dandun
-
Postów
6 -
Dołączył
-
Ostatnia wizyta
Odpowiedzi opublikowane przez dandun
-
-
Dziękuje
Temat do zamknięcia.
-
Plik z txt:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-10-2014
Ran by Krystian at 2014-10-25 21:11:56 Run:1
Running from C:\Users\Krystian\Downloads
Loaded Profiles: Krystian & UpdatusUser (Available profiles: Krystian & UpdatusUser)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKU\S-1-5-19\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-18\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
S2 TBPanel; No ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
RemoveDirectory: C:\ProgramData\Norton
RemoveDirectory: C:\Users\Krystian\Downloads\Bob_One_-_Tw__j_Ruch__2013_ (2)
RemoveDirectory: C:\avast! sandbox
EmptyTemp:
*****************
HKU\S-1-5-19\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-21-678882040-263938067-2815254729-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
TBPanel => Service deleted successfully.
EagleX64 => Service deleted successfully.
FairplayKD => Service deleted successfully.
Synth3dVsc => Service deleted successfully.
tsusbhub => Service deleted successfully.
VGPU => Service deleted successfully.
Could not remove "C:\ProgramData\Norton" => Scheduled to remove on reboot.
Could not remove "C:\Users\Krystian\Downloads\Bob_One_-_Tw__j_Ruch__2013_ (2)" => Scheduled to remove on reboot.
Could not remove "C:\avast! sandbox" => Scheduled to remove on reboot.
EmptyTemp: => Removed 557.9 MB temporary data.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-10-25 21:18:44)<=
C:\ProgramData\Norton => Removed successfully.
C:\Users\Krystian\Downloads\Bob_One_-_Tw__j_Ruch__2013_ (2) => Removed successfully.
C:\avast! sandbox => Removed successfully.
==== End of Fixlog ====A i jeszcze jedno co zrobić z plikiem desktop.ini ( i innymi tego typu) Są one w pól widoczne (jak np. skype ma 100% to ten plik ma 50%). Chciałem go usunąć to zaczął mi się usuwać pulpit i przestałem.
-
Pliczek wgrany.
Logi z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-10-2014
Ran by Krystian (administrator) on GRZESIU on 24-10-2014 17:39:56
Running from C:\Users\Krystian\Downloads
Loaded Profiles: Krystian & UpdatusUser (Available profiles: Krystian & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
() E:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-19\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\MountPoints2: G - G:\start.exe
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\MountPoints2: {23209dc0-225d-11e4-8ffd-a1e9bd0d3b93} - G:\setup.exe
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-07] (Microsoft Corporation)
HKU\S-1-5-18\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: IEExtension.Extension -> {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Krystian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Eliminator Slajdów) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2014-07-12]
CHR Extension: (Google Wallet) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-08]
CHR Extension: (Adblock Pro) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2014-07-12]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [626208 2009-08-10] ()
S4 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]
R2 MBAMScheduler; d:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; d:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [206880 2009-08-10] ()
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [1891184 2014-10-15] (Electronic Arts)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-12] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S2 TBPanel; No ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-24 17:39 - 2014-10-24 17:39 - 00000000 ____D () C:\Users\Krystian\Downloads\FRST-OlderVersion
2014-10-24 15:53 - 2014-10-24 15:53 - 00000557 _____ () C:\Users\Krystian\Downloads\hosts.zip
2014-10-20 22:48 - 2014-10-20 22:53 - 00049549 _____ () C:\Users\Krystian\Downloads\Addition.txt
2014-10-20 22:46 - 2014-10-24 17:40 - 00000000 ____D () C:\FRST
2014-10-20 22:46 - 2014-10-24 17:39 - 00011401 _____ () C:\Users\Krystian\Downloads\FRST.txt
2014-10-20 22:45 - 2014-10-24 17:39 - 02112000 _____ (Farbar) C:\Users\Krystian\Downloads\FRST64.exe
2014-10-18 00:45 - 2014-10-18 00:45 - 00000000 _____ () C:\Users\Krystian\Desktop\Na sygnale odc. 33.txt
2014-10-17 16:20 - 2014-10-17 16:20 - 00004535 _____ () C:\Users\Krystian\AppData\Roaming\CamStudio.cfg
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamShapes.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamLayout.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000046 _____ () C:\Users\Krystian\AppData\Roaming\Camdata.ini
2014-10-17 16:19 - 2014-10-17 16:20 - 00000000 ____D () C:\Users\Krystian\Documents\My CamStudio Temp Files
2014-10-17 16:19 - 2014-10-17 16:19 - 00000096 _____ () C:\Users\Krystian\AppData\Roaming\version2.xml
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\Documents\Easy Macro Recorder
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Easy Macro Recorder
2014-10-17 16:12 - 2010-01-19 14:48 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2014-10-17 16:12 - 1998-06-24 00:00 - 00067376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SYSINFO.OCX
2014-10-16 19:47 - 2014-10-21 00:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-16 18:14 - 2014-10-16 18:14 - 00000000 ____D () C:\Users\Krystian\Downloads\Nowy folder (2)
2014-10-16 11:17 - 2014-10-16 12:13 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-16 11:16 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-16 11:16 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-16 11:16 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-16 11:16 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 11:16 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-16 11:16 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 11:16 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-16 11:16 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-16 11:16 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-16 11:16 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-16 11:16 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-16 11:16 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 11:16 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 11:16 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 11:16 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-16 11:16 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 11:16 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 11:16 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 11:16 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 11:16 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 11:16 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-16 11:16 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 11:16 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-16 11:16 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 11:16 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 11:16 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-16 11:16 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-16 11:16 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-16 11:16 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-16 11:16 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-16 11:16 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-16 11:16 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-16 11:16 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-16 11:16 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-16 11:16 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-16 11:16 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 11:16 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 11:16 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-16 11:16 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-16 11:16 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-16 11:16 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-16 11:16 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 11:16 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-16 11:16 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-16 11:16 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 11:15 - 2014-10-16 11:15 - 00000781 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-16 11:15 - 2014-10-16 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-16 11:15 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-16 11:15 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-16 11:15 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-16 11:15 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 11:15 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 11:15 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 11:15 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 11:15 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 11:15 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 11:15 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 11:15 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 11:15 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 11:15 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 11:15 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 11:15 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 11:15 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 11:15 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 11:15 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 10:51 - 2014-07-17 04:07 - 01113088 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 10:51 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 10:51 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-16 10:51 - 2014-07-17 03:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-16 10:51 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 10:51 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 10:48 - 2014-10-16 10:48 - 00100582 _____ () C:\Users\Krystian\Downloads\Extras.Txt
2014-10-16 10:45 - 2014-10-16 10:45 - 00082456 _____ () C:\Users\Krystian\Downloads\OTL.Txt
2014-10-16 10:30 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 10:30 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-16 10:24 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 10:24 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-16 10:14 - 2014-10-16 10:15 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Downloads\OTL.exe
2014-10-16 10:09 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 10:09 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 09:17 - 2014-10-16 09:21 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Adobe
2014-10-16 09:12 - 2014-10-24 13:49 - 00005936 _____ () C:\Windows\setupact.log
2014-10-16 09:12 - 2014-10-16 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-16 09:11 - 2014-10-16 19:21 - 00687612 _____ () C:\Windows\PFRO.log
2014-10-15 19:42 - 2014-10-15 19:42 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-15 19:42 - 2014-10-15 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-10 17:52 - 2014-10-10 17:52 - 00002950 _____ () C:\Windows\System32\Tasks\{30ACDC79-96B4-433D-98FE-9090B17D2F49}
2014-10-10 14:51 - 2014-10-10 14:52 - 00000000 ____D () C:\Users\Krystian\AppData\Local\NPE
2014-10-09 20:47 - 2014-10-16 18:16 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Winamp
2014-10-09 20:47 - 2014-10-09 20:47 - 00000692 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-10-09 20:47 - 2014-10-09 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-10-08 20:46 - 2014-10-08 20:47 - 00000028 _____ () C:\Users\Krystian\Desktop\Nowy dokument tekstowy (6).txt
2014-10-07 20:32 - 2014-10-07 22:59 - 01863000 _____ () C:\Users\Krystian\Desktop\asdasdasdasda.pptx
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-10-07 20:22 - 2014-10-07 20:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-10-07 20:19 - 2014-10-07 20:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-10-05 17:29 - 2014-10-05 17:29 - 00000858 _____ () C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
2014-10-05 16:29 - 2014-10-05 16:29 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\Documents\Electronic Arts
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Electronic Arts
2014-10-01 19:11 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 19:10 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-24 14:06 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 14:06 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-24 17:41 - 2013-10-05 22:23 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Skype
2014-10-24 17:31 - 2013-10-13 18:41 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-24 16:58 - 2013-10-05 22:36 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-24 13:38 - 2013-10-05 20:13 - 01407684 _____ () C:\Windows\WindowsUpdate.log
2014-10-24 13:38 - 2009-07-14 06:45 - 00017296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-24 13:38 - 2009-07-14 06:45 - 00017296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-24 13:30 - 2013-10-13 18:41 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-24 13:30 - 2013-10-05 20:29 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-24 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-24 02:07 - 2014-05-06 18:14 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-23 12:34 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-23 00:37 - 2014-03-08 19:10 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\vlc
2014-10-22 14:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-21 14:16 - 2009-07-14 19:55 - 00740422 _____ () C:\Windows\system32\perfh015.dat
2014-10-21 14:16 - 2009-07-14 19:55 - 00155996 _____ () C:\Windows\system32\perfc015.dat
2014-10-21 14:16 - 2009-07-14 07:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-20 23:26 - 2013-10-13 18:41 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-20 23:26 - 2013-10-13 18:41 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-19 23:15 - 2014-09-13 10:43 - 00000000 ____D () C:\Users\Krystian\Desktop\HuczuHucz - Po Tej Stronie Raju [2011]
2014-10-19 23:14 - 2014-09-12 21:28 - 00000000 ____D () C:\Users\Krystian\Desktop\Vixen-New-Ton-LP-2009
2014-10-19 10:12 - 2013-10-08 15:25 - 00000000 ____D () C:\Users\Krystian\AppData\Local\CrashDumps
2014-10-17 16:04 - 2014-05-04 17:29 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Nemex
2014-10-17 16:03 - 2013-12-11 16:54 - 00000000 ____D () C:\Users\Krystian\Desktop\Nowy folder
2014-10-17 15:35 - 2013-10-08 15:52 - 00112328 _____ () C:\Users\Krystian\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-17 12:24 - 2013-10-06 16:49 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\.minecraft
2014-10-16 20:39 - 2009-07-14 06:45 - 00441008 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-16 20:37 - 2014-05-06 23:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 19:57 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-10-16 19:21 - 2013-10-05 20:39 - 00000000 ____D () C:\ProgramData\Norton
2014-10-16 18:17 - 2014-09-13 11:57 - 00000000 ____D () C:\Users\Krystian\Downloads\Bob_One_-_Tw__j_Ruch__2013_ (2)
2014-10-16 18:17 - 2014-01-30 22:34 - 00000000 ____D () C:\Users\Krystian\Downloads\MUZYKA
2014-10-16 10:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-16 09:30 - 2014-06-03 14:33 - 00003870 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1381000339
2014-10-16 09:30 - 2013-10-05 21:12 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-16 09:21 - 2013-10-05 22:36 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-16 09:21 - 2013-10-05 22:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-16 09:21 - 2013-10-05 22:36 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-15 20:58 - 2013-10-28 00:24 - 00000000 ____D () C:\ProgramData\Origin
2014-10-15 20:57 - 2014-03-12 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-10-15 19:42 - 2014-03-06 20:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-15 19:42 - 2013-10-05 22:22 - 00000000 ____D () C:\ProgramData\Skype
2014-10-11 15:26 - 2014-03-15 10:38 - 00000000 ____D () C:\Users\Krystian\Documents\FIFA World
2014-10-10 18:12 - 2013-11-23 15:22 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Origin
2014-10-10 13:53 - 2014-09-02 19:07 - 00000000 ____D () C:\avast! sandbox
2014-10-10 13:53 - 2014-01-05 17:38 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-08 21:59 - 2013-11-23 15:06 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Electronic_Arts_Inc
2014-10-07 20:23 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-07 20:22 - 2014-05-06 18:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-10-07 20:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-10-07 20:17 - 2014-05-06 18:14 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-10-07 20:17 - 2009-07-14 20:09 - 00000000 ____D () C:\Windows\ShellNew
2014-10-07 18:49 - 2013-10-05 20:20 - 00000000 ____D () C:\Users\Krystian\AppData\Local\VirtualStore
2014-10-02 15:53 - 2014-01-09 18:12 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-01 14:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-24 23:13 - 2013-10-22 15:31 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Free Download Manager
Some content of TEMP:
====================
C:\Users\Krystian\AppData\Local\Temp\eauninstall.exe
C:\Users\Krystian\AppData\Local\Temp\Need for Speed Most Wanted_uninst.exe
C:\Users\Krystian\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-18 21:59
==================== End Of Log ============================
-
Posiadam chrome, szukałem takowych (podobnych) zakładek i nie znalazłem.
