Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-08-2015 03 Ran by Michaela (2015-08-22 15:51:39) Running from F:\ Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1445831302-2848165502-626848564-500 - Administrator - Disabled) Guest (S-1-5-21-1445831302-2848165502-626848564-501 - Limited - Disabled) Michaela (S-1-5-21-1445831302-2848165502-626848564-1000 - Administrator - Enabled) => C:\Users\Michaela ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden 4oD (HKLM\...\4oD) (Version: 2.0.23.0 - Channel 4 Television Corporation and 4 Ventures Limited) 4oD (Version: 2.0.23.0 - Channel 4 Television Corporation and 4 Ventures Limited) Hidden Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM\...\Advanced Audio FX Engine) (Version: - ) Advanced Video FX Engine (HKLM\...\Advanced Video FX Engine) (Version: - ) AIMP2 (HKLM\...\AIMP2) (Version: - AIMP DevTeam) BlackBerry Desktop Software 4.7 (HKLM\...\BlackBerry_{98DC111A-7C22-4C26-B2A1-E654264DAC1E}) (Version: 4.7.0.32 - Research In Motion Ltd.) BlackBerry Desktop Software 4.7 (Version: 4.7.0.32 - Research In Motion Ltd.) Hidden Browser Address Error Redirector (HKLM\...\{62230596-37E5-4618-A329-0D21F529A86F}) (Version: 1.00.0000 - Dell) CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform) Cisco EAP-FAST Module (HKLM\...\{6D3963B0-E13B-4FC3-B0FF-506A304BB043}) (Version: 2.1.3 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM\...\{4E5386F5-C0F6-4532-A54A-374865AEAB71}) (Version: 1.0.12 - Cisco Systems, Inc.) COMODO Internet Security Premium (HKLM\...\{367D1EA4-24FD-402F-AFF0-08A678D2EE28}) (Version: 8.2.0.4674 - COMODO Security Solutions Inc.) Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Conexant HDA D330 MDC V.92 Modem (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F) (Version: 7.74.00 - Conexant) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Dell Best of Web (HKLM\...\{C39A4E1F-9AF1-4FE1-A80E-A5B867FABB42}) (Version: 1.00.0000 - Dell) Dell Dock (HKLM\...\{F6CB42B9-F033-4152-8813-FF11DA8E6A78}) (Version: 1.0.0 - Dell) Dell Getting Started Guide (HKLM\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell Resource CD (HKLM\...\{42929F0F-CE14-47AF-9FC7-FF297A603021}) (Version: 1.00.0000 - Dell Inc.) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1.103.4 - Alps Electric) Dell Webcam Center (HKLM\...\Dell Webcam Center) (Version: - ) Dell Webcam Manager (HKLM\...\Dell Webcam Manager) (Version: - ) Dell Wireless WLAN Card (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.170.25.12 - Dell Inc.) Dell-eBay (HKLM\...\{B935C985-A17F-484B-8470-09E4FC27DC26}) (Version: 1.00.0000 - Dell) Digital Line Detect (HKLM\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc) DVDFab Media Player 2 (HKLM\...\DVDFab Media Player 2_is1) (Version: 2.4.4.1 - Fengtao Software Inc.) EaseUS Partition Master 10.5 (HKLM\...\EaseUS Partition Master_is1) (Version: - EaseUS) EDocs (HKLM\...\{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}) (Version: - ) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden GoToAssist 8.0.0.514 (HKLM\...\GoToAssist) (Version: - ) Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - ) Internet From BT (HKLM\...\{6FFB40A5-7F7D-4A32-8905-3CDF962EE1E4}) (Version: - ) Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 11.3.6 Standard (HKLM\...\KLiteCodecPack_is1) (Version: 11.3.6 - ) Laptop Integrated Webcam Driver (1.04.01.1011) (HKLM\...\Creative OEM002) (Version: - ) Live! Cam Avatar Creator (HKLM\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.0817.1 - Creative Technology Ltd.) Live! Cam Avatar v1.0 (HKLM\...\{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}) (Version: 1.0 - Creative Technology Ltd.) MediaDirect (HKLM\...\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}) (Version: 3.5 - Dell) Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20125.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation) Modem Diagnostic Tool (HKLM\...\{294EAADF-E50F-4DD8-AD8D-19587EA10512}) (Version: 1.0.24.0 - Dell) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Native Instruments Kontakt Player Sibelius (HKLM\...\Native Instruments Kontakt Player Sibelius) (Version: - ) Neuratron PhotoScore Lite (HKLM\...\Neuratron PhotoScore Lite) (Version: 3.00 - Neuratron Limited) OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.2 - pdfforge) Plus Internet 2.5 (HKLM\...\Plus Internet_is1) (Version: 2.5 - Polkomtel S.A.) Plus Internet Monitor version 1.0 (HKLM\...\{64CFCC62-D81B-4A2B-81D6-169FBF95520A}_is1) (Version: 1.0 - Polkomtel sp. z o.o.) QuickSet (HKLM\...\{4B6AD248-D3BF-426A-8D64-847288154F13}) (Version: 8.2.20 - Dell Inc.) Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden Sibelius 3 (HKLM\...\Sibelius 3) (Version: - ) Sibelius Scorch (HKLM\...