (HKLM\...\{78516D49-57AC-463B-AF12-16EB9285769D}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung) Bezpieczeństwo rodzinne usługi Windows Live (Version: 14.0.8093.805 - Microsoft Corporation) Hidden Cambridge- English Grammar in Use (HKLM\...\Cambridge- English Grammar in Use) (Version: 100A - Clarity Language Consultants Ltd) Clarity recorder (HKLM\...\Clarity recorder) (Version: 1.0 - Clarity Language Consultants Ltd) CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.) CyberLink DVD Suite (Version: 6.0.2806 - CyberLink Corp.) Hidden CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.) CyberLink LabelPrint (Version: 2.5.1916 - CyberLink Corp.) Hidden CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.) CyberLink Power2Go (Version: 6.0.3108a - CyberLink Corp.) Hidden CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.) CyberLink PowerDirector (Version: 7.0.3213 - CyberLink Corp.) Hidden CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.) CyberLink PowerDVD 8 (Version: 8.0.2815b - CyberLink Corp.) Hidden CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.) CyberLink PowerProducer (Version: 5.0.1.1812 - CyberLink Corp.) Hidden CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.) CyberLink YouCam (Version: 2.0.3304 - CyberLink Corp.) Hidden Dairy Dash (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media) Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.) Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung) Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.) EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung) Filzip 3.06 (HKLM\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel) Galeria fotografii usługi Windows Live (Version: 14.0.8081.709 - Microsoft Corporation) Hidden GameShadow (HKLM\...\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}) (Version: 1.91.0000 - Aardwork Software Ltd) Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.) Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden HP Deskjet 2540 series — podstawowe oprogramowanie urządzenia (HKLM\...\{C5BC76C7-639E-4193-9E96-1D799A66F096}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) HP Deskjet 2540 series Pomoc (HKLM\...\{387813C9-5DFE-453E-95AE-142F2C6E929E}) (Version: 30.0.0 - Hewlett Packard) HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC) Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.2104 - Intel Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.28 - Irfan Skiljan) Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden Light Image Resizer 4.4.1.0 (HKLM\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.4.1.0 - ObviousIdea) Malwarebytes Anti-Malware wersja 1.60.0.1800 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.60.0.1800 - Malwarebytes Corporation) Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell) Microsoft Antimalware Service PL-PL Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.3 (HKLM\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation) Microsoft Office OneNote MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0415-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Security Client PL-PL Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Works (HKLM\...\{306B39C9-3AB1-4161-8567-9C7E50B41AE3}) (Version: 9.7.0621 - Microsoft Corporation) MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Narzędzie do przekazywania usługi Windows Live (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) OpenOffice.org 3.3 (HKLM\...\{EB87675F-5281-4767-A54B-31931794C23D}) (Version: 3.3.9567 - OpenOffice.org) Pakiet zgodności dla systemu Office 2007 (HKLM\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Pity Format 2010 (HKLM\...\Pity Format 2010_is1) (Version: - Biuro Informatyki Stosowanej FORMAT) Poczta usługi Windows Live (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Podstawowe programy Windows Live (Version: 14.0.8089.726 - Microsoft Corporation) Hidden PowerISO (HKLM\...\PowerISO) (Version: - ) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5986 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung) Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung) Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.) Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated) TextMaker Viewer (HKLM\...\TextMaker Viewer) (Version: - SoftMaker Software GmbH) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version: - Microsoft) User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) Windows Live Communications Platform (Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 14.0.8091.0730 - Microsoft Corporation) Hidden Windows Live Sync (HKLM\...\{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden WinRAR 4.00 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) Wtyczka e-Deklaracje (HKLM\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: - Ministerstwo Finansów) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646148-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646151-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646156-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01E62FC1-2BC2-43A7-9C7D-F1E2783CF000}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{168AD2AB-3A85-45A8-926D-CB7B3D293329}\InprocServer32 -> C:\Program Files\GameShadow\exsEventHandler.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{19EDAA63-117B-40FD-8E1C-92C8DC0CD725}\InprocServer32 -> C:\Program Files\GameShadow\exsConfig.