PopCam Game, tego nie mam w panelu odinstalowywania.
Skan: z Farbar Recovery Scan Tool:
frst:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2014 (ATTENTION: ====> FRST version is 50 days old and could be outdated)
Ran by Krystian (administrator) on GRZESIU on 20-10-2014 22:46:42
Running from C:\Users\Krystian\Downloads
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\.DEFAULT\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-07] (Microsoft Corporation)
HKU\.DEFAULT\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-19\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\MountPoints2: G - G:\start.exe
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\MountPoints2: {23209dc0-225d-11e4-8ffd-a1e9bd0d3b93} - G:\setup.exe
HKU\S-1-5-21-678882040-263938067-2815254729-1000\...\Winlogon: [shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: IEExtension.Extension -> {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Krystian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Eliminator Slajdów) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2014-07-12]
CHR Extension: (Google Wallet) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-08]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2014-07-12]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [626208 2009-08-10] ()
S4 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]
R2 MBAMScheduler; d:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; d:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [206880 2009-08-10] ()
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [1891184 2014-10-15] (Electronic Arts)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-12] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S2 TBPanel; No ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-20 22:46 - 2014-10-20 22:47 - 00012552 _____ () C:\Users\Krystian\Downloads\FRST.txt
2014-10-20 22:46 - 2014-10-20 22:46 - 00000000 ____D () C:\FRST
2014-10-20 22:45 - 2014-10-20 22:45 - 02104320 _____ (Farbar) C:\Users\Krystian\Downloads\FRST64.exe
2014-10-18 00:45 - 2014-10-18 00:45 - 00000000 _____ () C:\Users\Krystian\Desktop\Na sygnale odc. 33.txt
2014-10-17 16:20 - 2014-10-17 16:20 - 00004535 _____ () C:\Users\Krystian\AppData\Roaming\CamStudio.cfg
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamShapes.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamLayout.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000046 _____ () C:\Users\Krystian\AppData\Roaming\Camdata.ini
2014-10-17 16:19 - 2014-10-17 16:20 - 00000000 ____D () C:\Users\Krystian\Documents\My CamStudio Temp Files
2014-10-17 16:19 - 2014-10-17 16:19 - 00000096 _____ () C:\Users\Krystian\AppData\Roaming\version2.xml
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\Documents\Easy Macro Recorder
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Easy Macro Recorder
2014-10-17 16:12 - 2010-01-19 14:48 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2014-10-17 16:12 - 1998-06-24 00:00 - 00067376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SYSINFO.OCX
2014-10-16 19:47 - 2014-10-16 19:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-16 18:14 - 2014-10-16 18:14 - 00000000 ____D () C:\Users\Krystian\Downloads\Nowy folder (2)
2014-10-16 11:17 - 2014-10-16 12:13 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-16 11:16 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-16 11:16 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-16 11:16 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-16 11:16 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 11:16 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-16 11:16 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 11:16 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-16 11:16 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-16 11:16 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-16 11:16 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-16 11:16 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-16 11:16 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 11:16 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 11:16 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 11:16 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-16 11:16 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 11:16 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 11:16 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 11:16 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 11:16 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 11:16 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-16 11:16 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 11:16 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-16 11:16 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 11:16 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 11:16 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-16 11:16 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-16 11:16 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-16 11:16 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-16 11:16 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-16 11:16 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-16 11:16 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-16 11:16 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-16 11:16 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-16 11:16 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-16 11:16 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 11:16 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 11:16 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-16 11:16 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-16 11:16 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-16 11:16 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-16 11:16 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 11:16 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-16 11:16 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-16 11:16 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-16 11:16 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 11:15 - 2014-10-16 11:15 - 00000781 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-16 11:15 - 2014-10-16 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-16 11:15 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-16 11:15 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-16 11:15 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-16 11:15 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 11:15 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 11:15 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 11:15 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 11:15 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 11:15 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 11:15 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 11:15 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 11:15 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 11:15 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 11:15 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 11:15 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 11:15 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 11:15 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 11:15 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 10:51 - 2014-07-17 04:07 - 01113088 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 10:51 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 10:51 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 10:51 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-16 10:51 - 2014-07-17 03:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-16 10:51 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-16 10:51 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 10:51 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 10:48 - 2014-10-16 10:48 - 00100582 _____ () C:\Users\Krystian\Downloads\Extras.Txt
2014-10-16 10:45 - 2014-10-16 10:45 - 00082456 _____ () C:\Users\Krystian\Downloads\OTL.Txt
2014-10-16 10:30 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 10:30 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-16 10:24 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 10:24 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-16 10:14 - 2014-10-16 10:15 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Downloads\OTL.exe
2014-10-16 10:09 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 10:09 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 09:17 - 2014-10-16 09:21 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Adobe
2014-10-16 09:12 - 2014-10-20 17:36 - 00004592 _____ () C:\Windows\setupact.log
2014-10-16 09:12 - 2014-10-16 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-16 09:11 - 2014-10-16 19:21 - 00687612 _____ () C:\Windows\PFRO.log
2014-10-15 19:42 - 2014-10-15 19:42 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-15 19:42 - 2014-10-15 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-10 17:52 - 2014-10-10 17:52 - 00002950 _____ () C:\Windows\System32\Tasks\{30ACDC79-96B4-433D-98FE-9090B17D2F49}
2014-10-10 14:51 - 2014-10-10 14:52 - 00000000 ____D () C:\Users\Krystian\AppData\Local\NPE
2014-10-09 20:47 - 2014-10-16 18:16 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Winamp
2014-10-09 20:47 - 2014-10-09 20:47 - 00000692 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-10-09 20:47 - 2014-10-09 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-10-08 20:46 - 2014-10-08 20:47 - 00000028 _____ () C:\Users\Krystian\Desktop\Nowy dokument tekstowy (6).txt
2014-10-07 20:32 - 2014-10-07 22:59 - 01863000 _____ () C:\Users\Krystian\Desktop\asdasdasdasda.pptx
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-10-07 20:22 - 2014-10-07 20:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-10-07 20:19 - 2014-10-07 20:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-10-05 17:29 - 2014-10-05 17:29 - 00000858 _____ () C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
2014-10-05 16:29 - 2014-10-05 16:29 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\Documents\Electronic Arts
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Electronic Arts
2014-10-01 19:11 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 19:10 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-24 14:06 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 14:06 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-20 21:37 - 2014-09-23 15:22 - 00000000 ____D () C:\Users\Krystian\Desktop\Selekscja
2014-09-20 13:02 - 2014-09-20 13:02 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-20 22:47 - 2014-10-20 22:46 - 00012552 _____ () C:\Users\Krystian\Downloads\FRST.txt
2014-10-20 22:46 - 2014-10-20 22:46 - 00000000 ____D () C:\FRST
2014-10-20 22:46 - 2013-10-05 22:23 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Skype
