Additional scan result of Farbar Recovery Scan Tool (x64) Version:15-10-2015
Ran by Browar (2015-10-15 21:26:08)
Running from C:\Users\Browar\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2012-03-26 21:08:13)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2675937309-2342803569-238252381-500 - Administrator - Disabled)
Browar (S-1-5-21-2675937309-2342803569-238252381-1000 - Administrator - Enabled) => C:\Users\Browar
Guest (S-1-5-21-2675937309-2342803569-238252381-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2675937309-2342803569-238252381-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2675937309-2342803569-238252381-1000\...\uTorrent) (Version: 3.4.5.41073 - BitTorrent Inc.)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.00.631.5823 - ABBYY) Hidden
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.207 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 2.5.14.5 (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.5.0 - Asmedia Technology)
ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.0.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0010 - ASUS)
Auslogics Registry Cleaner (HKLM-x32\...\{8D8024F1-2945-49A5-9B78-5AB7B11D7942}_is1) (Version: 5.0.0.0 - Auslogics Labs Pty Ltd)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
CPUID CPU-Z 1.60 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM-x32\...\{02A312B5-1542-47B6-BFE9-F51358C39E86}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-205 207 Series Printer Uninstall (HKLM\...\EPSON XP-205 207 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Lidl-Photos FR (HKLM-x32\...\Lidl-Photos FR) (Version:  - )
Malwarebytes Anti-Malware wersja 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 41.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 pl)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 pl)) (Version: 38.2.0 - Mozilla)
MyDriveConnect 4.0.4.2260 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.4.2260 - TomTom)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
NVIDIA Sterownik 3D Vision 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.98 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.98 - NVIDIA Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{EB87675F-5281-4767-A54B-31931794C23D}) (Version: 3.3.9567 - OpenOffice.org)
Panel sterowania NVIDIA 355.98 (Version: 355.98 - NVIDIA Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Przewodnik pracy w sieci EPSON XP-205 207 Series (HKLM-x32\...\EPSON XP-205 207 Series Netg) (Version:  - )
Przewodnik użytkownika EPSON XP-205 207 Series (HKLM-x32\...\EPSON XP-205 207 Series Useg) (Version:  - )
Puran Defrag 7.7 (HKLM\...\Puran Defrag_is1) (Version:  - Puran Software)
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6373 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10001 - Realtek Semiconductor Corp.)
Rossmann Fotoswiat (HKLM-x32\...\Rossmann Fotoswiat) (Version: 5.0.6 - CEWE Stiftung u Co. KGaA)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.0 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.6.0 - Synaptics Incorporated)
UsbFix By El Desaparecido (HKLM-x32\...\Usbfix) (Version:  - El Desaparecido)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

04-10-2015 15:55:09 Removed Epson Connect Printer Setup
04-10-2015 15:56:44 Removed EPSON Printer Finder
04-10-2015 15:57:56 Removed Epson E-Web Print
04-10-2015 15:59:02 Removed Epson Event Manager
05-10-2015 20:57:25 Instalacja pakietu sterownika urządzenia: EPSON Drukarki
05-10-2015 20:58:13 Installed Epson Event Manager
05-10-2015 20:59:35 Installed Easy Photo Print Plug-in for PMB(Picture Motion BrowseŽ§á[
14-10-2015 13:56:39 Zaplanowany punkt kontrolny

