Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-01-2017 Ran by Tommy (03-02-2017 21:09:52) Running from C:\Users\Tommy\Downloads Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) (2009-04-02 21:06:44) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-365035492-1695249228-1794944439-500 - Administrator - Disabled) Guest (S-1-5-21-365035492-1695249228-1794944439-501 - Limited - Disabled) => C:\Users\Guest guest_ (S-1-5-21-365035492-1695249228-1794944439-1006 - Limited - Enabled) => C:\Users\guest_ Tommy (S-1-5-21-365035492-1695249228-1794944439-1000 - Administrator - Enabled) => C:\Users\Tommy __vmware_user__ (S-1-5-21-365035492-1695249228-1794944439-1005 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C} AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.6425.1000 - Microsoft Corporation) Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated) Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated) Adobe Reader 8.3.1 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A83000000003}) (Version: 8.3.1 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.) Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version: 3.0 - ) Age of Wonders 2 (HKLM\...\Age of Wonders 2_is1) (Version: - GOG.com) Age of Wonders Shadow Magic (HKLM\...\Age of Wonders Shadow Magic) (Version: - ) Aggiornamento della protezione per Windows Media Player (KB2845142) (HKLM\...\KB2845142_WM64) (Version: - Microsoft Corporation) Airline Tycoon Evolution (HKLM\...\{16E43D5F-5296-4D53-B303-9D951AFE510F}) (Version: - ) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) AMR Player 1.3 (HKLM\...\{2F881B56-CBDF-4EC6-A8D2-6412A879C66A}_is1) (Version: - www.amrplayer.com) Anki (HKLM\...\Anki) (Version: - ) Archiwizator WinRAR (HKLM\...\WinRAR archiver) (Version: - ) ArcSoft Print Creations - Album Page (HKLM\...\{E6B4117F-AC59-4B13-9274-EB136E8897EE}) (Version: - ArcSoft) ArcSoft Print Creations - Funhouse (HKLM\...\{9591C049-5CAE-4E89-A8D9-191F1899628B}) (Version: - ArcSoft) ArcSoft Print Creations - Greeting Card (HKLM\...\{F04F9557-81A9-4293-BC49-2C216FA325A7}) (Version: - ArcSoft) ArcSoft Print Creations - Photo Book (HKLM\...\{56589DFE-0C29-4DFE-8E42-887B771ECD23}) (Version: - ArcSoft) ArcSoft Print Creations - Photo Calendar (HKLM\...\{CA9ED5E4-1548-485B-A293-417840060158}) (Version: - ArcSoft) ArcSoft Print Creations - Scrapbook (HKLM\...\{B0D83FCD-9D42-43ED-8315-250326AADA02}) (Version: - ArcSoft) ArcSoft Print Creations - Slimline Card (HKLM\...\{007B37D9-0C45-4202-834B-DD5FAAE99D63}) (Version: - ArcSoft) ArcSoft Print Creations (HKLM\...\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}) (Version: 2.8.255.384 - ArcSoft) Assistente per l'accesso a Windows Live (HKLM\...\{DC7B9AB3-2635-45AA-957D-90FDE7CD51D7}) (Version: 5.000.818.6 - Microsoft Corporation) Asterisk Key 10.0 (HKLM\...\asterisk key) (Version: - ) ASUS CopyProtect (HKLM\...\{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}) (Version: 1.0.0007 - ASUS) ASUS Data Security Manager (HKLM\...\{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}) (Version: 1.00.0006 - ASUS) ASUS LifeFrame3 (HKLM\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.10 - ASUS) ASUS Live Update (HKLM\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.6 - ASUS) ASUS Power4Gear eXtreme (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.0.18 - ASUS) ASUS SmartLogon (HKLM\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0005 - ASUS) ASUS Touch Pad Extra (HKLM\...\{DB891739-2EB3-45A8-9CBD-941C255CECD4}) (Version: - ) ASUS WebCam Driver (HKLM\...\InstallShield_{BCC5DC79-2275-4171-8CEA-39F0DD9ADF58}) (Version: 1.00.0000 - Nome società) ASUS WebCam Driver (Version: 1.00.0000 - Nome società) Hidden Asus_Camera_ScreenSaver (HKLM\...\Asus_Camera_ScreenSaver) (Version: 2.0.0008 - ASUS) Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros) ATI Catalyst Install Manager (HKLM\...\{5EB5EEA7-6432-5827-0080-899DA70A97BA}) (Version: 3.0.664.0 - ATI Technologies, Inc.) ATK Generic Function Service (HKLM\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0008 - ATK) ATK Hotkey (HKLM\...\{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}) (Version: 1.00.0012 - ATK) ATK Media (HKLM\...\{D1E5870E-E3E5-4475-98A6-ADD614524ADF}) (Version: 2.0.0000 - ASUS) ATKOSD2 (HKLM\...\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}) (Version: 6.64.1.4 - ATK) Audacity 2.0.2 (HKLM\...\Audacity_is1) (Version: 2.0.2 - Audacity Team) AutoCAD 2012 - Polski (HKLM\...\AutoCAD 2012 - Polski) (Version: 18.2.51.0 - Autodesk) AutoCAD 2012 - Polski (Version: 18.2.51.0 - Autodesk) Hidden AutoCAD 2012 Language Pack - Polski (Version: 18.2.51.0 - Autodesk) Hidden Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Dodatek Autodesk Inventor Fusion dla programu AutoCAD 2012) (Version: 0.0.1.138 - Autodesk) Autodesk Material Library 2012 (HKLM\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autorun Angel 1.0.45 (HKLM\...