2014-10-20 22:45 - 2014-10-20 22:45 - 02104320 _____ (Farbar) C:\Users\Krystian\Downloads\FRST64.exe
2014-10-20 22:21 - 2013-10-13 18:41 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-20 22:15 - 2013-10-05 20:13 - 01548242 _____ () C:\Windows\WindowsUpdate.log
2014-10-20 21:58 - 2013-10-05 22:36 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-20 21:18 - 2009-07-14 06:45 - 00017296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-20 21:18 - 2009-07-14 06:45 - 00017296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-20 18:59 - 2009-07-14 19:55 - 00740422 _____ () C:\Windows\system32\perfh015.dat
2014-10-20 18:59 - 2009-07-14 19:55 - 00155996 _____ () C:\Windows\system32\perfc015.dat
2014-10-20 18:59 - 2009-07-14 07:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-20 17:36 - 2014-10-16 09:12 - 00004592 _____ () C:\Windows\setupact.log
2014-10-20 17:27 - 2013-10-13 18:41 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-20 17:27 - 2013-10-05 20:29 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-20 17:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-19 23:15 - 2014-09-13 10:43 - 00000000 ____D () C:\Users\Krystian\Desktop\HuczuHucz - Po Tej Stronie Raju [2011]
2014-10-19 23:14 - 2014-09-12 21:28 - 00000000 ____D () C:\Users\Krystian\Desktop\Vixen-New-Ton-LP-2009
2014-10-19 10:12 - 2013-10-08 15:25 - 00000000 ____D () C:\Users\Krystian\AppData\Local\CrashDumps
2014-10-18 00:45 - 2014-10-18 00:45 - 00000000 _____ () C:\Users\Krystian\Desktop\Na sygnale odc. 33.txt
2014-10-17 16:20 - 2014-10-17 16:20 - 00004535 _____ () C:\Users\Krystian\AppData\Roaming\CamStudio.cfg
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamShapes.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000408 _____ () C:\Users\Krystian\AppData\Roaming\CamLayout.ini
2014-10-17 16:20 - 2014-10-17 16:20 - 00000046 _____ () C:\Users\Krystian\AppData\Roaming\Camdata.ini
2014-10-17 16:20 - 2014-10-17 16:19 - 00000000 ____D () C:\Users\Krystian\Documents\My CamStudio Temp Files
2014-10-17 16:19 - 2014-10-17 16:19 - 00000096 _____ () C:\Users\Krystian\AppData\Roaming\version2.xml
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\Documents\Easy Macro Recorder
2014-10-17 16:12 - 2014-10-17 16:12 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Easy Macro Recorder
2014-10-17 16:04 - 2014-05-04 17:29 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Nemex
2014-10-17 16:03 - 2013-12-11 16:54 - 00000000 ____D () C:\Users\Krystian\Desktop\Nowy folder
2014-10-17 15:35 - 2013-10-08 15:52 - 00112328 _____ () C:\Users\Krystian\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-17 12:24 - 2013-10-06 16:49 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\.minecraft
2014-10-16 20:39 - 2009-07-14 06:45 - 00441008 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-16 20:37 - 2014-05-06 23:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 19:58 - 2014-05-06 18:14 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 19:57 - 2014-10-16 19:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-16 19:57 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-10-16 19:21 - 2014-10-16 09:11 - 00687612 _____ () C:\Windows\PFRO.log
2014-10-16 19:21 - 2013-10-05 20:39 - 00000000 ____D () C:\ProgramData\Norton
2014-10-16 18:17 - 2014-09-13 11:57 - 00000000 ____D () C:\Users\Krystian\Downloads\Bob_One_-_Tw__j_Ruch__2013_ (2)
2014-10-16 18:17 - 2014-01-30 22:34 - 00000000 ____D () C:\Users\Krystian\Downloads\MUZYKA
2014-10-16 18:16 - 2014-10-09 20:47 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Winamp
2014-10-16 18:14 - 2014-10-16 18:14 - 00000000 ____D () C:\Users\Krystian\Downloads\Nowy folder (2)
2014-10-16 12:13 - 2014-10-16 11:17 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-16 11:15 - 2014-10-16 11:15 - 00000781 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-16 11:15 - 2014-10-16 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-16 10:48 - 2014-10-16 10:48 - 00100582 _____ () C:\Users\Krystian\Downloads\Extras.Txt
2014-10-16 10:45 - 2014-10-16 10:45 - 00082456 _____ () C:\Users\Krystian\Downloads\OTL.Txt
2014-10-16 10:15 - 2014-10-16 10:14 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Downloads\OTL.exe
2014-10-16 10:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-16 09:30 - 2014-06-03 14:33 - 00003870 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1381000339
2014-10-16 09:30 - 2013-10-05 21:12 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-16 09:21 - 2014-10-16 09:17 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Adobe
2014-10-16 09:21 - 2013-10-05 22:36 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-16 09:21 - 2013-10-05 22:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-16 09:21 - 2013-10-05 22:36 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-16 09:12 - 2014-10-16 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-15 20:58 - 2013-10-28 00:24 - 00000000 ____D () C:\ProgramData\Origin
2014-10-15 20:57 - 2014-03-12 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-10-15 19:42 - 2014-10-15 19:42 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-15 19:42 - 2014-10-15 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-15 19:42 - 2014-03-06 20:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-15 19:42 - 2013-10-05 22:22 - 00000000 ____D () C:\ProgramData\Skype
2014-10-11 15:26 - 2014-03-15 10:38 - 00000000 ____D () C:\Users\Krystian\Documents\FIFA World
2014-10-10 18:12 - 2013-11-23 15:22 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Origin
2014-10-10 17:52 - 2014-10-10 17:52 - 00002950 _____ () C:\Windows\System32\Tasks\{30ACDC79-96B4-433D-98FE-9090B17D2F49}
2014-10-10 14:52 - 2014-10-10 14:51 - 00000000 ____D () C:\Users\Krystian\AppData\Local\NPE
2014-10-10 13:53 - 2014-09-02 19:07 - 00000000 ____D () C:\avast! sandbox
2014-10-10 13:53 - 2014-01-05 17:38 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-10 04:05 - 2014-10-16 11:16 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-10 04:05 - 2014-10-16 11:16 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-10 04:00 - 2014-10-16 11:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-09 20:47 - 2014-10-09 20:47 - 00000692 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-10-09 20:47 - 2014-10-09 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-10-09 19:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-08 21:59 - 2013-11-23 15:06 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Electronic_Arts_Inc
2014-10-08 20:47 - 2014-10-08 20:46 - 00000028 _____ () C:\Users\Krystian\Desktop\Nowy dokument tekstowy (6).txt
2014-10-07 22:59 - 2014-10-07 20:32 - 01863000 _____ () C:\Users\Krystian\Desktop\asdasdasdasda.pptx
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-10-07 20:24 - 2014-10-07 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-10-07 20:23 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-07 20:22 - 2014-10-07 20:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-10-07 20:22 - 2014-05-06 18:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-10-07 20:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-10-07 20:19 - 2014-10-07 20:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-10-07 20:17 - 2014-05-06 18:14 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-10-07 20:17 - 2009-07-14 20:09 - 00000000 ____D () C:\Windows\ShellNew
2014-10-07 18:49 - 2013-10-05 20:20 - 00000000 ____D () C:\Users\Krystian\AppData\Local\VirtualStore
2014-10-07 04:54 - 2014-10-16 11:16 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-07 04:04 - 2014-10-16 11:16 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-05 17:29 - 2014-10-05 17:29 - 00000858 _____ () C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
2014-10-05 16:29 - 2014-10-05 16:29 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\Documents\Electronic Arts
2014-10-05 13:18 - 2014-10-05 13:18 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Electronic Arts
2014-10-01 14:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-01 11:11 - 2014-10-16 11:15 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-01 11:11 - 2014-10-16 11:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-01 11:11 - 2014-10-16 11:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-29 02:58 - 2014-10-16 11:16 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-28 18:08 - 2014-03-08 19:10 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\vlc
2014-09-26 00:50 - 2014-10-16 11:15 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-26 00:46 - 2014-10-16 11:16 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-26 00:46 - 2014-10-16 11:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-26 00:46 - 2014-10-16 11:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-26 00:43 - 2014-10-16 11:16 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-26 00:32 - 2014-10-16 11:16 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-26 00:31 - 2014-10-16 11:16 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-25 04:08 - 2014-10-01 19:11 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-25 03:40 - 2014-10-01 19:10 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-24 23:13 - 2013-10-22 15:31 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Free Download Manager
2014-09-23 15:22 - 2014-09-20 21:37 - 00000000 ____D () C:\Users\Krystian\Desktop\Selekscja
2014-09-20 13:06 - 2013-11-16 15:48 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2014-09-20 13:02 - 2014-09-20 13:02 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
Some content of TEMP:
====================
C:\Users\Krystian\AppData\Local\Temp\eauninstall.exe
C:\Users\Krystian\AppData\Local\Temp\Need for Speed Most Wanted_uninst.exe
C:\Users\Krystian\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-18 21:59
==================== End Of Log ============================addition:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2014
Ran by Krystian at 2014-10-20 22:48:27
Running from C:\Users\Krystian\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Aktualizacje NVIDIA 1.5.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.5.20 - NVIDIA Corporation)
Bandicam (HKLM-x32\...\Bandicam) (Version: - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - )
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Camtasia Studio 8 (HKLM-x32\...\{A7727F03-5311-4A12-9A63-2ACD20BA0497}) (Version: 8.2.1.1423 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version: - Valve)
CWK (Czasowy Wyłącznik Komputera) (HKLM-x32\...\CWK) (Version: 2.52.3.43 - Damian Pasternak)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version: - Stunlock Studios)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version: - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{B6FBF358-6B5E-4DE4-8BC5-892C87BBD3B4}) (Version: - Microsoft)
EA SPORTS FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 8.0.2.53616 - Electronic Arts, Inc.)