\Sibelius Scorch) (Version: - ) Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated) SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.0 - Krzysztof Kowalczyk) Vodafone Mobile Connect Lite (HKLM\...\{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}) (Version: 9.3.5.11690 - Vodafone) WIDCOMM Bluetooth Software 6.0.1.3100 (HKLM\...\{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}) (Version: 6.0.1.3100 - Dell) Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Sync (HKLM\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation) WinRAR 4.20 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00021401-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0002E005-0000-0000-C000-000000000046}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0086C339-9C0E-4C09-9A2F-FF3D19A44A18}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00BB2764-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{060AF76C-68DD-11D0-8FC1-00C04FD9189D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{067B4B81-B1EC-489F-B111-940EBDC44EBE}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{08A99E2F-6D6D-4B80-AF5A-BAF2BCBE4CB9}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0B91A74B-AD7C-4A9D-B563-29EEF9167172}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0C15D503-D017-47CE-9016-7B3F978721CC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0C7EFBDE-0303-4C6F-A4F7-31FA2BE5E397}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{0E890F83-5F79-11D1-9043-00C04FD9189D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{15ea6566-467f-42ae-85d7-0ef80306cbdc}\localserver32 -> C:\Users\Michaela\AppData\Local\Temp\{8b1670c8-dc4a-4ed4-974b-81737a23826b}\IDriver.NonElevated.exe (the data entry has 7 more characters). CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{1B544C20-FD0B-11CE-8C63-00AA0044B51E}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{1DCB3A00-33ED-11D3-8470-00C04F79DBC0}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{1E651CC0-B199-11D0-8212-00C04FC32C45}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{203B1EED-DB9F-40FB-87BD-1990982017D2}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{25BAAD81-3560-11D3-8471-00C04F79DBC0}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{280A3020-86CF-11D1-ABE6-00A0C905F375}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{2EEB4ADF-4578-4D10-BCA7-BB955F56320A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{301056D0-6DFF-11D2-9EEB-006008039E37}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F391-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3050F4F5-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{30C3B080-30FB-11D0-B724-00AA006C1A01}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{32BAED44-34B5-11D3-9315-00C04F72D6CF}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{336475D0-942A-11CE-A870-00AA002FEAB5}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{33FACFE0-A9BE-11D0-A520-00A0D10129C0}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{385A91BC-1E8A-4E4A-A7A6-F4FC1E6CA1BD}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation ) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{3D3B1846-CC43-42AE-BFF9-D914083C2BA3}\InprocServer32 -> D:\Oprogramowanie\SumatraPDF\PdfPreview.dll (Simon Bünzli) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{4315D437-5B8C-11D0-BD3B-00A0C911CE86}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{470659C0-0C62-4D38-BE62-4243FDE65788}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{47F959F3-F578-473E-AE86-1080B1A3D676}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{48123BC4-99D9-11D1-A6B3-00C04FD91555}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{4CB26C03-FF93-11D0-817E-0000F87557DB}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{4FD2A832-86C8-11D0-8FCA-00C04FD9189D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{555278E2-05DB-11D1-883A-3C8B00C10000}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{55808EA8-81FE-43c6-AAE8-1D8149F941D3}\InprocServer32 -> D:\Oprogramowanie\SumatraPDF\PdfFilter.dll (Simon Bünzli) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{566A2EFF-5651-4020-AC1A-EB48E4571EA3}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6352-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6353-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6354-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6355-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6356-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6357-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{586A6359-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{5C140836-43DE-11D3-847D-00C04F79DBC0}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{5D02926A-212E-11D0-9DF9-00A0C922E6EC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{623E2882-FC0E-11D1-9A77-0000F8756A10}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{62BE5D10-60EB-11D0-BD3B-00A0C911CE86}