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {574C8D28-28CA-4032-9ABE-2F10AF496FD8} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-01] (ASUS)
Task: {5BCF288F-FF1D-4E4B-B087-6D3F7A5BFCFA} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {72CF28B7-4EAD-4430-90E7-0A0462D55F35} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {72DB4021-E3A4-496F-A7C7-3FBD1B81BD3E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14] (Adobe Systems Incorporated)
Task: {816FD5C0-6932-49C5-A850-4C5078AF53A3} - System32\Tasks\{C509C24B-EAFD-4C76-A192-A91A6DCAC35A} => Firefox.exe hxxp://ui.skype.com/ui/0/7.7.0.103.272/pl/eula
Task: {84C6B56C-E2B2-4820-87F1-720413B22D31} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {A6308951-6BC9-4D33-8A0D-5562AE239F22} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-08-31] (ASUSTeK Computer Inc.)
Task: {EF746245-759B-49E6-809E-879BCE5A274A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-05 03:36 - 2015-09-14 02:29 - 00011896 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2010-07-14 16:11 - 2010-07-14 16:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2011-08-12 07:47 - 2011-08-12 07:47 - 03820032 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe
2010-05-23 19:30 - 2010-05-23 19:30 - 00160768 _____ () C:\Program Files\Rainlendar2\lua51.dll
2011-08-12 07:47 - 2011-08-12 07:47 - 00312832 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2010-05-23 19:30 - 2010-05-23 19:30 - 00013824 _____ () C:\Program Files\Rainlendar2\lfs.dll
2012-03-26 23:34 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2012-03-26 23:50 - 2011-05-05 14:30 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2010-09-23 16:53 - 2010-09-23 16:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2013-01-08 22:30 - 2015-09-14 00:09 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-02 22:56 - 2015-09-14 02:29 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2011-08-31 15:33 - 2011-08-31 15:33 - 00208384 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll
2015-04-07 19:44 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2675937309-2342803569-238252381-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Browar\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 212.27.40.241 - 212.27.40.240
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
MSCONFIG\startupreg: HotKeysCmds => "C:\Windows\system32\hkcmd.exe"
MSCONFIG\startupreg: Persistence => "C:\Windows\system32\igfxpers.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynAsusAcpi => %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{92E10F61-FE8D-4013-A403-B663859267B5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{CB4E72A8-4572-4618-B8AE-E2F53646546D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{BAEBA9C9-EDA6-4E40-B87E-B93B6E6C9FFE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C037EAB9-1877-4E3A-A4A6-EEDAC50ADBF2}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{FA29D0FF-9D05-4B71-B26B-D1DFBD206F98}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{725D2CDB-5A3C-4C40-AF72-CEA9203DC387}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{76F81001-E866-4260-86B6-4BDFF1A9D396}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{D3B96E5E-9250-4CE7-99F8-5FAA9EC50840}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{B6BA147D-E90C-40F9-8057-39B60ED5E90D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{3E266A5F-04FE-42CB-BB6E-C607081D6D89}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{4DF964C9-1C07-4DBC-A9F5-CC30D56243A1}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7D8DD7B6-4783-40BA-B79D-9C062C75B7D5}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{E653B427-162C-4476-AB68-B3F71A8CC2E8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1D401BC5-8F35-4F00-BADB-7D4C11B82423}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E03EE4BB-8114-4B20-9ECC-5BD2FCCE14FB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BABAAE11-9445-44E2-AB9D-18280D36FAB0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{FEC52599-5F5F-4CC5-B52D-B8E105253BEE}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{523B4468-E9A3-4B52-A8AC-0ED561D42BF0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{F8774CB8-46FC-454C-A284-E2370D86C36B}] => (Allow) C:\Users\Browar\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DA149B92-02BA-4FDC-84A0-D957E4DD20D3}] => (Allow) C:\Users\Browar\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6D47EF83-814D-476D-A4BD-8E7B52E5EE9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6D673DE1-0F74-46D9-8040-9326D3BA963C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{4082AA76-FF49-4F3B-9EFB-9020A657A52C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{0A709E35-01FD-4C77-8330-E24242C13C92}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{86A283BF-2CF4-44CB-B221-B941EBC83919}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{36937137-E329-42C7-8888-6B37C79DBC19}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{F11D204C-4DAB-48C4-AF85-23E3D9A1237C}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [TCP Query User{21BCE5E1-26F5-4DD9-BD27-209E539A5C5F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{53F077A4-2397-48A2-85EA-7387E5FF879C}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{59A499F7-BD1A-4B82-A4C2-75ABBBE75F49}] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{E2ED66C1-56AD-476C-9E26-AAF34C654DC2}] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

==================== Faulty Device Manager Devices =============

Name: Bluetooth Module
Description: Bluetooth Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/15/2015 05:52:37 PM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (10/15/2015 05:52:30 PM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402.Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (10/15/2015 12:52:16 PM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (10/15/2015 12:52:08 PM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402.Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (10/15/2015 08:34:52 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikacja: Avira.OE.ServiceHost.exe
Wersja architektury: v4.0.30319
Opis: proces został przerwany z powodu nieobsłużonego wyjątku.
Informacje o wyjątku: System.Xml.XmlException
Stos:
   w System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   w System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   w System.Xml.XmlTextReaderImpl.Read()
   w System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   w System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   w System.Xml.XmlDocument.Load(System.String)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   w Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   w Avira.OE.WinCore.OeProductInfo.get_Culture()
   w Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   w Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   w Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   w System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   w System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   w System.Threading.ThreadPoolWorkQueue.Dispatch()
   w System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (10/15/2015 08:34:41 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikacja: Avira.OE.ServiceHost.exe
Wersja architektury: v4.0.30319
Opis: proces został przerwany z powodu nieobsłużonego wyjątku.
Informacje o wyjątku: System.Xml.XmlException
Stos:
   w System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   w System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   w System.Xml.XmlTextReaderImpl.Read()
   w System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   w System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   w System.Xml.XmlDocument.Load(System.String)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   w Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   w Avira.OE.WinCore.OeProductInfo.get_Culture()
   w Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   w Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   w Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   w System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   w System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   w System.Threading.ThreadPoolWorkQueue.Dispatch()
   w System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (10/15/2015 08:34:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/15/2015 08:34:19 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikacja: Avira.OE.ServiceHost.exe
Wersja architektury: v4.0.30319
Opis: proces został przerwany z powodu nieobsłużonego wyjątku.
Informacje o wyjątku: System.Xml.XmlException
Stos:
   w System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   w System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   w System.Xml.XmlTextReaderImpl.Read()
   w System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   w System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   w System.Xml.XmlDocument.Load(System.String)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   w Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   w Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   w Avira.OE.WinCore.OeProductInfo.get_Culture()
   w Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   w Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   w Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   w System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   w System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   w System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   w System.Threading.ThreadPoolWorkQueue.Dispatch()
   w System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (10/15/2015 07:53:20 AM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (10/15/2015 07:53:09 AM) (Source: MsiInstaller) (EventID: 11402) (User: ZARZĄDZANIE NT)
Description: Product: Google Earth Plug-in -- Error 1402.Could not open key: HKEY_LOCAL_MACHINE32\Software\Google\GoogleEarthPlugin.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.


System errors:
=============
Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058

Error: (10/15/2015 09:23:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: 
%%1058


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz
Percentage of memory in use: 51%
Total physical RAM: 4006.7 MB
Available physical RAM: 1935.64 MB
Total Virtual: 8011.61 MB
Available Virtual: 5580.52 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:115.66 GB) (Free:51.38 GB) NTFS
Drive d: () (Fixed) (Total:350 GB) (Free:255.04 GB) NTFS
Drive f: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: EC34CAE9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=115.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=350 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================