\{210F3CE3-C716-416C-99AE-7151A0968BF2}_is1) (Version: - NictaTech Software) avast! Free Antivirus (HKLM\...\avast) (Version: 7.0.1474.0 - AVAST Software) BitTorrent (HKLM\...\BitTorrent) (Version: 7.7.3.28706 - BitTorrent Inc.) BitTorrent (HKU\S-1-5-21-365035492-1695249228-1794944439-1000\...\BitTorrent) (Version: - BitTorrent, Inc) Brother MFL-Pro Suite MFC-250C (HKLM\...\{3A08B59E-A9F0-4F4D-B7E5-6875D7F13327}) (Version: 1.1.8.0 - Brother Industries, Ltd.) BurnAware Free 3.0.7 (HKLM\...\BurnAware Free_is1) (Version: - Burnaware Technologies) bwin Casinò Piccadilly (HKLM\...\bwin Casinò Piccadilly) (Version: - ) ccc-Branding (HKLM\...\{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}) (Version: 1.00.0000 - ATI) ccc-core-static (Version: 2008.0309.2141.36947 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: - Piriform) CCScore (Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.) CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.) CyberLink LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.0.2908 - CyberLink Corp.) CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.1924 - CyberLink Corp.) Disk Space Analyzer (HKLM\...\{4388F4C2-5F3C-40EF-A292-E0E94F48300D}) (Version: 7.4 - Windsty, Inc) Dodatek Autodesk Inventor Fusion dla programu AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden Dodatek Autodesk Inventor Fusion Language Pack dla programu AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden doPDF 7.1 printer (HKLM\...\doPDF 7 printer_is1) (Version: - Softland) eMule (HKLM\...\eMule) (Version: - ) ESSPDock (Version: 6.03.0001.0004 - Nazwa firmy) Hidden EuroPlus+ Angielski z Cambridge (HKLM\...\{B8E09B53-B28F-4DDA-8AE0-490E3129EFFF}) (Version: - ) Express Gate (HKLM\...\{27D51A76-371D-48B6-B06E-4137A15B7583}) (Version: 0.7.7.0 - devicevm) FARO LS 1.1.406.58 (HKLM\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FASTWEB Mobile (HKLM\...\FASTWEB Mobile) (Version: 13.001.07.03.547 - Huawei Technologies Co.,Ltd) FormatFactory 2.30 (HKLM\...\FormatFactory) (Version: 2.30 - Free Time) Free Audio Editor (HKLM\...\Free Audio Editor_is1) (Version: 1.1.35.831 - Digital Wave Ltd) Free Video Editor (HKLM\...\Free Video Editor_is1) (Version: 1.4.53.831 - Digital Wave Ltd) GameDesire-Bingo (HKLM\...\GameDesire-Bingo) (Version: - ) GameDesire-Boards (HKLM\...\GameDesire-Boards) (Version: - ) GameDesire-Pool & Snooker (HKLM\...\GameDesire-Pool & Snooker) (Version: - ) GameRanger (HKU\S-1-5-21-365035492-1695249228-1794944439-1000\...\GameRanger) (Version: - GameRanger Technologies) GG Tools (HKLM\...\GG Tools_is1) (Version: 2.6.4 - Krzysztof Mortka / kRk Software) Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.) Google Earth (HKLM\...\{A0C18B96-AB79-46BD-8321-6FA83E6D25B9}) (Version: 7.1.7.2606 - Google) Google Photos Backup (HKU\.DEFAULT\...\Google Photos Backup) (Version: 1.1.0.239 - Google, Inc.) Google Toolbar for Firefox (HKLM\...\{2CCBABCB-6427-4A55-B091-49864623C43F}) (Version: 7.1.20101113 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.32.7 - Google Inc.) Hidden Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) HD Tune 2.55 (HKLM\...\HD Tune_is1) (Version: - EFD Software) Hide Folders 2009 3.9.6 (HKLM\...\Hide Folders 2009_is1) (Version: 3.9.6 - FSPro Labs) Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org) inSSIDer Home (HKLM\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC) ipla 2.8.4 (HKLM\...\ipla) (Version: 2.8.4 - Redefine Sp z o.o.) IrfanView (remove only) (HKLM\...\IrfanView) (Version: - ) Java 8 Update 66 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation) Junk Mail filter update (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden K-Lite Codec Pack 5.0.5 (Basic) (HKLM\...\KLiteCodecPack_is1) (Version: 5.0.5 - ) LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - ) LightScribe System Software 1.14.17.1 (HKLM\...\{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}) (Version: 1.14.17.1 - LightScribe) Madagaskar (HKLM\...\InstallShield_{0FB261F3-6F16-43FD-A404-F377C169B937}) (Version: 1.00.0000 - Activision) Madagaskar (TM) (Version: 1.00.0000 - Activision) Hidden Malwarebytes Anti-Malware wersja 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) MemMonster 4.70 (HKLM\...\Magellass Corp. - MemMonster_is1) (Version: - ) Microsoft .NET Framework 3.5 - Language Pack SP1 (italiano) (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - ita) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office 2007 Service Pack 2 (SP2) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 2 (SP2) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation) Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (HKLM\...