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{6935DB93-21E8-4CCC-BEB9-9FE3C77A297A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{6A01FDA0-30DF-11D0-B724-00AA006C1A01}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{6BF52A52-394A-11D3-B153-00C04F79FAA6}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{70E102B0-5556-11CE-97C0-00AA0055595A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{70F598E9-F4AB-495A-99E2-A7C4D3D89ABF}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{728A21C5-3D9E-48D7-9810-864848F0F404}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{777D0CFF-0375-43B9-8532-FB04A4903593}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{77F7F122-20B0-4117-A2FB-059D1FC88256}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{79376820-07D0-11CF-A24D-0020AFD79767}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{79EAC9E2-BAF9-11CE-8C82-00AA004BA90B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{7D8AA343-6E63-4663-BE90-6B80F66540A3}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{807563E5-5146-11D5-A672-00B0D022E945}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{81397204-F51A-4571-8D7B-DC030521AABD}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{82D353DF-90BD-4382-8BC2-3F6192B76E34}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{99D54F63-1A69-41AE-AA4D-C976EB3F0713}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{9D148291-B9C8-11D0-A4CC-0000F80149F6}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{A3CCEDF7-2DE2-11D0-86F4-00A0C913F750}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{A7DD2151-A645-409A-9B39-DF146D710E72}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{A7EE7F34-3BD1-427F-9231-F941E9B7E1FE}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{A888DF60-1E90-11CF-AC98-00AA004C0FA9}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{AD763FA6-3B90-41AB-BD44-4F832BEEE55F}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{ADC6CB82-424C-11D2-952A-00C04FA34F05}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B87BEB7B-8D29-423F-AE4D-6582C10175AC}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{BCDE0395-E52F-467C-8E3D-C4579291692E}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{C6365470-F667-11D1-9067-00C04FD9189D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InprocServer32 -> C:\Windows\system32\ACTXPRXY.DLL (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{CD12A3CE-9C42-11D2-BEED-0060082F2054}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{CD773740-B187-4974-A1D5-E0FF91372277}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{CDA42200-BD88-11D0-BD4E-00A0C911CE86}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{D1FE6762-FC48-11D0-883A-3C8B00C10000}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{D51BD5A1-7548-11CF-A520-0080C77EF58A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{D51BD5A2-7548-11CF-A520-0080C77EF58A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{D51BD5A3-7548-11CF-A520-0080C77EF58A}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{dc67367a-8b15-47bc-b7f8-0ba0435a504a}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL No File CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{dcedfcbf-c7d1-4b81-a20f-7524d306135e}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL No File CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{DE2D022D-2480-43BE-97F0-D1FA2CF98F4F}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{DF2FCE13-25EC-45BB-9D4C-CECD47C2430C}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E1F1A0B8-BEEE-490D-BA7C-066C40B5E2B9}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E436EBB2-524F-11CE-9F53-0020AF0BA770}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E436EBB3-524F-11CE-9F53-0020AF0BA770}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E436EBB5-524F-11CE-9F53-0020AF0BA770}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E436EBB8-524F-11CE-9F53-0020AF0BA770}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{F5078F35-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{FB74F625-7D25-4455-B840-7B870B5B9322}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath CustomCLSID: HKU\S-1-5-21-1445831302-2848165502-626848564-1000_Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InprocServer32 -> no filepath ==================== Restore Points ========================= 22-08-2015 15:20:24 serwis 22-08-2015 15:25:31 Installed Microsoft Office Professional Plus 2010 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1424349E-A166-4762-9F67-7203C14A5BFD} - System32\Tasks\klcp_update => D:\Oprogramowanie\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-08-20] () Task: {18EF9C07-0C0E-4374-97F1-4E76F3EB60C7} - System32\Tasks\CCleanerSkipUAC => D:\Oprogramowanie\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd) Task: {42DBE378-9DD4-4F1F-A28B-C580458DC1B8} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => D:\Oprogramowanie\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO) Task: {503C3B6B-D2F7-4936-B7D7-FD9779551556} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-20] (Adobe Systems Incorporated) Task: {6607D737-2D3A-4321-A0ED-8B0212021A37} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => D:\Oprogramowanie\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO) Task: {A159B1EE-99C7-4E77-A20C-CB5C62782EE6} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => D:\Oprogramowanie\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO) Task: {D1AD4D40-CD37-4E4C-8FD1-5728CB3F3119} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => D:\Oprogramowanie\COMODO\COMODO Internet Security\cistray.exe [2015-08-05] (COMODO) Task: {DE8B9B4A-834E-4E4D-83E3-E5E4C24D6E27} - System32\Tasks\{E0F2ECEA-AFB3-45FF-A64C-1CCB89C6AA1A} => Chrome.exe http://ui.skype.com/ui/0/5.9.0.123/en/abandoninstall?page=tsMain Task: {F53434F8-8658-40FF-8A4C-E985A115543A} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => D:\Oprogramowanie\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\User_Feed_Synchronization-{946F7421-D06C-4684-8D72-54AB29EFBF93}.job => C:\Windows\system32\msfeedssync.exe ==================== Loaded Modules (Whitelisted) ============== 2009-04-19 13:59 - 2007-12-08 15:34 - 00024064 _____ () C:\Windows\System32\WLTRYSVC.EXE 2009-04-19 13:59 - 2007-12-08 15:34 - 00054784 _____ () C:\Windows\System32\bcmwlrmt.dll 2006-11-03 18:25 - 2006-11-03 18:25 - 00389120 _____ () C:\Windows\system32\btwhidcs.DLL 2006-11-03 18:46 - 2006-11-03 18:46 - 00126976 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2015-01-09 00:02 - 2015-01-09 00:02 - 00061152 _____ () D:\Oprogramowanie\COMODO\COMODO Internet Security\scanners\smart.cav 2015-08-20 15:56 - 2015-08-20 15:56 - 00835584 _____ () D:\Oprogramowanie\Opera\gstreamer\gstreamer.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00093696 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstaudioconvert.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00094208 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstaudioresample.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00057344 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstautodetect.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00096256 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstcoreplugins.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00062976 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstdecodebin2.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00067072 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstdirectsound.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00158208 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstffmpegcolorspace.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00312832 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstoggdec.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00038912 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstwaveform.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00073728 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstwavparse.dll 2015-08-20 15:56 - 2015-08-20 15:56 - 00101888 _____ () D:\Oprogramowanie\Opera\gstreamer\plugins\gstwebmdec.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows\system32\FlashPlayerApp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\lpksetup.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\pdfcmon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\yk60x86.sys:$CmdTcID AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2 AlternateDataStreams: C:\Users\Michaela\Downloads\RE Music Lessons from September.eml:OECustomProperty ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-1445831302-2848165502-626848564-1000\Software\Classes\.exe: => <===== ATTENTION ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1445831302-2848165502-626848564-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Desktop Manager.lnk => C:\Windows\pss\Desktop Manager.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Michaela^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup MSCONFIG\startupreg: 4oD => "C:\Program Files\Kontiki\KHost.exe" -all MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: BlackBerryAutoUpdate => C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background MSCONFIG\startupreg: CCleaner Monitoring => "D:\Oprogramowanie\CCleaner\CCleaner.exe" /MONITOR MSCONFIG\startupreg: dellsupportcenter => "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter MSCONFIG\startupreg: EaseUS EPM tray => D:\Oprogramowanie\EaseUS Partition Master 10.5\bin\EpmNews.exe MSCONFIG\startupreg: ECenter => C:\Dell\E-Center\EULALauncher.exe MSCONFIG\startupreg: ISUSPM => "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler MSCONFIG\startupreg: kdx => C:\Program Files\Kontiki\KHost.exe -all MSCONFIG\startupreg: MobileConnect => %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent MSCONFIG\startupreg: PCMService => "C:\Program Files\Dell\MediaDirect\PCMService.exe" MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [{D75F88A0-3855-4B33-B8E4-535049DED0DF}] => (Allow) C:\Program Files\Dell\MediaDirect\PCMService.exe FirewallRules: [{BAE611F0-9981-4BBB-BD40-7B17C07024BE}] => (Allow) C:\Program Files\Kontiki\KService.exe FirewallRules: [{323A1D11-B7D9-49C7-8031-9947577EDDB9}] => (Allow) C:\Program Files\Kontiki\KService.exe FirewallRules: [{DE41F09E-60CC-486B-ACCE-72EC829FF10D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{3068A70E-87F8-4383-97E3-229F74A27108}C:\program files\kontiki\khost.exe] => (Allow) C:\program files\kontiki\khost.exe FirewallRules: [UDP Query User{5A7989DC-ED44-40E3-A827-EEBC8F789EAF}C:\program files\kontiki\khost.exe] => (Allow) C:\program files\kontiki\khost.exe FirewallRules: [{16F48716-B990-4AF0-9AB6-953B7B14416C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{8FBD60A3-66A8-4952-B9D7-441734A32E14}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [TCP Query User{2FCE2FC4-0985-4A06-8875-F0C54682A857}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe FirewallRules: [UDP Query User{5DF3C90F-032A-4A17-BCF5-AD3F10F7CCF9}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe FirewallRules: [{1F632747-7062-4C85-AF85-81EF0756D145}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{FCC31BB1-946A-4CB8-9AE0-DD7757463A6E}] => (Allow) svchost.exe FirewallRules: [{20C40515-9268-4103-AB97-4D00355B6DBF}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{22241887-B704-45D4-8322-DB5FC0D9FA71}] => (Allow) LPort=80 FirewallRules: [{8FAABE1A-C5C6-4051-A332-8036AF4E59A2}] => (Allow) LPort=80 FirewallRules: [{296DDA41-F4C0-468C-8D05-F9D446B390A7}] => (Allow) LPort=80 FirewallRules: [{176D44F7-68A8-47E0-A116-33FB6BF21355}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe FirewallRules: [{1AAA2CC7-45FA-4069-AC90-A1EDF2D5297B}] => (Allow) LPort=2869 FirewallRules: [{BFE36D9E-8CD3-462E-9B05-8729AE49F5A9}] => (Allow) LPort=1900 FirewallRules: [{1C1AA7EF-1450-4BB9-89CE-95C7D53BFE50}] => (Allow) C:\Program Files\Windows Live\Mesh\MOE.exe FirewallRules: [{5598BEA4-B9DE-465F-A67F-3BCCA8954FD7}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{D4D768CF-9BBE-4126-9415-3BB95DA9A809}] => (Allow) D:\Oprogramowanie\Opera\opera.exe FirewallRules: [{A03E30F3-5291-4699-823E-AABC29D49121}] => (Allow) D:\Oprogramowanie\Opera\opera.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/22/2015 03:31:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/22/2015 03:31:19 PM) (Source: VMCService) (EventID: 0) (User: ) Description: conflictManagerTypeValue Error: (08/22/2015 03:25:30 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas szukania interfejsu IVssWriterCallback. hr = 0x80070005. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {21ad9d5a-ddef-4c2d-b260-da8acb8611fa} Error: (08/22/2015 03:16:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/22/2015 03:16:35 PM) (Source: VMCService) (EventID: 0) (User: ) Description: conflictManagerTypeValue Error: (08/22/2015 03:00:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/22/2015 03:00:23 PM) (Source: VMCService) (EventID: 0) (User: ) Description: conflictManagerTypeValue Error: (08/22/2015 02:47:17 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/22/2015 02:47:02 PM) (Source: EventSystem) (EventID: 4609) (User: ) Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c Error: (08/22/2015 02:38:16 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd bcmwltry.exe, wersja 4.170.25.12, sygnatura czasowa 0x46f3437a, moduł powodujący błąd unknown, wersja 0.0.0.0, sygnatura czasowa 0x00000000, kod wyjątku 0xc0000005, przesunięcie błędu 0x04cf99a2, identyfikator procesu 0x750, godzina rozpoczęcia aplikacji 0xbcmwltry.exe0. System errors: ============= Error: (08/22/2015 03:41:33 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWFailureCommand%%5 Error: (08/22/2015 03:40:05 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWStart%%5 Error: (08/22/2015 03:33:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: BCM42RLY%%2 Error: (08/22/2015 03:33:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: BCM42RLY%%2 Error: (08/22/2015 03:33:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: BCM42RLY%%2 Error: (08/22/2015 03:33:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: BCM42RLY%%2 Error: (08/22/2015 03:31:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: 30000Roxio Hard Drive Watcher 9 Error: (08/22/2015 03:31:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Parallel port driver%%1058 Error: (08/22/2015 03:29:24 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 15:28:00 na 22/08/2015 było nieoczekiwane.