Easy Macro Recorder 4.65 (HKLM-x32\...\Easy Macro Recorder_is1) (Version: - GoldSolution Software, Inc.)
eJay Techno 5 (HKLM-x32\...\InstallShield_{29ED28E7-C3D6-43F7-A821-E5D0867DE47F}) (Version: 1.69 - )
eJay Techno 5 (x32 Version: 1.69 - ) Hidden
EPU-4 Engine (HKLM-x32\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.02.01 - )
EXPERTool 7.12 (HKLM-x32\...\MySSID_is1) (Version: - Gainward Co., Ltd)
FIFA 14 Demo (HKLM-x32\...\{7A6577E7-F341-430F-9173-91E14E2DE270}) (Version: 1.0.0.0 - Electronic Arts)
Free Download Manager 3.9.3 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG)
Gameforge Live 2.0.4 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Litecoin (HKCU\...\Litecoin) (Version: 0.8.6.1 - Litecoin project)
MailShare (HKLM\...\{5846E720-C188-478F-B501-45EA1ACC44D1}_is1) (Version: 2.1.5 - MailShare.pl)
Malwarebytes Anti-Malware wersja 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - ENU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
MultiDoge 0.1.2 (HKLM-x32\...\MultiDoge 0.1.2) (Version: 0.1.2 - )
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1599 - Electronic Arts)
Nero 9 Lite (HKLM-x32\...\{4b0c178f-1f4d-47bc-b20e-bcd543b39e1a}) (Version: - Nero AG)
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.9.0 - Nero AG) Hidden
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.31.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5919 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM-x32\...\InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7316 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (Version: 1.00.7316 - NVIDIA Corporation) Hidden
NVIDIA Install Application (Version: 2.1002.45.235 - NVIDIA Corporation) Hidden
NVIDIA Oprogramowanie systemu PhysX 9.11.0621 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.11.0621 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.11.0621 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.8538 - NVIDIA Corporation) Hidden
NVIDIA Sterownik 3D Vision 285.38 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 285.38 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.2.24.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.24.0 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 285.38 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 285.38 - NVIDIA Corporation)
NVIDIA Sterownik kontrolera 3D Vision 285.38 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 285.38 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.5.20 - NVIDIA Corporation) Hidden
Opera Stable 25.0.1614.50 (HKLM-x32\...\Opera 25.0.1614.50) (Version: 25.0.1614.50 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Panel sterowania NVIDIA 285.38 (Version: 285.38 - NVIDIA Corporation) Hidden
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
Playfire (HKLM-x32\...\{01052d57-5e05-455f-9b02-dcf6f53962df}) (Version: 0.0.58.0 - Playfire)
Playfire (x32 Version: 0.0.58.0 - Playfire) Hidden
Reddcoin (HKCU\...\Reddcoin) (Version: 1.2.1.0 - Reddcoin project)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2326.4 - Hi-Rez Studios)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab Detection (HKLM-x32\...\{E20F04B6-5497-4296-95D8-8BB2CFD7EEE0}) (Version: 2.1.1.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
TL-WN721N/TL-WN722N Driver (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.0.0 - TP-LINK)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{8260F0BF-F234-41FC-AB11-218A9925F77B}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760371) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{25DEA344-FF6F-41BD-B88F-5242BB8E80E1}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881001) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{DF1B7B95-4A86-4605-A628-556394B5580A}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881004) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{AC8BEB81-5B5E-4503-B1F4-7781F4642E46}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881004) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{AC8BEB81-5B5E-4503-B1F4-7781F4642E46}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0DC71935-8DEE-4621-A223-23FD1552E567}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2881039) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C675FC43-E413-49A7-B3DC-44967B4FE22D}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUSR_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2883095) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EADBF225-163E-406B-B11A-26ECCCAB5A0E}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{A9D59DD4-0591-447A-AEEB-DC1FEE5502BF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{A9D59DD4-0591-447A-AEEB-DC1FEE5502BF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{A9D59DD4-0591-447A-AEEB-DC1FEE5502BF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889940) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{36772E16-D3FA-440E-B001-0BEB2B1FCE47}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889942) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C22AE0C4-590E-46FF-9E21-37F45B84ADDD}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2889942) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C22AE0C4-590E-46FF-9E21-37F45B84ADDD}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2986204) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{2CB96A7D-CBFE-4028-ACE8-31C3925D3D46}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2986204) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2CB96A7D-CBFE-4028-ACE8-31C3925D3D46}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2889852) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{01839F84-E94C-4E47-BEBE-95DF9CAE5FF3}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2889852) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{01839F84-E94C-4E47-BEBE-95DF9CAE5FF3}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2889852) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{01839F84-E94C-4E47-BEBE-95DF9CAE5FF3}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2889852) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{01839F84-E94C-4E47-BEBE-95DF9CAE5FF3}) (Version: - Microsoft)
VIA Platforma Menedżera urządzeń (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
War Inc Battlezone version 1.0.0 (HKLM-x32\...\{9E4F0E65-209E-4713-8BE2-7F8802BB3987}_is1) (Version: 1.0.0 - Arktos Entertainment Group LLC)
Warface (HKLM-x32\...\Steam App 291480) (Version: - Crytek GmbH)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR 4.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Woodle Tree Adventures (HKLM-x32\...\Steam App 299460) (Version: - Fabio Ferrara)
Worms Revolution - Gold Edition (HKLM-x32\...\Worms Revolution - Gold Edition_is1) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
09-10-2014 20:50:46 Windows Update
11-10-2014 01:00:13 Windows Update
11-10-2014 04:06:14 Windows Update
11-10-2014 14:21:28 Windows Update
11-10-2014 23:22:38 Windows Update
12-10-2014 22:30:21 Windows Update
13-10-2014 21:48:05 Windows Update
14-10-2014 22:11:08 Windows Update
16-10-2014 17:45:54 Windows Update
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {075525ED-1119-4360-9A29-3ED5366BBA2C} - System32\Tasks\{A99E4691-AC2E-4280-8C4D-4E66B6BBEF0E} => C:\Users\Krystian\Desktop\Nowy folder\Kryptowaluty\dogecoin\multidoge.exe [2014-03-15] ()
Task: {0ED2B800-44ED-4C37-BB3F-8E699CABE756} - System32\Tasks\{4FAD07B2-C737-4B88-BE49-4B34B854FF02} => C:\Users\Krystian\Downloads\Klient-4Death.pl.exe
Task: {3D32BBE2-6B7E-4875-9912-65F04AE26F15} - System32\Tasks\Opera scheduled Autoupdate 1381000339 => C:\Program Files (x86)\Opera\launcher.exe [2014-10-15] (Opera Software)
Task: {4FFEDECD-0D6E-4D9C-BA4C-0450C7FFF900} - System32\Tasks\{30ACDC79-96B4-433D-98FE-9090B17D2F49} => D:\Program Files (x86)\Origin\Origin.exe [2014-10-15] (Electronic Arts)
Task: {5B252604-B74A-42DC-B510-890C781F8615} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5E5965A4-0EE3-4770-87A8-92AC21DBE71C} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)
Task: {63E272C1-3B17-4D83-9C1B-0B2D7CFA251C} - System32\Tasks\{3F8DADFE-D326-4D7C-861C-B92BC514FEF9} => C:\Users\Krystian\Downloads\multidoge-0.1.2-windows-setup.exe
Task: {6EA985D0-0F05-4C35-929C-B03884EC81C9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-16] (Adobe Systems Incorporated)
Task: {719ED40C-3202-4607-8764-E816965C5838} - System32\Tasks\{8DF139C4-28AD-48C6-887F-FFBB3B5940C0} => C:\Users\Krystian\Desktop\Nowy folder\Kryptowaluty\dogecoin\multidoge.exe [2014-03-15] ()
Task: {87B0E643-6440-4813-A247-1A7A5C5100CC} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {AE8E4E9E-D4EE-4769-8DC0-B718DF1AA8DD} - System32\Tasks\{7166CA47-DF58-4C4B-B19B-87F8483F34BD} => C:\Users\Krystian\Downloads\BananaMt2_archive\BananaMt2.exe
Task: {AEA7035F-2A45-4BF3-BEBD-E22140F72B63} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {B094C392-DDC9-413D-A7EA-8E852DC3E0A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {E817329D-D947-41C9-854C-4F2AB83421F0} - System32\Tasks\{19B8E424-F62A-4547-879A-DC2EDEE8EA7F} => C:\Users\Krystian\Downloads\Klient-4Death.pl.exe
Task: {E98F063A-2D38-4747-BF81-4D9091F04A78} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EA12FA1E-311C-48C5-95B3-5599E743F5ED} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-09-16 13:52 - 2014-09-16 13:52 - 08896160 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-10-05 20:38 - 2009-03-19 22:35 - 00208896 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
2013-10-05 20:38 - 2009-03-19 22:35 - 00008704 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
2013-10-05 20:38 - 2009-01-15 14:55 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
2013-10-05 20:38 - 2009-03-25 16:53 - 00053248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
2014-09-16 13:53 - 2014-09-16 13:53 - 08896160 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-10-08 14:26 - 2014-10-01 07:54 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libglesv2.dll
2014-10-08 14:26 - 2014-10-01 07:54 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libegl.dll
2014-10-08 14:26 - 2014-10-01 07:54 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\pdf.dll
2014-10-08 14:26 - 2014-10-01 07:54 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\ffmpegsumo.dll
2014-10-08 14:26 - 2014-10-01 07:54 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\Users\Krystian\Dane aplikacji:NT
AlternateDataStreams: C:\Users\Krystian\Dane aplikacji:NT2
AlternateDataStreams: C:\Users\Krystian\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Krystian\AppData\Roaming:NT2
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: ForceWare Intelligent Application Manager (IAM) => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HiPatchService => 2
MSCONFIG\Services: MBAMScheduler => 2
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: nSvcIp => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: GAINWARD => C:\Program Files (x86)\EXPERTool\TBPanel.exe /A
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/20/2014 05:37:33 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (10/19/2014 10:12:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Dreikon.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x541256f9
Nazwa modułu powodującego błąd: Dreikon.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x541256f9
Kod wyjątku: 0xc0000417
Przesunięcie błędu: 0x001a9ecb
Identyfikator procesu powodującego błąd: 0xef0
Godzina uruchomienia aplikacji powodującej błąd: 0xDreikon.exe0
Ścieżka aplikacji powodującej błąd: Dreikon.exe1
Ścieżka modułu powodującego błąd: Dreikon.exe2
Identyfikator raportu: Dreikon.exe3
Error: (10/19/2014 09:28:50 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (10/18/2014 00:15:12 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
System errors:
=============
Error: (10/20/2014 05:28:39 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:38 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:38 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:31 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:30 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:28:30 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:27:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:27:28 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: ZARZĄDZANIE NT)
Description: Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error: (10/20/2014 05:27:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi TBPanel z powodu następującego błędu:
%%2
Microsoft Office Sessions:
=========================
Error: (10/20/2014 05:37:33 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (10/19/2014 10:12:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Dreikon.exe1.0.0.0541256f9Dreikon.exe1.0.0.0541256f9c0000417001a9ecbef001cfeb72bad787c0C:\Users\Krystian\Desktop\Nowy folder\Nowy folder\Dreikonv2.1\Dreikonv2\Dreikon.exeC:\Users\Krystian\Desktop\Nowy folder\Nowy folder\Dreikonv2.1\Dreikonv2\Dreikon.exea1982bf0-5767-11e4-9d10-a6d8f399b88c
Error: (10/19/2014 09:28:50 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (10/18/2014 00:15:12 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
==================== Memory info ===========================
Processor: AMD Athlon II X4 640 Processor
Percentage of memory in use: 51%
Total physical RAM: 4095.23 MB
Available physical RAM: 2002.2 MB
Total Pagefile: 8188.63 MB
Available Pagefile: 5264.93 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:196.06 GB) (Free:93.32 GB) NTFS
Drive d: () (Fixed) (Total:292.97 GB) (Free:242.25 GB) NTFS
Drive e: () (Fixed) (Total:442.38 GB) (Free:357.21 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00630063)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=196.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=442.4 GB) - (Type=07 NTFS)
==================== End Of Log ============================ -
Od wczoraj miewam jakiś zlagowany system, brak odpowiedzi itd.