\{90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{9F57BDED-B51B-4D2F-B360-5B4EFAAF0F1A}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.3 (HKLM\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation) Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (HKLM\...\{90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{2278E02A-AB15-4BF7-B2B4-5C0EEB4B7EEB}) (Version: - Microsoft) Microsoft Office Outlook Connector (HKLM\...\{95120000-0120-0409-0000-0000000FF1CE}) (Version: 12.0.6414.1000 - Microsoft Corporation) Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (HKLM\...\{90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{C76C02F1-B07F-4974-876A-A18DEC9887C8}) (Version: - Microsoft) Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (HKLM\...\{90120000-001B-0410-0000-0000000FF1CE}_PROHYBRIDR_{E5B82DB3-DD7D-4C45-BC5E-09864B26F9BC}) (Version: - Microsoft) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools per Office Runtime (x86) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - ITA) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Windows Media Video 9 VCM (HKLM\...\WMV9_VCM) (Version: - ) Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft) Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft) Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft) Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft) Monopoly (HKLM\...\{20FA8AEE-E785-4F79-98EB-2067A8F395F4}) (Version: - ) Monopoly by Parker Brothers (HKLM\...\Monopoly by Parker Brothers) (Version: 1.0.406.0 - GameHouse, Inc.) Mozilla Firefox 51.0.1 (x86 pl) (HKLM\...\Mozilla Firefox 51.0.1 (x86 pl)) (Version: 51.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla) MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NAVIGON Fresh 3.5.1 (HKLM\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON) NB Probe (HKLM\...\{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}) (Version: - ) netbrdg (Version: 7.01.0000.0001 - EASTMAN KODAK Company) Hidden Nokia Connectivity Cable Driver (HKLM\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia) Notepad++ (32-bit x86) (HKLM\...\Notepad++) (Version: 7.3.1 - Notepad++ Team) Nowe Gadu-Gadu (HKLM\...\Nowe Gadu-Gadu) (Version: - GG Network S.A.) O&O Defrag Professional (HKLM\...\{CEA6E483-51CC-4595-A704-E5BD9F5B22E6}) (Version: 17.0.468 - O&O Software GmbH) Octoshape Streaming Services (HKU\S-1-5-21-365035492-1695249228-1794944439-1000\...\Octoshape Streaming Services) (Version: - ) Oprogramowanie Kodak EasyShare (HKLM\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version: - Eastman Kodak Company) Opti Drive Control 1.70 (HKLM\...\{80157B54-DB3E-4EE9-8AD8-63A905765FF4}_is1) (Version: - Erik Deppe) PC Connectivity Solution (HKLM\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery) Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Quake Live Internet Explorer Plugin (HKLM\...\{FA4BF139-4D09-462E-B4AF-E89C640224C0}) (Version: 1.0.433 - id Software) Reader for PC (HKLM\...\{38FB32F7-5A2A-40E4-B106-4C35F75725CD}) (Version: 2.4.00.05230 - Sony Corporation) Real Alternative 2.0.2 (HKLM\...\RealAlt_is1) (Version: 2.0.2 - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: - Realtek Semiconductor Corp.) rulesPlayer 0.99.3 (HKLM\...\rulesPlayer) (Version: - ) S¹siedzi z Piek³a Rodem 1 i 2 (HKLM\...\{6AAF923E-077E-4543-BA1C-42A75BB03677}) (Version: 1.0 - ) SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version: - ) Samsung Mobile phone USB driver Software (HKLM\...\Samsung Mobile phone USB driver) (Version: - ) SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version: - ) SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version: - ) Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.) Scooby-Doo!(TM) First Frights (HKLM\...\{A3D11978-F110-419E-8981-2CCFC17ADE64}) (Version: 1.00 - WB Games) SFR (Version: 8.01.0000.0001 - Eastman Kodak Company) Hidden Skins (Version: 2008.0309.2141.36947 - ATI) Hidden Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.4.11328 - Skype Technologies S.A.) Skype™ 6.20 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - ) Super Szklarz 4.2.0.70 (HKLM\...\Super Szklarz_is1) (Version: 4.2.0.70 - ) Supertintin 1.1.14.0021 (HKLM\...\Supertintin for Skype_is1) (Version: 1.1.14.0021 - Imtiger Software Inc.) Supertintin 1.2.0.10 (HKLM\...\Supertintin Skype Video Call Recorder_is1) (Version: =1.2.0.10 - Imtiger Software Inc.) swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.1.8.0 - Synaptics) TomTom HOME (HKLM\...\{3C595537-D968-48D5-AAB1-CCB2E90FA59A}) (Version: 2.9.94 - Nazwa firmy) TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.) Trojan Remover 6.8.2 (HKLM\...\Trojan Remover_is1) (Version: 6.8.2 - Simply Super Software) TuneUp Utilities 2013 (HKLM\...