Additional scan result of Farbar Recovery Scan Tool (x86) Version: 07-09-2014 Ran by Magdalena at 2014-09-08 14:49:14 Running from C:\Users\Magdalena\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) AnyPC Client (HKLM\...\{1AFA1FEF-8CF9-4A51-AC46-64FAA7F3D9E2}) (Version: 1.0.0.23 - Doctorsoft) Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros) Badanie mające na celu poprawę produktów HP Deskjet 2540 series (HKLM\...\{78516D49-57AC-463B-AF12-16EB9285769D}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung) Bing Bar (HKLM\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.3.2322.0 - Microsoft Corporation) Bing Bar Platform (Version: 6.3.2322.0 - Microsoft Corporation) Hidden Cambridge- English Grammar in Use (HKLM\...\Cambridge- English Grammar in Use) (Version: 100A - Clarity Language Consultants Ltd) Clarity recorder (HKLM\...\Clarity recorder) (Version: 1.0 - Clarity Language Consultants Ltd) CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.) CyberLink DVD Suite (Version: 6.0.2806 - CyberLink Corp.) Hidden CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.) CyberLink LabelPrint (Version: 2.5.1916 - CyberLink Corp.) Hidden CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.) CyberLink Power2Go (Version: 6.0.3108a - CyberLink Corp.) Hidden CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.) CyberLink PowerDirector (Version: 7.0.3213 - CyberLink Corp.) Hidden CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.) CyberLink PowerDVD 8 (Version: 8.0.2815b - CyberLink Corp.) Hidden CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.) CyberLink PowerProducer (Version: 5.0.1.1812 - CyberLink Corp.) Hidden CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.) CyberLink YouCam (Version: 2.0.3304 - CyberLink Corp.) Hidden D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Dairy Dash (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media) Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.) Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung) Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.) EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Galeria fotografii usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GameShadow (HKLM\...\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}) (Version: 1.91.0000 - Aardwork Software Ltd) Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.) Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden HP Deskjet 2540 series — podstawowe oprogramowanie urządzenia (HKLM\...\{C5BC76C7-639E-4193-9E96-1D799A66F096}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) HP Deskjet 2540 series Pomoc (HKLM\...\{387813C9-5DFE-453E-95AE-142F2C6E929E}) (Version: 30.0.0 - Hewlett Packard) HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.2104 - Intel Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.28 - Irfan Skiljan) Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Light Image Resizer 4.4.1.0 (HKLM\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.4.1.0 - ObviousIdea) Malwarebytes Anti-Malware wersja 1.60.0.1800 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.60.0.1800 - Malwarebytes Corporation) Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell) Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Antimalware Service PL-PL Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.3 (HKLM\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation) Microsoft Office OneNote MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0415-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0415-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Search Enhancement Pack (Version: 3.0.133.0 - Microsoft Corporation) Hidden Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden Microsoft Security Client PL-PL Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Works (HKLM\...\{306B39C9-3AB1-4161-8567-9C7E50B41AE3}) (Version: 9.7.0621 - Microsoft Corporation) MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) OpenOffice.org 3.3 (HKLM\...\{EB87675F-5281-4767-A54B-31931794C23D}) (Version: 3.3.9567 - OpenOffice.org) Pakiet zgodności dla systemu Office 2007 (HKLM\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Poczta usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Podstawowe programy Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pomocnik Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden PowerISO (HKLM\...\PowerISO) (Version: - ) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5986 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung) Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung) Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.) Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.) swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated) TextMaker Viewer (HKLM\...\TextMaker Viewer) (Version: - SoftMaker Software GmbH) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version: - Microsoft) User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (HKLM\...\{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR 4.00 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) Wtyczka e-Deklaracje (HKLM\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: - Ministerstwo Finansów) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646148-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646151-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01646156-065C-11D4-8ED3-00E07D815373}\InprocServer32 -> C:\Program Files\GameShadow\MBBrowse.ocx (Marco Bellinaso) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{01E62FC1-2BC2-43A7-9C7D-F1E2783CF000}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{168AD2AB-3A85-45A8-926D-CB7B3D293329}\InprocServer32 -> C:\Program Files\GameShadow\exsEventHandler.