Wcześniej działo to się raz na tydzień, a od wczoraj po prostu czasami nic mi się nie chce włączyć, np. przeglądarka klikam i albo nic się nie dzieje, albo bardzo powoli się ładuje.Dodam, że nie mogę odinstalowywać programów. Tzn. Odinstalowuje ale po za tym nic się nie dzieje, ciągle się ten program odinstalowuje i nic więcej.
Skan OTL:OTL logfile created on: 2014-10-16 10:27:51 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Krystian\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17280)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 1,73 Gb Available Physical Memory | 43,31% Memory free
8,00 Gb Paging File | 5,28 Gb Available in Paging File | 65,99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 196,06 Gb Total Space | 79,70 Gb Free Space | 40,65% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 240,68 Gb Free Space | 82,15% Space Free | Partition Type: NTFS
Drive E: | 442,38 Gb Total Space | 351,77 Gb Free Space | 79,52% Space Free | Partition Type: NTFS
Computer Name: GRZESIU | User Name: Krystian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014-10-16 10:15:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Krystian\Downloads\OTL.exe
PRC - [2014-10-01 07:55:00 | 000,854,344 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014-09-29 02:38:46 | 000,282,568 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Security\Engine\22.0.1.14\NS.exe
PRC - [2012-05-23 08:51:14 | 000,560,480 | ---- | M] (Electronic Arts, Inc.) -- C:\Program Files (x86)\Common Files\EAInstaller\PlantsvsZombies\Cleanup.exe
PRC - [2011-09-23 00:41:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-09-22 12:29:48 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-02-03 16:17:18 | 005,756,544 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
========== Modules (No Company Name) ==========
MOD - [2014-10-01 07:54:58 | 014,891,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\PepperFlash\pepflashplayer.dll
MOD - [2014-10-01 07:54:57 | 008,911,176 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\pdf.dll
MOD - [2014-10-01 07:54:53 | 001,042,760 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libglesv2.dll
MOD - [2014-10-01 07:54:51 | 001,681,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\ffmpegsumo.dll
MOD - [2014-10-01 07:54:51 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libegl.dll
MOD - [2014-07-27 11:41:48 | 008,892,576 | ---- | M] () -- C:\PROGRA~2\MIF5BA~1\Office15\1033\GrooveIntlResource.dll
MOD - [2013-12-09 21:24:42 | 003,023,696 | -HS- | M] () -- \\?\C:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-678882040-263938067-2815254729-1000\MSPRindiv01.key
MOD - [2013-09-05 00:14:10 | 004,300,456 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2009-09-30 13:33:08 | 000,024,576 | R--- | M] () -- C:\Windows\SysWOW64\AsIO.dll
MOD - [2009-03-25 16:53:14 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009-03-19 22:35:52 | 000,208,896 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
MOD - [2009-03-19 22:35:50 | 000,008,704 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
MOD - [2009-01-15 14:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
========== Services (SafeList) ==========
SRV:64bit: - [2014-08-19 00:03:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009-08-10 16:01:06 | 000,206,880 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
SRV:64bit: - [2009-08-10 16:01:04 | 000,626,208 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)
SRV:64bit: - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014-10-16 09:21:13 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-10-15 20:56:42 | 001,891,184 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- D:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2014-09-29 02:38:46 | 000,282,568 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Security\Engine\22.0.1.14\NS.exe -- (NS)
SRV - [2014-09-23 06:32:08 | 000,833,728 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014-09-12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014-08-22 15:04:06 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Disabled | Stopped] -- E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2011-09-23 00:41:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-09-22 12:29:48 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-11-20 14:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2014-10-09 22:31:52 | 000,102,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2014-09-09 07:15:11 | 000,565,464 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symnets.sys -- (SymNetS)
DRV:64bit: - [2014-09-09 07:15:10 | 001,151,704 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symefa64.sys -- (SymEFA)
DRV:64bit: - [2014-09-09 07:15:09 | 000,490,712 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symds64.sys -- (SymDS)
DRV:64bit: - [2014-09-09 07:05:40 | 000,271,576 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ironx64.sys -- (SymIRON)
DRV:64bit: - [2014-09-09 07:05:23 | 000,165,080 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ccsetx64.sys -- (ccSet_NS)
DRV:64bit: - [2014-09-09 07:05:05 | 001,016,024 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2014-09-09 07:05:05 | 000,042,200 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2014-08-12 22:16:10 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013-02-12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011-08-17 10:04:34 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:64bit: - [2011-07-08 01:21:28 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011-04-20 03:07:48 | 001,930,240 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
DRV:64bit: - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010-01-11 12:05:20 | 001,290,752 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2009-09-19 06:30:14 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV:64bit: - [2009-09-19 06:30:14 | 000,127,488 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bbus.sys -- (ss_bbus)
DRV:64bit: - [2009-09-19 06:30:14 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV:64bit: - [2009-07-30 19:12:56 | 000,339,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:64bit: - [2009-07-16 13:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009-06-10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2014-10-09 22:21:02 | 000,633,560 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Security\NortonData\22.0.0.110\Definitions\IPSDefs\20141015.001\IDSvia64.sys -- (IDSVia64)
DRV - [2014-10-09 20:25:46 | 002,137,304 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Security\NortonData\22.0.0.110\Definitions\VirusDefs\20141015.003\EX64.SYS -- (NAVEX15)
DRV - [2014-10-09 20:25:46 | 000,487,216 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2014-10-09 20:25:46 | 000,142,640 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2014-10-09 20:25:46 | 000,129,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Security\NortonData\22.0.0.110\Definitions\VirusDefs\20141015.003\ENG64.SYS -- (NAVENG)
DRV - [2014-10-03 21:19:31 | 001,587,416 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Security\NortonData\22.0.0.110\Definitions\BASHDefs\20141003.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/search?q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.4.0: C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Krystian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.0.0.110\coFFPlgn\ [2014-10-16 09:58:19 | 000,000,000 | ---D | M]
[2014-06-07 16:11:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krystian\AppData\Roaming\mozilla\Firefox\Profiles\extensions
[2014-06-07 16:11:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krystian\AppData\Roaming\mozilla\Firefox\Profiles\extensions\extensions
[2014-03-03 01:49:30 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
========== Chrome ==========
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff\3.1.30_0\
CHR - Extension: No name found = C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\3.1_1\
Hosts file not found
O2:64bit: - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security\Engine64\22.0.1.14\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security\Engine\22.0.1.14\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (IEExtension.Extension) - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - mscoree.dll (Microsoft Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine64\22.0.1.14\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.0.1.14\coIEPlg.dll (Symantec Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6333F8E8-BBF6-4C9A-B16E-5FC08E31B264}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{97A42F2D-DF2A-4492-850B-6DD55E27FA4C}: DhcpNameServer = 192.168.42.129
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (Explorer.exe) - Explorer.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{23209dc0-225d-11e4-8ffd-a1e9bd0d3b93}\Shell - "" = AutoRun
O33 - MountPoints2\{23209dc0-225d-11e4-8ffd-a1e9bd0d3b93}\Shell\AutoRun\command - "" = G:\setup.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\start.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2014-10-16 09:17:52 | 000,000,000 | ---D | C] -- C:\Users\Krystian\AppData\Local\Adobe
[2014-10-15 19:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014-10-15 19:42:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2014-10-10 19:27:59 | 000,565,464 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symnets.sys
[2014-10-10 19:27:59 | 000,023,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symelam.sys
[2014-10-10 19:27:58 | 001,151,704 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symefa64.sys
[2014-10-10 19:27:58 | 001,016,024 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtsp64.sys
[2014-10-10 19:27:58 | 000,490,712 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symds64.sys
[2014-10-10 19:27:58 | 000,271,576 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ironx64.sys
[2014-10-10 19:27:58 | 000,042,200 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtspx64.sys
[2014-10-10 19:27:57 | 000,165,080 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ccsetx64.sys
[2014-10-10 19:26:54 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSx64\1600010.00E
[2014-10-10 14:51:43 | 000,000,000 | ---D | C] -- C:\Users\Krystian\AppData\Local\NPE
[2014-10-09 22:31:53 | 000,102,616 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2014-10-09 22:31:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2014-10-09 22:30:05 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
[2014-10-09 22:30:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSx64
[2014-10-09 22:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security
[2014-10-09 22:28:25 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft
[2014-10-09 22:27:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2014-10-09 20:47:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
[2014-10-09 20:47:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2014-10-09 20:47:03 | 000,000,000 | ---D | C] -- C:\Users\Krystian\AppData\Roaming\Winamp