\TuneUp Utilities 2013) (Version: 13.0.2020.84 - TuneUp Software) TuneUp Utilities 2013 (Version: 13.0.2020.84 - TuneUp Software) Hidden TuneUp Utilities Language Pack (pl-PL) (Version: 13.0.2020.84 - TuneUp Software) Hidden UltraISO Premium V9.35 (HKLM\...\UltraISO_is1) (Version: - ) Unity Web Player (HKU\S-1-5-21-365035492-1695249228-1794944439-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Update voor Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{5CF7002F-6F49-4482-9564-5614FBE560FA}) (Version: - Microsoft) Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{15D84E79-1ED7-42C5-B2FD-745C3FBDDDC5}) (Version: - Microsoft) Update voor Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0413-0000-0000000FF1CE}_PROHYBRIDR_{A66AE6A1-8D8C-4102-BC18-38CBDE40F809}) (Version: - Microsoft) USB2.0 UVC 1.3M WebCam (HKLM\...\USB2.0 UVC 1.3M WebCam) (Version: - ) Usługa Autodesk Content Service (HKLM\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk) VDownloader 3.6.943 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited) VirtualDubMod 1.5.10.2 PL (HKLM\...\VirtualDubMod) (Version: 1.5.10.2 PL - ) Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) VMware Workstation (HKLM\...\VMware_Workstation) (Version: 7.0.1.11056 - VMware, Inc) VMware Workstation (Version: 7.0.1.11056 - VMware, Inc.) Hidden Winamp (HKLM\...\Winamp) (Version: 5.56 - Nullsoft, Inc) Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Sync (HKLM\...\{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Upload Tool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinFlash (HKLM\...\{DE10AB76-4756-4913-BE25-55D1C1051F9A}) (Version: - ) WinPcap 4.1.1 (HKLM\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies) Wireless Console 2 (HKLM\...\{83F73CB1-7705-49D1-9852-84D839CA2A45}) (Version: 2.0.10 - ATK) Wireless Network 300N Adapter (HKLM\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 1.0.3.0 - Sitecom) Worms Armageddon (HKLM\...\Worms Armageddon) (Version: - ) Worms Revolution (HKLM\...\Worms Revolution_is1) (Version: - ) Yahoo! Powered (HKLM\...\{71A49964-2124-48E4-90A4-38644024EBE4}) (Version: - ) <==== ATTENTION YDP Flash Speech Recognition Support 1.0 (HKLM\...\YDP Flash Speech Recognition Support) (Version: 1.0 - YDP) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{1A781DED-4153-C22D-3213-A3211E29DF13}\InprocServer32 -> C:\Users\Tommy\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\cardsV2.dll (Ganymede Technologies) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Tommy\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Polski\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{7D4733C0-C43B-4A81-AF43-F9B20D1F8348}\InprocServer32 -> C:\Users\Tommy\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-apoctoshape.dll (Octoshape ApS) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Polski\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Polski\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Polski\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Polski\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-365035492-1695249228-1794944439-1000_Classes\CLSID\{E95CF138-4c54-A587-8175-3AD80997CB14}\InprocServer32 -> C:\Users\Tommy\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Soccer.dll (Ganymede Technologies) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {039B2081-7381-4272-B551-5C868740101F} - System32\Tasks\{13540CB8-44A9-4611-BED7-ACDFF28FBF5D} => pcalua.exe -a "C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZQ0PIU1G\Nero-7.0.1.2_eng[1].exe" -d C:\Users\Tommy\Desktop Task: {119803FB-3E29-4A82-B78D-F554D4AF911F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-18UA => C:\Windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe [2015-06-09] (Google Inc.) Task: {13383641-5F1D-424F-9B36-1993BFC0A34C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2012-10-15] (TuneUp Software) Task: {26797E0D-FB5E-4E49-96DA-9B9B0416E3FD} - System32\Tasks\{0056388F-A4C9-44B3-831C-E4B82DFB0F51} => Iexplore.exe hxxps://ui.skype.com/ui/0/7.29.0.102/pl/abandoninstall?page=tsMain Task: {2F058C25-8D50-4F0A-8357-38661726F596} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-11-09] (Oracle Corporation) Task: {38696B26-D202-4631-A85B-E9AC65C0A345} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files\ASUS\SmartLogon\sensorsrv.exe Task: {38DA0E1F-13FA-41F3-A35E-165868C704D9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-14] (Adobe Systems Incorporated) Task: {3DE577B8-79AE-4797-BF06-9E9EE7DC17D4} - System32\Tasks\{1CB479D7-A47A-4A67-8CDC-83285BE60FBE} => pcalua.exe -a "C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SX0AI1WN\billiards_install_1_0_1_12[2].exe" -d C:\Users\Tommy\Desktop Task: {3E09BD14-32B8-49C9-B548-4D89E7C3BC0D} - System32\Tasks\{A08EF410-7AC8-4517-A546-939D56D501B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.18.0.106/pl/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {7F874B50-9416-4784-9AFC-D542682FBE91} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-17] (Avast