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{19EDAA63-117B-40FD-8E1C-92C8DC0CD725}\InprocServer32 -> C:\Program Files\GameShadow\exsConfig.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\windows\system32\comct232.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{25E91008-C83E-4198-885A-3B136ACDCC54}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{292D7747-2859-4419-8FBD-6A98A5E287C8}\InprocServer32 -> C:\Program Files\GameShadow\gmsAccount.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{3D6B2683-0E0E-4367-A91D-9F044B2EA677}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\windows\system32\msinet.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{51AF5684-A538-492B-853D-7050E5B756DE}\InprocServer32 -> C:\Program Files\GameShadow\exsCompress.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586031B5-2167-4E2D-98FD-02E2E3D3121A}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6352-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6353-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6354-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6355-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6356-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6357-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{586A6359-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{612A8624-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{612A8628-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{7ADE76BA-7AF7-44BF-B0C5-A946534F1EBA}\InprocServer32 -> C:\Program Files\GameShadow\ARProgBar.ocx (Alvaro Redondo) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{89008DCA-4DD0-4CD7-A677-5E57D59027F4}\InprocServer32 -> C:\Program Files\GameShadow\gmsSOAP.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{8E62374C-3263-4765-91EC-0901D8D37D70}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{930760B8-EE0E-4758-A1D0-4E397C5D90DF}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{936E555A-92C5-4880-8F5B-3E5E4B989AFE}\InprocServer32 -> C:\Program Files\GameShadow\exsTransfer.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9573876E-12E2-45E1-A474-F7DFBCD42807}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{9FCFE650-A90A-4296-8A6C-E11542DDC472}\InprocServer32 -> C:\Program Files\GameShadow\exsBasicTimer.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{AA07EEAB-509D-4385-988C-98EF567A1FF7}\InprocServer32 -> C:\Program Files\GameShadow\ardLocator.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{AA8EB22A-6AC5-4A9F-814A-7A40A177A933}\InprocServer32 -> C:\Program Files\GameShadow\gmsConfig.dll (Aardwork Software Ltd.) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B50F75B8-F7F2-4123-AB73-58411D0B882F}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}\InprocServer32 -> C:\windows\system32\comctl32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{B90D6692-7CC2-44B4-AF3D-5D7D74E743D0}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{EFFF3436-D93B-4DEA-9593-E11C0FB74C2C}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F4C0312A-6562-407F-B924-1A224F13BD1F}\InprocServer32 -> C:\Program Files\GameShadow\exsUtils.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F6D2D4A1-8BBA-4A62-B639-9B04C8CEDD22}\InprocServer32 -> C:\Program Files\GameShadow\gmsData.dll (Aardwork Software Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\windows\system32\comdlg32.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{FD819CA3-D874-48CE-9EAD-AC7BE1D4F125}\InprocServer32 -> C:\Program Files\GameShadow\exsConfig.dll (Express Solutions Ltd) CustomCLSID: HKU\S-1-5-21-1624614489-1438924107-3198493719-1000_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\windows\system32\mscomct2.ocx (Microsoft Corporation) ==================== Restore Points ========================= 06-09-2014 20:06:26 Dodatek Windows 7 Service Pack 1 06-09-2014 21:23:11 Windows Update 06-09-2014 21:31:08 Windows Update 06-09-2014 21:59:06 Windows Update 07-09-2014 00:13:12 Windows Update 07-09-2014 00:38:49 Windows Update 07-09-2014 01:05:13 Windows Update 07-09-2014 01:22:18 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {01A3C0CF-5FE3-4BAE-AB9A-6328FA3142E1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {0467530E-75FF-4099-B63D-E2772297C8AA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {093D6A93-BCF6-48F9-A0CB-C47225D99B9C} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.) Task: {0B83D345-660D-4856-A248-0AE80CE49917} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {203C9096-F7A8-42A5-AA32-93BB6658F88A} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.) Task: {2880299C-45EA-4DB3-A5C0-B172E59868CC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {3A49E98A-940A-4F22-B79C-3AD42A79CC90} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {3CC02FE9-5468-4681-BA98-0C737FC73C2D} - System32\Tasks\RNUpgradeHelperLogonPrompt_piotr => C:\Users\piotr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe Task: {628B7324-02A9-4C4B-BB2F-7A99D45C1A89} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics) Task: {641A4260-85F3-44B4-A843-CD92F58BE808} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] () Task: {6C89850C-1724-4702-9596-E55444587194} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {6D160E1A-DA9D-425F-894F-DE4BD76694D4} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1624614489-1438924107-3198493719-1002 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {78C7F2A7-9CBA-4006-8A82-740D21421091} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.) Task: {871539F3-4248-4D54-8AFD-1ADF452D58A6} - System32\Tasks\APSchedulerC => C:\Program Files\AnyPC Client\APLanMgrC.exe [2009-10-20] (DoctorSoft) Task: {8E26DA20-9AFF-470C-932B-8579D555BD72} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-11-04] (Samsung Electronics Co., Ltd.) Task: {8F7FEE0F-BD70-4550-A3EF-D73A9595CC73} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1624614489-1438924107-3198493719-1002 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-01-24] (RealNetworks, Inc.) Task: {9165551A-A9A9-4D40-A336-27C1DA697030} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-10-13] (Samsung Electronics Co., Ltd.) Task: {CD139FC2-43E7-43AF-860B-BC67B27B3E5F} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC) Task: {D0ECCD36-3DD2-4464-AD41-C09BE98F278B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-20] (Google Inc.) Task: {D6893C94-AAD8-4900-9344-6D43AEF7C62A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-20] (Google Inc.) Task: {DA0F19FA-0EAE-4D64-9B6E-E4ACCF6BE197} - System32\Tasks\ReclaimerUpdateFiles_piotr => C:\Users\piotr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe Task: {E880CFD8-EE0D-454B-94FA-B5BC069F3229} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-06] (Adobe Systems Incorporated) Task: {F08CD048-E36D-4BBF-A371-9EA466A467D3} - System32\Tasks\{B6794DA3-8742-4640-8232-901EE084AC15} => C:\Program Files\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2009-12-30 08:54 - 2009-07-07 20:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe 2009-12-30 08:58 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 01098056 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\libglesv2.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 00174408 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\libegl.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 08577864 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 00331592 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 01660232 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll 2014-09-05 09:06 - 2014-08-30 04:49 - 14669128 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: MpKsl2ce04938 Description: MpKsl2ce04938 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: MpKsl2ce04938 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (09/06/2014 11:07:26 PM) (Source: ESENT) (EventID: 215) (User: ) Description: WinMail (900) WindowsMail0: Tworzenie kopii zapasowej zostało zatrzymane, ponieważ zostało przerwane przez klienta lub nie można nawiązać połączenia z klientem. Error: (09/06/2014 07:03:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Error: (09/06/2014 07:03:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (09/06/2014 07:03:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (09/06/2014 07:03:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Error: (09/06/2014 07:03:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (09/06/2014 07:03:18 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (09/06/2014 07:01:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Error: (09/06/2014 07:01:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (09/06/2014 07:01:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. System errors: ============= Error: (09/08/2014 01:37:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/08/2014 01:37:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/07/2014 00:32:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/07/2014 00:32:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/07/2014 00:31:25 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (09/07/2014 00:29:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/07/2014 00:29:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/07/2014 10:39:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Error: (09/07/2014 10:39:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Spooler. Error: (09/07/2014 03:12:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Spooler z powodu następującego błędu: %%1053 Microsoft Office Sessions: ========================= Error: (02/10/2013 03:13:51 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5670 seconds with 4800 seconds of active time. This session ended with a crash. Error: (06/09/2011 10:13:49 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 13, Application Name: Microsoft Office OneNote, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 54 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz Percentage of memory in use: 63% Total physical RAM: 2008.61 MB Available physical RAM: 733.63 MB Total Pagefile: 4017.22 MB Available Pagefile: 2243.18 MB Total Virtual: 2047.88 MB Available Virtual: 1902.58 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:141.56 GB) (Free:78.51 GB) NTFS Drive d: () (Fixed) (Total:76.23 GB) (Free:76.14 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: B65E57A6) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=141.6 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=76.2 GB) - (Type=07 NTFS) ==================== End Of Log ============================