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{25E91008-C83E-4198-885A-3B136ACDCC54}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{292D7747-2859-4419-8FBD-6A98A5E287C8}\InprocServer32 -> C:\Program Files\GameShadow\gmsAccount.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3D6B2683-0E0E-4367-A91D-9F044B2EA677}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{51AF5684-A538-492B-853D-7050E5B756DE}\InprocServer32 -> C:\Program Files\GameShadow\exsCompress.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586031B5-2167-4E2D-98FD-02E2E3D3121A}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6352-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6353-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6354-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6355-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6356-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6357-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6359-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{612A8624-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{612A8628-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7ADE76BA-7AF7-44BF-B0C5-A946534F1EBA}\InprocServer32 -> C:\Program Files\GameShadow\ARProgBar.ocx (Alvaro Redondo) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{89008DCA-4DD0-4CD7-A677-5E57D59027F4}\InprocServer32 -> C:\Program Files\GameShadow\gmsSOAP.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{8E62374C-3263-4765-91EC-0901D8D37D70}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{930760B8-EE0E-4758-A1D0-4E397C5D90DF}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{936E555A-92C5-4880-8F5B-3E5E4B989AFE}\InprocServer32 -> C:\Program Files\GameShadow\exsTransfer.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9573876E-12E2-45E1-A474-F7DFBCD42807}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9FCFE650-A90A-4296-8A6C-E11542DDC472}\InprocServer32 -> C:\Program Files\GameShadow\exsBasicTimer.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{AA07EEAB-509D-4385-988C-98EF567A1FF7}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{AA8EB22A-6AC5-4A9F-814A-7A40A177A933}\InprocServer32 -> C:\Program Files\GameShadow\gmsConfig.dll (Aardwork Software Ltd.) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B50F75B8-F7F2-4123-AB73-58411D0B882F}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B90D6692-7CC2-44B4-AF3D-5D7D74E743D0}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{EFFF3436-D93B-4DEA-9593-E11C0FB74C2C}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F4C0312A-6562-407F-B924-1A224F13BD1F}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F6D2D4A1-8BBA-4A62-B639-9B04C8CEDD22}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{FD819CA3-D874-48CE-9EAD-AC7BE1D4F125}\InprocServer32 -> C:\Program Files\GameShadow\exsConfig.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) ==================== Restore Points ========================= 27-04-2014 10:39:04 Kopia zapasowa systemu Windows 29-04-2014 18:00:07 Kopia zapasowa systemu Windows 29-04-2014 18:22:23 Windows Update 11-05-2014 12:11:41 Kopia zapasowa systemu Windows 01-06-2014 12:50:15 Kopia zapasowa systemu Windows 01-06-2014 12:58:40 Windows Update 01-06-2014 18:47:50 Kopia zapasowa systemu Windows 01-06-2014 19:11:53 Windows Update 10-06-2014 15:35:58 Kopia zapasowa systemu Windows 22-06-2014 09:50:48 Kopia zapasowa systemu Windows 05-07-2014 11:45:52 Kopia zapasowa systemu Windows 16-08-2014 11:47:35 Kopia zapasowa systemu Windows 19-08-2014 08:39:29 Kopia zapasowa systemu Windows 19-08-2014 15:00:06 Windows Update 25-08-2014 17:50:48 Kopia zapasowa systemu Windows 27-08-2014 10:36:34 Windows Update 02-09-2014 13:24:15 Windows Update 02-09-2014 13:26:41 Kopia zapasowa systemu Windows 04-09-2014 18:20:30 Usunięte Imperial Glory 05-09-2014 14:34:18 Windows Update 05-09-2014 16:36:59 Removed Adobe Reader X (10.1.1) - Polish. 05-09-2014 16:44:13 Removed GeekBuddy. 05-09-2014 16:46:11 Removed Google SketchUp 8 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {01A3C0CF-5FE3-4BAE-AB9A-6328FA3142E1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {0467530E-75FF-4099-B63D-E2772297C8AA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {093D6A93-BCF6-48F9-A0CB-C47225D99B9C} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.) Task: {0B83D345-660D-4856-A248-0AE80CE49917} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {203C9096-F7A8-42A5-AA32-93BB6658F88A} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.) Task: {2880299C-45EA-4DB3-A5C0-B172E59868CC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {3A49E98A-940A-4F22-B79C-3AD42A79CC90} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {3CC02FE9-5468-4681-BA98-0C737FC73C2D} - System32\Tasks\RNUpgradeHelperLogonPrompt_piotr => C:\Users\piotr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe Task: {628B7324-02A9-4C4B-BB2F-7A99D45C1A89} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics) Task: {641A4260-85F3-44B4-A843-CD92F58BE808} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] () Task: {6C89850C-1724-4702-9596-E55444587194} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {6D160E1A-DA9D-425F-894F-DE4BD76694D4} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1002 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {78C7F2A7-9CBA-4006-8A82-740D21421091} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.) Task: {871539F3-4248-4D54-8AFD-1ADF452D58A6} - System32\Tasks\APSchedulerC => C:\Program Files\AnyPC Client\APLanMgrC.exe [2009-10-20] (DoctorSoft) Task: {8E26DA20-9AFF-470C-932B-8579D555BD72} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-11-04] (Samsung Electronics Co., Ltd.) Task: {8F7FEE0F-BD70-4550-A3EF-D73A9595CC73} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1002 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {9165551A-A9A9-4D40-A336-27C1DA697030} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-10-13] (Samsung Electronics Co., Ltd.) Task: {CD139FC2-43E7-43AF-860B-BC67B27B3E5F} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC) Task: {D0ECCD36-3DD2-4464-AD41-C09BE98F278B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-20] (Google Inc.) Task: {D6893C94-AAD8-4900-9344-6D43AEF7C62A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-20] (Google Inc.) Task: {DA0F19FA-0EAE-4D64-9B6E-E4ACCF6BE197} - System32\Tasks\ReclaimerUpdateFiles_piotr => C:\Users\piotr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe Task: {F08CD048-E36D-4BBF-A371-9EA466A467D3} - System32\Tasks\{B6794DA3-8742-4640-8232-901EE084AC15} => C:\Program Files\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Loaded Modules (whitelisted) ============= 2009-12-30 08:54 - 2009-07-07 20:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe 2011-04-19 17:43 - 2004-09-08 13:45 - 00368128 _____ () C:\Program Files\Filzip\fzshext.dll 2009-12-30 08:58 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2009-06-03 13:59 - 2009-06-03 13:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll 2009-06-03 13:59 - 2009-06-03 13:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll 2011-01-17 17:19 - 2011-03-17 17:46 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2014 06:46:12 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service COMODO Internet Security Helper Service since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 06:46:12 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Helper Driver. System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 06:46:12 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Sandbox Driver. System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 06:44:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service COMODO Internet Security Helper Service since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 06:44:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Helper Driver. System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 06:44:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Sandbox Driver. System Error: Nie można odnaleźć określonego pliku. . Error: (09/05/2014 10:56:23 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (09/05/2014 10:54:45 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (09/05/2014 10:54:12 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (09/05/2014 10:52:34 AM) (Source: SideBySide) (EventID: 75) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „1”. Błąd w pliku manifestu lub w pliku zasad „2” w wierszu 3. Użycie wielu elementów requestedPrivileges w manifeście jest niedozwolone. System errors: ============= Error: (09/05/2014 06:23:05 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera FILIP-KOMPUTER. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{5CE9FDAF-3B08-4944-922A-2BD. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (09/05/2014 06:22:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/05/2014 06:22:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/05/2014 04:49:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/05/2014 04:49:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/05/2014 04:48:21 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (09/05/2014 04:40:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji w sieci, której nie można uruchomić z powodu następującego błędu: %%1068 Error: (09/05/2014 04:40:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji w sieci, której nie można uruchomić z powodu następującego błędu: %%1068 Error: (09/05/2014 04:40:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji w sieci, której nie można uruchomić z powodu następującego błędu: %%1068 Error: (09/05/2014 04:40:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji w sieci, której nie można uruchomić z powodu następującego błędu: %%1068 Microsoft Office Sessions: ========================= Error: (02/10/2013 03:13:51 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5670 seconds with 4800 seconds of active time. This session ended with a crash. Error: (06/09/2011 10:13:49 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 13, Application Name: Microsoft Office OneNote, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 54 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz Percentage of memory in use: 45% Total physical RAM: 2008.61 MB Available physical RAM: 1088.95 MB Total Pagefile: 4017.22 MB Available Pagefile: 2894.23 MB Total Virtual: 2047.88 MB Available Virtual: 1906.31 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:141.56 GB) (Free:80.65 GB) NTFS Drive d: () (Fixed) (Total:76.23 GB) (Free:76.14 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: B65E57A6) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=141.6 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=76.2 GB) - (Type=07 NTFS) ==================== End Of Log ============================