Software s.r.o.) Task: {930DC131-DAB4-4EA1-9BF0-632E46904E63} - System32\Tasks\{589007CF-FD8D-41AD-8EF8-51F34C880CA1} => pcalua.exe -a "C:\Program Files\Kodak\Printer Dock\Kodak Wireless Printer Computer Setup Assistant.exe" Task: {9C7E03BB-E635-48EC-AC21-78ED2CDE7C26} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {9EC48BEA-2755-4B8C-95A5-89D86E02C1C8} - System32\Tasks\{2443F698-1912-449D-A218-DFB9CE0787B8} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/pl/abandoninstall?page=tsMain Task: {A1F6C548-9692-4241-8F36-D7E155708152} - System32\Tasks\{DC229253-6120-4C4C-A38F-9577BF42BA6B} => pcalua.exe -a "C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4721IU3M\billiards_install_1_0_1_10[1].exe" -d C:\Windows\system32 Task: {BA2B3456-E2DE-4551-8BBF-20474DE3AC29} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {C3CF384B-EE55-4D09-85F3-2A48C5961DB2} - System32\Tasks\{305CFE99-0DFE-4924-BA18-3461BE514B6D} => pcalua.exe -a G:\Support\GameSpy\ArcadeInstallAOWSM13c.EXE -d G:\Support\GameSpy Task: {CBC93858-826A-4C80-932A-8681F29E6B81} - System32\Tasks\{CB45DE41-7CA6-4DCA-AC2A-86A4561511EA} => C:\Program Files\Skype\Phone\Skype.exe [2014-08-27] (Skype Technologies S.A.) Task: {CF30FE47-1290-4CD9-9516-59F240DAA7E1} - System32\Tasks\ASUS Live Update => C:\Program Files\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {E7ED0D1A-46E6-43A5-B4C8-6085391AB2B4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-18Core => C:\Windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe [2015-06-09] (Google Inc.) Task: {EC0E2D2B-7F20-4812-9031-8EB296ABE72B} - System32\Tasks\{66CAECB9-E6CC-4767-9F47-FB3404EAB79B} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.27.80.101/pl/abandoninstall?page=tsMain (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-18Core.job => C:\Windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-18UA.job => C:\Windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2009-04-02 23:28 - 2007-05-18 10:31 - 00073728 _____ () C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe 2009-04-02 23:09 - 2007-02-06 02:13 - 00094208 _____ () C:\Program Files\ATK Hotkey\ASLDRSrv.exe 2009-04-02 23:28 - 2007-08-08 08:08 - 00094208 _____ () C:\Program Files\ATKGFNEX\GFNEXSrv.exe 2017-02-03 20:42 - 2017-02-03 18:53 - 05636608 _____ () C:\Program Files\AVAST Software\Avast\defs\17020300\algo.dll 2012-03-14 17:59 - 2001-10-28 17:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll 2016-10-07 14:24 - 2016-08-31 18:55 - 00114664 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\zlib1.dll 2016-10-07 14:24 - 2016-10-27 12:13 - 00108008 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll 2016-10-07 14:24 - 2016-10-27 12:13 - 00024040 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll 2016-10-07 14:24 - 2016-10-27 12:13 - 00048104 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll 2009-04-02 23:32 - 2007-08-03 20:24 - 00125496 _____ () C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe 2009-04-02 23:32 - 2007-09-14 18:00 - 00147456 _____ () C:\Program Files\ASUS\NB Probe\SPM\spdiskex.dll 2009-04-02 23:32 - 2003-11-28 10:11 - 00135168 _____ () C:\Program Files\ASUS\NB Probe\SPM\spos.dll 2009-04-02 23:32 - 2005-08-29 23:24 - 00081920 _____ () C:\Program Files\ASUS\NB Probe\SPM\spnbacpi.dll 2009-04-02 23:32 - 2003-09-10 00:08 - 00049152 _____ () C:\Program Files\ASUS\NB Probe\SPM\spdmi.dll 2009-04-02 23:32 - 2006-04-04 18:24 - 00036864 _____ () C:\Program Files\ASUS\NB Probe\SPM\ghadmi.dll 2009-04-02 23:32 - 2005-04-08 03:25 - 00077824 _____ () C:\Program Files\ASUS\NB Probe\SPM\spmemory.dll 2008-03-09 15:01 - 2008-03-09 15:01 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll 2009-04-02 23:09 - 2004-05-28 02:13 - 00057344 _____ () C:\Program Files\ATK Hotkey\CMSSC.dll 2009-04-02 23:09 - 2007-01-18 03:26 - 07708672 _____ () C:\Program Files\ATKOSD2\ATKOSD2.exe 2009-04-02 23:15 - 2007-07-06 00:53 - 01040384 _____ () C:\Program Files\Wireless Console 2\wcourier.exe 2009-04-02 23:09 - 2006-12-19 01:26 - 02420736 _____ () C:\Program Files\ATK Hotkey\ATKOSD.exe 2009-04-02 23:35 - 2009-04-02 23:35 - 00033136 _____ () C:\Windows\ASScrPro.exe 2009-04-02 23:09 - 2007-04-17 21:39 - 00077824 _____ () C:\Program Files\ATK Hotkey\KBFiltr.exe ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fsproflt => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\fsproflt => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE restricted site: HKU\S-1-5-21-365035492-1695249228-1794944439-1000\...\gadu-gadu.pl -> hxxp://komunikator.gadu-gadu.pl ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 11:23 - 2016-12-28 23:26 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 clients2.google.com 127.0.0.1 v1.ff.avast.com 127.0.0.1 vlcproxy.ff.avast.