[2014-10-08 22:47:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2014-10-07 20:24:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2014-10-07 20:24:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2014-10-07 20:22:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Sync Framework
[2014-10-07 20:19:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2014-10-05 16:29:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2014-10-05 13:18:26 | 000,000,000 | ---D | C] -- C:\Users\Krystian\AppData\Local\Electronic Arts
[2014-10-05 13:18:16 | 000,000,000 | ---D | C] -- C:\Users\Krystian\Documents\Electronic Arts
[2014-10-01 19:11:00 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2014-10-01 19:10:59 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2014-09-20 21:37:07 | 000,000,000 | ---D | C] -- C:\Users\Krystian\Desktop\Selekscja
[2014-09-17 15:58:47 | 000,000,000 | ---D | C] -- C:\Users\Krystian\AppData\Local\PopCap Games
========== Files - Modified Within 30 Days ==========
[2014-10-16 10:40:21 | 002,445,342 | ---- | M] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\Cat.DB
[2014-10-16 10:21:01 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-10-16 10:03:49 | 000,017,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-10-16 10:03:49 | 000,017,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-10-16 09:58:01 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-10-16 09:56:34 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-10-16 09:56:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-10-16 09:56:05 | 3220,615,168 | -HS- | M] () -- C:\hiberfil.sys
[2014-10-16 09:21:13 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014-10-16 09:21:13 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014-10-15 19:42:28 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-10-14 18:44:28 | 000,048,844 | ---- | M] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\VT20141014.006
[2014-10-10 23:36:09 | 000,002,386 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security.lnk
[2014-10-09 22:31:52 | 000,102,616 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2014-10-09 22:31:52 | 000,008,214 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2014-10-09 22:31:52 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2014-10-09 20:47:17 | 000,000,692 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2014-10-09 18:34:52 | 001,670,518 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014-10-09 18:34:52 | 000,740,422 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2014-10-09 18:34:52 | 000,654,254 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014-10-09 18:34:52 | 000,155,996 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2014-10-09 18:34:52 | 000,122,126 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014-10-09 15:58:35 | 000,588,383 | ---- | M] () -- C:\Users\Krystian\Desktop\MPCFORUM.png
[2014-10-08 14:01:01 | 000,448,832 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014-10-07 22:08:46 | 000,055,173 | ---- | M] () -- C:\Users\Krystian\Desktop\img007.jpg
[2014-10-05 17:29:20 | 000,000,858 | ---- | M] () -- C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
[2014-09-29 02:37:40 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\isolate.ini
[2014-09-25 04:08:38 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2014-09-25 03:40:50 | 000,519,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2014-09-20 13:02:25 | 000,000,003 | ---- | M] () -- C:\Windows\SysNative\HRUPPROG.EXIT
========== Files Created - No Company Name ==========
[2014-10-15 19:42:28 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-10-15 00:12:32 | 000,048,844 | ---- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\VT20141014.006
[2014-10-10 23:36:17 | 002,434,120 | ---- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\Cat.DB
[2014-10-10 19:27:59 | 000,009,939 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symelam64.cat
[2014-10-10 19:27:59 | 000,008,184 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symnet64.cat
[2014-10-10 19:27:59 | 000,001,442 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symnet.inf
[2014-10-10 19:27:59 | 000,001,098 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symelam.inf
[2014-10-10 19:27:58 | 000,008,258 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symds64.cat
[2014-10-10 19:27:58 | 000,008,188 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtspx64.cat
[2014-10-10 19:27:58 | 000,008,186 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symefa64.cat
[2014-10-10 19:27:58 | 000,008,184 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtsp64.cat
[2014-10-10 19:27:58 | 000,003,434 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symefa.inf
[2014-10-10 19:27:58 | 000,002,852 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symds.inf
[2014-10-10 19:27:58 | 000,001,439 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtsp64.inf
[2014-10-10 19:27:58 | 000,001,421 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\srtspx64.inf
[2014-10-10 19:27:58 | 000,000,767 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\iron.inf
[2014-10-10 19:27:57 | 000,008,194 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ccsetx64.cat
[2014-10-10 19:27:57 | 000,008,176 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\iron.cat
[2014-10-10 19:27:57 | 000,000,854 | R--- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\ccsetx64.inf
[2014-10-10 19:26:54 | 000,042,291 | ---- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\symvtcer.dat
[2014-10-10 19:26:54 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSx64\1600010.00E\isolate.ini
[2014-10-09 22:31:55 | 000,008,214 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2014-10-09 22:31:54 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2014-10-09 22:31:43 | 000,002,386 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security.lnk
[2014-10-09 20:47:17 | 000,000,692 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk
[2014-10-09 15:58:35 | 000,588,383 | ---- | C] () -- C:\Users\Krystian\Desktop\MPCFORUM.png
[2014-10-07 22:08:45 | 000,055,173 | ---- | C] () -- C:\Users\Krystian\Desktop\img007.jpg
[2014-10-05 17:29:20 | 000,000,858 | ---- | C] () -- C:\Users\Public\Desktop\EA SPORTS FIFA World.lnk
[2014-09-20 13:02:25 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\HRUPPROG.EXIT
[2014-04-24 16:53:24 | 000,009,886 | ---- | C] () -- C:\Users\Krystian\AppData\Local\recently-used.xbel
[2014-03-21 19:04:59 | 000,000,482 | RHS- | C] () -- C:\Users\Krystian\ntuser.pol
[2013-12-25 22:43:39 | 000,000,364 | ---- | C] () -- C:\Users\Krystian\SciTE.session
[2013-12-25 22:00:09 | 001,642,188 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-10-21 20:58:19 | 000,007,598 | ---- | C] () -- C:\Users\Krystian\AppData\Local\Resmon.ResmonCfg
[2013-10-08 15:52:35 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2013-10-05 20:38:06 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2013-10-05 20:38:06 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2013-10-05 20:38:03 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2013-10-05 20:38:03 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2013-10-05 20:32:42 | 000,030,942 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2013-10-05 20:32:25 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013-10-05 20:32:20 | 000,023,167 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
========== ZeroAccess Check ==========
[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== Alternate Data Streams ==========
@Alternate Data Stream - 40 bytes -> C:\ProgramData\MTA San Andreas All:NT
@Alternate Data Stream - 40 bytes -> C:\ProgramData:NT
@Alternate Data Stream - 160 bytes -> C:\ProgramData\MTA San Andreas All:NT2
@Alternate Data Stream - 160 bytes -> C:\ProgramData:NT2
< End of report >eXTRAS (?)
OTL Extras logfile created on: 2014-10-16 10:30:22 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Krystian\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17280)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 1,73 Gb Available Physical Memory | 43,31% Memory free
8,00 Gb Paging File | 5,28 Gb Available in Paging File | 65,99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 196,06 Gb Total Space | 79,70 Gb Free Space | 40,65% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 240,68 Gb Free Space | 82,15% Space Free | Partition Type: NTFS
Drive E: | 442,38 Gb Total Space | 351,77 Gb Free Space | 79,52% Space Free | Partition Type: NTFS
Computer Name: GRZESIU | User Name: Krystian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html[@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "d:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "d:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "D:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "D:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "D:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "d:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "d:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "D:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "D:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "D:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0FE3056B-603D-4B9B-93A5-8F3135E2FAAF}" = lport=139 | protocol=6 | dir=in | app=system |
"{24ED875D-9497-4417-81C6-47EBBC72E598}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{3156C6FE-3E7C-4374-AC5E-78E5C5B8B321}" = rport=10243 | protocol=6 | dir=out | app=system |
"{32573D44-FE94-4131-8C0D-0CDC6AA15D5E}" = lport=58281 | protocol=6 | dir=in | name=pando media booster |
"{434A78E2-A37C-47DE-9323-DB345E001EAF}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe |
"{462F5B41-C325-41B6-A67C-83F3DA11B4D3}" = lport=445 | protocol=6 | dir=in | app=system |
"{46F599B6-F253-4060-8C22-2B9666B71004}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{47A5E9E9-76CC-4526-B2B9-18CDDC45C6EB}" = rport=445 | protocol=6 | dir=out | app=system |
"{4A225F77-61E4-44E7-9B9F-ACA45557A1A4}" = lport=8317 | protocol=6 | dir=in | name=techsmith camtasia studio |
"{4F46CEAA-E45A-42B2-9ADF-246AA36FD62F}" = rport=139 | protocol=6 | dir=out | app=system |
"{5802BA07-FE74-4467-B08F-0D7DFF6B45F8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5E6E6119-1F76-4D58-95F9-8D6FC40AFDEE}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60BD23B2-4A4C-4579-8951-2D073D99E926}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{68365DF0-5645-4775-8D42-601C5ACB9495}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{828D0E71-3C8D-4F1D-8DBA-8BCDD7233F69}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8590FC29-9DE5-4DD7-B80E-815BF564D083}" = lport=58281 | protocol=17 | dir=in | name=pando media booster |
"{8662EAAA-058C-48AF-AE5C-1495F765B923}" = rport=138 | protocol=17 | dir=out | app=system |
"{940C1200-FF8A-4D73-A421-24C54C5361B5}" = lport=138 | protocol=17 | dir=in | app=system |
"{9F3E26BF-3A7D-4061-B198-75437C2167C7}" = lport=58281 | protocol=17 | dir=in | name=pando media booster |
"{AA194EDD-D915-404F-BFBE-31994A2861F2}" = lport=58281 | protocol=6 | dir=in | name=pando media booster |