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tommy\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp DNS Servers: 208.67.222.222 - 208.67.222.220 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^O&O Defrag Tray.lnk => C:\Windows\pss\O&O Defrag Tray.lnk.CommonStartup MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe MSCONFIG\startupreg: ASUSTPE => C:\Windows\system32\ASUSTPE.exe MSCONFIG\startupreg: AutoLaunch => C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly MSCONFIG\startupreg: CLMLServer => "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" MSCONFIG\startupreg: etMonitor => C:\Windows\etMon.exe MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart MSCONFIG\startupreg: OODefragTray => C:\Program Files\OO Software\Defrag\oodtray.exe MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: supertintin_skype => C:\Program Files\Supertintin for Skype\supertintin_skype.exe /start_context sys_auto MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [WinCollab-Out-UDP] => %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-UDP] => %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-TCP] => %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-TCP] => %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-DFSR-Out-TCP] => %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-DFSR-In-TCP] => %SystemRoot%\system32\dfsr.exe FirewallRules: [{B6C139BE-31E3-4E47-8FCE-B26B9161CB07}] => C:\Program Files\Windows Live\Messenger\wlcsdk.exe FirewallRules: [{7E8721D9-4295-476D-B4EC-1708DD4B5DB0}] => C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{B785B989-E178-4213-8377-0C64A9183317}] => C:\Program Files\DNA\btdna.exe FirewallRules: [{4D9F4DCA-6724-4E5B-9328-DE65217D51A4}] => C:\Program Files\DNA\btdna.exe FirewallRules: [TCP Query User{AD76EF12-7A90-478C-9463-97039D516424}C:\program files\nowe gadu-gadu\gg.exe] => C:\program files\nowe gadu-gadu\gg.exe FirewallRules: [UDP Query User{C7A811E1-8898-43F5-9249-9ED4DF5C4B32}C:\program files\nowe gadu-gadu\gg.exe] => C:\program files\nowe gadu-gadu\gg.exe FirewallRules: [TCP Query User{F71B09F4-0855-4736-88FE-8E00B2E64FA2}C:\program files\bittorrent\bittorrent.exe] => C:\program files\bittorrent\bittorrent.exe FirewallRules: [UDP Query User{022B6CF1-67C9-4040-821E-2E2FCEBE232B}C:\program files\bittorrent\bittorrent.exe] => C:\program files\bittorrent\bittorrent.exe FirewallRules: [TCP Query User{DE0E9F1D-9A3E-4FF9-AF0B-A9EE12A41CA1}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe FirewallRules: [UDP Query User{B180C91F-2D22-4164-BA2F-384BEE4AED3D}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe FirewallRules: [TCP Query User{3A63EE87-A7BF-434E-ADFB-2D1F816F1107}C:\windows\system32\dplaysvr.exe] => C:\windows\system32\dplaysvr.exe FirewallRules: [UDP Query User{897EB154-75B0-435B-9D3E-D74382251671}C:\windows\system32\dplaysvr.exe] => C:\windows\system32\dplaysvr.exe FirewallRules: [TCP Query User{4A9EF142-672A-44C3-930B-F69655776B1A}C:\program files\monte cristo\airline tycoon evolution\at.exe] => C:\program files\monte cristo\airline tycoon evolution\at.exe FirewallRules: [UDP Query User{CEC42902-7382-436D-AAF1-24618BB85DBC}C:\program files\monte cristo\airline tycoon evolution\at.exe] => C:\program files\monte cristo\airline tycoon evolution\at.exe FirewallRules: [{A3F3A15D-5942-4D85-9F1A-8CE5D88596A4}] => C:\Windows\System32\PnkBstrA.exe FirewallRules: [{A55BC98A-4AFE-420E-9ECD-160E4064F56E}] => C:\Windows\System32\PnkBstrA.exe FirewallRules: [{B501E2A6-519A-419A-84FA-DAB122CB46F4}] => C:\Program Files\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{FF4EF15A-D90E-487E-A39E-DCDBD5D2899D}] => C:\Program Files\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{C3647BB6-06BB-4A3B-AC55-5A981A237506}] => C:\Program Files\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{5138E52A-6DD1-485F-9FE6-9E42323DB8DE}] => C:\Program Files\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [TCP Query User{E97CA983-FE75-4F96-953E-210AC5395223}C:\users\tommy\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => C:\users\tommy\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe FirewallRules: [UDP Query User{A24E6413-5083-4830-B8BB-A176CB8E4091}C:\users\tommy\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => C:\users\tommy\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe FirewallRules: [TCP Query User{43F2BA5B-E3A5-4587-8550-63BD527BDB93}C:\program files\emule\emule.exe] => C:\program files\emule\emule.exe FirewallRules: [UDP Query User{E2059B84-8F65-4D3C-A212-311ADE3830BA}C:\program files\emule\emule.exe] => C:\program files\emule\emule.exe FirewallRules: [TCP Query User{0C54FB32-3FED-48FD-A69B-E6E20BE7864D}C:\program files\google\google earth\plugin\geplugin.exe] => C:\program files\google\google earth\plugin\geplugin.exe FirewallRules: [UDP Query User{3EA2B5DC-E677-47CC-8055-E46687AE7B5E}C:\program files\google\google earth\plugin\geplugin.exe] => C:\program files\google\google earth\plugin\geplugin.exe FirewallRules: [{E0579719-6E33-484B-AFC9-BEFEA4D57FF0}] => LPort=80 FirewallRules: [{63BB9726-5116-4C1F-B3A8-FB67D94EAA62}] => LPort=80 FirewallRules: [{F3EC20C2-54A8-42CF-A724-786B2727ACCF}] => LPort=80 FirewallRules: [TCP Query User{26AD11FA-FCC7-476F-A9CB-6CB46A2A4BF0}C:\program files\google\google earth\client\googleearth.exe] => C:\program files\google\google earth\client\googleearth.exe FirewallRules: [UDP Query User{4D294B4D-F9D5-40A8-BDF5-D3F9DA8D4D4B}C:\program files\google\google earth\client\googleearth.exe] => C:\program files\google\google earth\client\googleearth.exe FirewallRules: [{B64F2108-18DD-467D-ABB4-C325108CA560}] => C:\Program Files\BitTorrent\BitTorrent.exe FirewallRules: [{7F28936D-30DC-4AAB-B4D6-464374AC8122}] => C:\Program Files\BitTorrent\BitTorrent.exe FirewallRules: [TCP Query User{E2786EDE-C651-40F4-89E8-B02326D35177}C:\program files\nowe gadu-gadu\gg.exe] => C:\program files\nowe gadu-gadu\gg.exe FirewallRules: [UDP Query User{1CA84B8C-3A53-49FE-97FD-5A5AA6FB57FC}C:\program files\nowe gadu-gadu\gg.exe] => C:\program files\nowe gadu-gadu\gg.exe FirewallRules: [TCP Query User{767A670D-8B92-47D2-A5EC-569A5D542608}C:\program files\emule\emule.exe] => C:\program files\emule\emule.exe FirewallRules: [UDP Query User{77E3FB65-A249-43FE-A5FA-3511AC4817F3}C:\program files\emule\emule.exe] => C:\program files\emule\emule.exe FirewallRules: [TCP Query User{549D1AD7-B304-458D-9519-22DAA431FFC6}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe FirewallRules: [UDP Query User{E6E8A7FB-E40D-4785-B3CC-7A607AFE1FDF}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe FirewallRules: [TCP Query User{49F1D9E1-602C-414F-BD01-CF204918FEFB}C:\program files\real alternative\media player classic\mplayerc.exe] => C:\program files\real alternative\media player classic\mplayerc.exe FirewallRules: [UDP Query User{B1AA3B87-9DA7-4CA4-8DE5-BC0A9A0AE744}C:\program files\real alternative\media player classic\mplayerc.exe] => C:\program files\real alternative\media player classic\mplayerc.exe FirewallRules: [TCP Query User{D98CA659-0DE0-4DDB-943B-38BFCDF5C1B9}C:\program files\worms revolution\wormsrevolution.exe] => C:\program files\worms revolution\wormsrevolution.exe FirewallRules: [UDP Query User{85704C6F-46E3-46A9-9ECB-090CBAC3486C}C:\program files\worms revolution\wormsrevolution.exe] => C:\program files\worms revolution\wormsrevolution.exe FirewallRules: [{42C53B3E-B166-4D3D-8A33-ED503678D87A}] => LPort=16000 FirewallRules: [TCP Query User{64B9B6D9-093F-4BF4-9BF8-D971CD26768E}C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [UDP Query User{B55C92C2-F9DA-4E4E-BE9C-35096504CE7C}C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [TCP Query User{6E7480FC-740C-42FA-B449-8D70F2F634E6}C:\program files\infogrames interactive\monopoly\monopoly.exe] => C:\program files\infogrames interactive\monopoly\monopoly.exe FirewallRules: [UDP Query User{3BAEBF1D-56BE-4F52-B4D3-501BF07F1074}C:\program files\infogrames interactive\monopoly\monopoly.exe] => C:\program files\infogrames interactive\monopoly\monopoly.exe FirewallRules: [TCP Query User{377268B3-B52D-4FFD-8A37-D7A230415C65}K:\arcanum\arcanum.exe] => K:\arcanum\arcanum.exe FirewallRules: [UDP Query User{E551A63C-FDFB-454D-9AD4-9303CEB81251}K:\arcanum\arcanum.exe] => K:\arcanum\arcanum.exe FirewallRules: [TCP Query User{882BDD6A-BE61-4E70-8865-6D20F7FA384F}C:\program files\videolan\vlc\vlc.exe] => C:\program files\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{0606FA6F-2553-4219-AB8D-14D07CE209BD}C:\program files\videolan\vlc\vlc.exe] => C:\program files\videolan\vlc\vlc.exe FirewallRules: [{8E69C799-4B7E-4227-85DB-CDC9B09B8F0D}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [TCP Query User{2B430204-211A-4F8A-9FDD-B6BFBF342A75}C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [UDP Query User{A40C1541-CC8A-4F0B-AF32-6F4BEEAFCD1C}C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\tommy\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [TCP Query User{FB6335E4-20A0-4C4B-BC10-A13E11E4BDC9}C:\program files\mozilla firefox\plugin-container.exe] => C:\program files\mozilla firefox\plugin-container.exe FirewallRules: [UDP Query User{DBB36FEE-596C-4CC8-8065-9B845852FC2E}C:\program files\mozilla firefox\plugin-container.exe] => C:\program files\mozilla firefox\plugin-container.exe FirewallRules: [TCP Query User{313AFBAB-B21C-4A52-B54E-8F9368C0B43C}C:\windows\explorer.exe] => C:\windows\explorer.exe FirewallRules: [UDP Query User{83BCEF91-3331-4273-AE8A-C27D8B54B679}C:\windows\explorer.exe] => C:\windows\explorer.exe FirewallRules: [{988D86CB-7CA5-4AB4-925D-BB57B7E72426}] => LPort=9091 FirewallRules: [{151B9178-F061-4132-90E1-8BDE3DD34A38}] => C:\Program Files\Skype\Phone\Skype.exe FirewallRules: [{8A4C5948-1432-4B02-85DB-6C09A0508ACE}] => C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{BCE1E7A4-2E54-4DB6-A612-9B591A57E1DA}] => C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{CAE321FF-47BB-4223-A2A9-AD4C9C28CBC4}] => C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{194E1719-0E30-427B-BFE3-AF36FEFA3BCB}] => C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{AFBB5B0B-DA8C-4203-8DA4-34E08B07A919}] => C:\Program Files\Windows Live\Messenger\wlcsdk.exe FirewallRules: [{DB3F817F-70CA-4574-939D-007A10786B40}] => C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{873356AC-296E-4CA9-8EB3-5D46F67269C7}] => C:\Program Files\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files\BitTorrent\bittorrent.exe] => Enabled:BitTorrent ==================== Restore Points ========================= 27-01-2017 21:05:38 Punto di controllo pianificato 28-01-2017 13:11:37 Punto di controllo pianificato 29-01-2017 14:41:19 Punto di controllo pianificato 30-01-2017 12:09:25 Punto di controllo pianificato 03-02-2017 14:39:59 Punto di controllo pianificato ==================== Faulty Device Manager Devices ============= Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VMware Virtual Ethernet Adapter for VMnet8 Description: VMware Virtual Ethernet Adapter for VMnet8 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (02/03/2017 08:39:12 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (02/03/2017 01:46:25 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (02/02/2017 08:52:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (02/01/2017 10:17:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/31/2017 08:09:13 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/30/2017 11:12:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/29/2017 08:47:53 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/29/2017 01:54:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/28/2017 03:30:02 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (01/28/2017 12:17:13 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. System errors: ============= Error: (03/27/2011 07:32:21 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Precedente arresto del sistema inatteso a 20.30.02 su 27/03/2011. Error: (03/27/2011 02:20:30 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Precedente arresto del sistema inatteso a 15.18.02 su 27/03/2011. Error: (03/20/2011 11:51:43 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Precedente arresto del sistema inatteso a 23.48.25 su 20/03/2011. Error: (03/19/2011 06:19:58 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Precedente arresto del sistema inatteso a 18.17.31 su 19/03/2011. CodeIntegrity: =================================== Date: 2017-01-26 21:48:37.638 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-26 11:21:01.192 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-26 11:21:00.926 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-26 11:21:00.707 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-26 11:21:00.473 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-26 11:11:25.613 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-25 23:06:20.806 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-25 23:06:20.536 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-25 23:06:20.243 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. Date: 2017-01-25 23:06:19.969 Description: Controllo dell'integrità del codice: impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe. Impossibile trovare l'insieme di hash dell'immagine per pagina nel sistema. ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz Percentage of memory in use: 51% Total physical RAM: 3070.35 MB Available physical RAM: 1503.71 MB Total Virtual: 6343.67 MB Available Virtual: 4937.3 MB ==================== Drives ================================ Drive c: (VistaOS) (Fixed) (Total:116.44 GB) (Free:17.55 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:104.73 GB) (Free:9.52 GB) NTFS Drive f: (WD SmartWare) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF Drive g: (WYSPA_MILOSCI) (CDROM) (Total:0.41 GB) (Free:0 GB) CDFS Drive h: (My Passport) (Fixed) (Total:595.52 GB) (Free:168.01 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: 97646C29) Partition 1: (Not Active) - (Size=11.7 GB) - (Type=1C) Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=104.7 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 595.5 GB) (Disk ID: 00048410) Partition 1: (Not Active) - (Size=595.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================