"{B3B5AC7F-520B-4C08-A0E9-C309B7220AEE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C4453196-F698-425C-84AA-FDAAF320FAD7}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C669AB07-2557-463A-AB74-D9617A3A154A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{C830E2C7-E5E8-4F3E-8DA5-7B4AAC80E3C3}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CB86443C-1035-44F7-BD2B-1EA9A0F89028}" = lport=137 | protocol=17 | dir=in | app=system |
"{DFECFEB1-A162-4148-A7EA-F9706F838D21}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{EC439729-3ECA-4649-B75E-7FC5A6B18601}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FE695747-04E3-488F-8617-FA127B3A768D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{FFD8FC2B-30AA-4ECD-ACAD-CAB7E328B286}" = rport=137 | protocol=17 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07BDCE71-65FE-4685-9E83-6E83494B44C4}" = protocol=17 | dir=in | app=e:\steam\bin\steamwebhelper.exe |
"{0AEC06D5-5913-4438-942B-67DF682B046D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0BAD1EFF-E75B-4666-A240-0E79A6C3ABA8}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{11C8AA08-F3AB-4B56-814F-E3C9557F6B75}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dead island epidemic\dead island epidemic - launcher.exe |
"{1C5ED7F2-E951-4BC3-B84F-7E4F40B5CD42}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{1E5130EC-31EF-4446-82B4-7E7DBC8E090B}" = protocol=17 | dir=in | app=d:\program files (x86)\winamp\winamp.exe |
"{206B7893-795A-4FC0-8DAC-84F36BA3E722}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{21CED092-95D7-4561-91C7-5559316738B4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{27AC1505-4A99-445D-8BAF-A984DC7E0602}" = protocol=6 | dir=in | app=e:\steam\bin\steamwebhelper.exe |
"{28180500-6B33-4E9D-838A-E66C83B93CA2}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\race 07\steamproxy.exe |
"{2D4E934B-9145-4BED-9B03-586DD1AED4D3}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{39314677-102D-4FDB-A4AB-D05F53E6E788}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\fifa world\fifaworld.exe |
"{3B02AEC1-5489-48A1-84B4-0898B4D8E3AE}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\fifa 14 demo\game\fifa14_demo.exe |
"{3BA61608-45FB-46BF-8201-A2B3436EBF64}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3E02C71C-C024-4601-B96F-E3AA8BEEEFF4}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{4770243B-C2BA-4A87-ADB6-0AADB1A4AD31}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{4B5B85F3-859F-4018-90C7-A6406F1A060B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{4D12E5D9-910B-4A73-9036-451B4F3821F9}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{4D86B822-E74F-4C7C-A483-474379C8FEEC}" = protocol=6 | dir=in | app=d:\program files (x86)\gameforgelive\gfl_client.exe |
"{5207DC69-760E-471A-8EA1-5E961D6BC639}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5669FBA1-4C06-4D82-ADA9-F1C57F251FF0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{5799AF98-6315-4CD7-8B49-14A6A83B8B47}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{5BE82C2B-FB3F-4C6E-91A3-BCD9C9D370CB}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\woodletreeadventures\woodletreeadventures.exe |
"{63405EDE-7307-42AD-8201-674204A76B8A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{637C8DA0-C2E8-4F77-91C3-08EDBB7AAD1B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{6B5F2456-910D-481E-81BD-5DE2183370A4}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{6DEC3B07-BBB3-42E2-B769-510E2E8E6D04}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{70AE68EC-23E3-494D-9E67-C1B87360382E}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\bejeweled 3\bejeweled3.exe |
"{714B3032-BA76-47D7-8F00-E03FD29ADEE4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{782CA121-F487-42B5-9DDA-CAF26F8BB5D0}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\woodletreeadventures\woodletreeadventures.exe |
"{7870327F-4450-465A-9F0D-CEF567CF5FD0}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dead island epidemic\dead island epidemic - launcher.exe |
"{7D0896B3-1023-4BF3-B72C-5CAB86CA5F5F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\unturned\unturned.exe |
"{7D6F8AA9-FF9D-4429-9468-FD4D515D9F18}" = protocol=6 | dir=out | app=system |
"{7E49E583-5C9A-4C41-A59C-478E7ECF4E10}" = protocol=6 | dir=in | app=d:\program files (x86)\klient 4death.pl\4death.pl.exe |
"{8303A7CA-40C7-43DB-AF3C-9B59B0B8CFF0}" = protocol=17 | dir=in | app=d:\program files (x86)\klient 4death.pl\4death.pl.exe |
"{86738F9E-E1F6-4398-B878-8B031C8F696B}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\race 07\config.exe |
"{86A92765-77E8-41CF-A009-940AF3D1F790}" = protocol=6 | dir=in | app=e:\steam\steam.exe |
"{8B8483E6-B130-4CEC-8DD4-E1F0CE0024E9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8C2F609D-CD89-40CC-A386-43A049B7D80D}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\fifa world\fifaworld.exe |
"{A00C0931-A82A-40EC-AAD2-A9A1F5376C3E}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe |
"{A1B0A912-9C7F-472A-8043-A1F3159F3C4D}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A1C1B06B-45A0-49D1-8BBD-2D49F19A893A}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{A370F495-FD6C-4D2E-B545-FC3EE501B6AF}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe |
"{A75C0A65-8F75-43E7-9E6E-22F49A717B17}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{ADD8531A-DBE7-474A-8350-B74871C745C4}" = protocol=17 | dir=in | app=e:\steam\steam.exe |
"{B15100CB-BD81-459A-986B-0EF3739BF793}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe |
"{B6B494DE-4895-4203-862B-51BE57B29354}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe |
"{BA544A44-5005-4294-9DB5-FC9E4652BDE5}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{BCB1C6CF-7BC2-4F10-8630-FBFC51B9C430}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe |
"{C41014B7-FA2C-4152-8A64-785DE08B8DD8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{C71752A3-7F8D-4306-A4EB-DDAA4D28A1FD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C98147F7-0842-47CA-ADC4-5D847AFC9175}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\bejeweled 3\bejeweled3.exe |
"{CEBF646D-0D4A-41AA-AF36-AC28556C8D19}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{D38489E4-297D-48F9-B641-00AED0D1A039}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D5605AB9-15BC-4C8B-A40B-DDB7ABAE3568}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{D5AE1286-55F9-48ED-86A5-EED9E499B3E7}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{D776EAC2-9897-48E7-8990-850D89E12A0A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D93563C4-A170-46B3-8F21-D960ECF0DEE8}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\fifa world\fifaworld.exe |
"{D9591701-31BD-41FE-9AA7-704C8ABB1F73}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\need for speed world\gamelauncher.exe |
"{DC3014FB-CF39-4C6F-B904-D7FA527B671A}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe |
"{DD35929D-1095-4524-BA0F-F1ADCC099522}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\fifa world\fifaworld.exe |
"{DD5CBA13-3A15-40A0-887B-3242F71307BE}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\simcity\simcity\simcity.exe |
"{DEBEE6B0-C381-42D4-B879-FB0EB5AAAD81}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{E5231AC4-CE99-4EDF-8974-D9670646ABD5}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\fifa 14 demo\game\fifa14_demo.exe |
"{E85FF8B1-3272-4F30-8A5E-705F6C5854C0}" = protocol=6 | dir=in | app=d:\program files (x86)\winamp\winamp.exe |
"{EC9A5DF0-F14B-4A27-9DB8-4FB4566A4E3C}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\simcity\simcity\simcity.exe |
"{ED3E5844-E32D-408F-8A23-ACA85925FB1B}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\unturned\unturned.exe |
"{EEAA307F-ABE0-44D0-8566-55B5B7C1EA75}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\race 07\steamproxy.exe |
"{EF171A6E-AE42-4D11-A50F-7B8F459EB60C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F4DF80C2-1C0D-4F3D-A34E-AB537E2072B4}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\need for speed world\gamelauncher.exe |
"{FF4551B6-53B5-4493-ACD1-BC7CA4815218}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\race 07\config.exe |
"TCP Query User{10EA29CB-E55E-4F31-8E67-E94C6210FCED}C:\users\krystian\downloads\xenoxt2client_13_04_2012_by_pawemol (1)\xenoxmt2client_11.02.2012r_by_pawemol\xenoxmt2 launcher.exe" = protocol=6 | dir=in | app=c:\users\krystian\downloads\xenoxt2client_13_04_2012_by_pawemol (1)\xenoxmt2client_11.02.2012r_by_pawemol\xenoxmt2 launcher.exe |
"TCP Query User{1A3DB377-73B4-4BF4-84A0-066FB2EB4F5A}C:\users\krystian\desktop\nowy folder\kryptowaluty\captcoin-wallet\captcoin-wallet\captcoin-qt.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\kryptowaluty\captcoin-wallet\captcoin-wallet\captcoin-qt.exe |
"TCP Query User{1A51BC54-DE09-43A5-9F26-CACA4B27FDBA}C:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe |
"TCP Query User{1B4E6634-A938-4119-A334-7366E1805F05}E:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe" = protocol=6 | dir=in | app=e:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe |
"TCP Query User{3C586957-D370-4A50-B272-38537E7EA700}E:\tavia mt2\travica.pl - klient gry - kopia\uruchom_klienta.exe" = protocol=6 | dir=in | app=e:\tavia mt2\travica.pl - klient gry - kopia\uruchom_klienta.exe |
"TCP Query User{3F6D9C13-3FF2-41BB-BBE8-2C11A306ACBA}E:\steam\steamapps\common\race 07\race_steam.exe" = protocol=6 | dir=in | app=e:\steam\steamapps\common\race 07\race_steam.exe |
"TCP Query User{40E8E3B3-D3B6-4003-8B2D-C3FDF2B1B725}E:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe" = protocol=6 | dir=in | app=e:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe |
"TCP Query User{44AA7246-CFDA-4B56-8899-0783B7E59416}C:\users\krystian\desktop\nowy folder\nowy folder\metin2-eridanus\eridanus.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\metin2-eridanus\eridanus.exe |
"TCP Query User{4570FF10-D21D-48FE-AC8D-F6F174170930}E:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=e:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"TCP Query User{4E1972C5-54D7-409D-BA3C-5C1E46F8BEF6}C:\users\krystian\desktop\mtamta\gta san andreas\gta_sa.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\mtamta\gta san andreas\gta_sa.exe |
"TCP Query User{568B6FB6-BA19-4BFC-8D2C-81211483EA25}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{597C0DF3-B6AE-433F-AA45-8AFA118888F5}E:\tavia mt2\tavia - klient gry\tavia.eu.exe" = protocol=6 | dir=in | app=e:\tavia mt2\tavia - klient gry\tavia.eu.exe |
"TCP Query User{663A1B53-9A7E-4670-B562-6048DA1A10E0}E:\nowy folder\server\mta server.exe" = protocol=6 | dir=in | app=e:\nowy folder\server\mta server.exe |
"TCP Query User{788449F3-6599-42EA-8485-FAA9E6B43D5C}C:\users\krystian\desktop\nowy folder\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe |
"TCP Query User{7AC84911-D8C7-4ED8-B81C-929673B17F78}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{823DC2F2-A251-4225-868A-96991BBAFEF9}D:\program files (x86)\free download manager\fdm.exe" = protocol=6 | dir=in | app=d:\program files (x86)\free download manager\fdm.exe |
"TCP Query User{98DA07C1-FCC3-4A6E-A5EE-5270493ECF33}C:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe |
"TCP Query User{A07CBE83-2E3A-4242-8E29-DDADDDFBF077}C:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"TCP Query User{B65233E0-3D8F-4E88-AA00-85E1D2645B7B}D:\program files (x86)\klient 4death.pl\4death.pl.exe" = protocol=6 | dir=in | app=d:\program files (x86)\klient 4death.pl\4death.pl.exe |
"TCP Query User{BFF12514-CA0E-435A-A8FA-4EB7E5AE6A69}C:\program files (x86)\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"TCP Query User{D65D03EC-7093-4675-B63E-25A13EEB45E7}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{DA1697F1-2480-4BD7-8370-CF7BA1C7A584}C:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"TCP Query User{DA4A2C15-24DA-47F4-8377-E8ABBFCB5C66}C:\users\krystian\desktop\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe" = protocol=6 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe |
"TCP Query User{E29D4B43-3DF2-4C27-B89D-937B478A16AA}E:\tavia mt2\tavia - klient gry\start - tavia.exe" = protocol=6 | dir=in | app=e:\tavia mt2\tavia - klient gry\start - tavia.exe |
"TCP Query User{EC03C1AD-2712-451D-A551-885041935A22}E:\program files (x86)\team 17\worms revolution - gold edition\wormsrevolution.exe" = protocol=6 | dir=in | app=e:\program files (x86)\team 17\worms revolution - gold edition\wormsrevolution.exe |
"TCP Query User{F39B8170-44D8-47F1-B67D-3AE5773D3E57}E:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe" = protocol=6 | dir=in | app=e:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe |
"TCP Query User{F684A5BF-85B9-48F6-939B-B88683E28461}E:\tavia mt2\tavia - klient gry\start - tavia.exe" = protocol=6 | dir=in | app=e:\tavia mt2\tavia - klient gry\start - tavia.exe |
"TCP Query User{FA0D4816-E7CB-423B-80A1-B266A3765A8A}D:\program files (x86)\litecoin\litecoin-qt.exe" = protocol=6 | dir=in | app=d:\program files (x86)\litecoin\litecoin-qt.exe |
"UDP Query User{050413AE-8B3C-42B3-AC06-4873D139E62E}D:\program files (x86)\free download manager\fdm.exe" = protocol=17 | dir=in | app=d:\program files (x86)\free download manager\fdm.exe |
"UDP Query User{09C156B9-595A-4D5F-8497-8AF174D013A8}C:\users\krystian\desktop\nowy folder\kryptowaluty\captcoin-wallet\captcoin-wallet\captcoin-qt.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\kryptowaluty\captcoin-wallet\captcoin-wallet\captcoin-qt.exe |
"UDP Query User{151CAB5D-4A08-45AE-BB23-AA888BC52BB2}C:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe |
"UDP Query User{18A5D9A0-952F-424B-BD01-FD8A464421F1}C:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"UDP Query User{270FC455-8FD0-4BC9-93EB-2EBE553F137D}E:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe" = protocol=17 | dir=in | app=e:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe |
"UDP Query User{3F1326E6-505E-4260-A9B1-52FDB2C46A79}D:\program files (x86)\klient 4death.pl\4death.pl.exe" = protocol=17 | dir=in | app=d:\program files (x86)\klient 4death.pl\4death.pl.exe |
"UDP Query User{3F9C0E29-8B62-4E82-B33E-9738E153B049}C:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\konkurs ox mpcforum.pl\konkurs ox mpcforum.pl\mpcforum.pl konkurs ox.exe |
"UDP Query User{420D0A65-F23E-4E8E-96BC-F72830EF6B05}E:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe" = protocol=17 | dir=in | app=e:\tavia mt2\travica.pl - klient gry\uruchom_klienta.exe |
"UDP Query User{457EAF74-83B9-4BBF-8523-4246F710B2DB}C:\users\krystian\desktop\nowy folder\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe |
"UDP Query User{466B6B7D-C355-4B7C-9CFC-1768D5CE1557}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{46D8AF36-B925-4AF8-BA35-A64EB59DBE36}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{47B8C30A-1563-44EB-A466-22F14824BEFC}E:\tavia mt2\tavia - klient gry\tavia.eu.exe" = protocol=17 | dir=in | app=e:\tavia mt2\tavia - klient gry\tavia.eu.exe |
"UDP Query User{4F6F6D7F-1187-4A19-973D-532BABF61E9E}D:\program files (x86)\litecoin\litecoin-qt.exe" = protocol=17 | dir=in | app=d:\program files (x86)\litecoin\litecoin-qt.exe |
"UDP Query User{5D17C1B1-A859-4244-AEAB-307A4F72D0B8}E:\nowy folder\server\mta server.exe" = protocol=17 | dir=in | app=e:\nowy folder\server\mta server.exe |
"UDP Query User{7F78EB2C-572B-425F-ADDF-9EDEEF48EA66}E:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe" = protocol=17 | dir=in | app=e:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe |
"UDP Query User{8D5B8ED9-C8EA-45EE-BD0C-E12243F825D2}C:\users\krystian\downloads\xenoxt2client_13_04_2012_by_pawemol (1)\xenoxmt2client_11.02.2012r_by_pawemol\xenoxmt2 launcher.exe" = protocol=17 | dir=in | app=c:\users\krystian\downloads\xenoxt2client_13_04_2012_by_pawemol (1)\xenoxmt2client_11.02.2012r_by_pawemol\xenoxmt2 launcher.exe |
"UDP Query User{9B0436FE-BE91-479D-A474-E28DBC305C75}E:\steam\steamapps\common\race 07\race_steam.exe" = protocol=17 | dir=in | app=e:\steam\steamapps\common\race 07\race_steam.exe |
"UDP Query User{AB15248B-80FB-4399-A41B-FCC83461A003}C:\users\krystian\desktop\mtamta\gta san andreas\gta_sa.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\mtamta\gta san andreas\gta_sa.exe |
"UDP Query User{ACE71E99-EB61-470B-AD79-7795110A833E}E:\tavia mt2\tavia - klient gry\start - tavia.exe" = protocol=17 | dir=in | app=e:\tavia mt2\tavia - klient gry\start - tavia.exe |
"UDP Query User{BF30EB36-FE83-4A44-A728-89C6302D65D2}E:\program files (x86)\team 17\worms revolution - gold edition\wormsrevolution.exe" = protocol=17 | dir=in | app=e:\program files (x86)\team 17\worms revolution - gold edition\wormsrevolution.exe |
"UDP Query User{C1CE1534-3967-4FA5-8FCD-CFADA0C4641D}C:\users\krystian\desktop\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\tavia.pl - klient gry1\tavia.pl.exe |
"UDP Query User{C8EA25B5-8810-4E53-8079-458EC279D943}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{D657DC52-317A-4C54-BD73-A003C8D7EED3}C:\program files (x86)\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"UDP Query User{D9D60D3A-F16C-4DC6-9744-CD0299C0226D}E:\tavia mt2\travica.pl - klient gry - kopia\uruchom_klienta.exe" = protocol=17 | dir=in | app=e:\tavia mt2\travica.pl - klient gry - kopia\uruchom_klienta.exe |
"UDP Query User{E9DF15F8-857B-4BC2-B951-3698D1F6463A}C:\users\krystian\desktop\nowy folder\nowy folder\metin2-eridanus\eridanus.exe" = protocol=17 | dir=in | app=c:\users\krystian\desktop\nowy folder\nowy folder\metin2-eridanus\eridanus.exe |
"UDP Query User{EAAD83F6-4799-424B-8755-C1E2577AEFFB}C:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\launch4j-tmp\minecraftzyczu.exe |
"UDP Query User{EFC82860-25E8-4CDF-85B8-64C8F6091234}E:\tavia mt2\tavia - klient gry\start - tavia.exe" = protocol=17 | dir=in | app=e:\tavia mt2\tavia - klient gry\start - tavia.exe |
"UDP Query User{F04BBA59-4B2A-44C7-B9ED-FCD05D1B5CA8}E:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=e:\programdata\electronic arts\need for speed world\data\nfsw.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{45F1F774-38B4-3CC3-BAAF-051E6D19E48E}" = Microsoft .NET Framework 4.5.1 (PLK)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5846E720-C188-478F-B501-45EA1ACC44D1}_is1" = MailShare
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010
"{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013
"{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013
"{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013
"{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013
"{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013
"{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français
"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español
"{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013
"{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013
"{90150000-0044-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013
"{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013
"{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013
"{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013
"{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013
"{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013
"{90150000-00E1-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013
"{90150000-00E2-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}" =
"{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013
"{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013
"{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013
"{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski)
"{94D70749-4281-39AC-AD90-B56A0E0A402E}" = Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 285.38
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 285.38
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 285.38
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 285.38
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.2.24.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{BCA26999-EC22-3007-BB79-638913079C9A}" = Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{FCADA26A-5672-31DD-BF0E-BA76ECF9B02D}" = Microsoft Help Viewer 1.0
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.6
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"Office15.PROPLUSR" = Microsoft Office Professional Plus 2013
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player 2.1.4
"WinRAR archiver" = WinRAR 4.20 (64-bitowy)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01052d57-5e05-455f-9b02-dcf6f53962df}" = Playfire
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 6.21
"{26A24AE4-039D-4CA4-87B4-2F03217060FF}" = Java 7 Update 60
"{29ED28E7-C3D6-43F7-A821-E5D0867DE47F}" = eJay Techno 5
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}" = TL-WN721N/TL-WN722N Driver
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}" = Need For Speed™ World
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}" = Smite
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{4b0c178f-1f4d-47bc-b20e-bcd543b39e1a}" = Nero 9 Lite
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7A6577E7-F341-430F-9173-91E14E2DE270}" = FIFA 14 Demo
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{889E44CE-435C-4D37-B302-A7E43339E5FA}_is1" = Mouse Recorder Pro 2.0.7.5
"{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine
"{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}" = EA SPORTS FIFA World
"{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1" = Gameforge Live 2.0.4
"{9E4F0E65-209E-4713-8BE2-7F8802BB3987}_is1" = War Inc Battlezone version 1.0.0
"{9FF0E71A-0A92-40E2-8F9D-553DAE540733}" = Playfire
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A7727F03-5311-4A12-9A63-2ACD20BA0497}" = Camtasia Studio 8
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.09) - Polish
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D5913A68-1D92-4CB7-857A-1A45447878A3}_is1" = Klient 4Death.pl wersja 1.1
"{E20F04B6-5497-4296-95D8-8BB2CFD7EEE0}" = System Requirements Lab Detection
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}" = Bejeweled® 3
"{ED784556-66AA-3F17-9B58-7246ACB5C7E4}" = Microsoft Visual Basic 2010 Express - ENU
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}" = SimCity™
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"Bandicam" = Bandicam
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"Battlelog Web Plugins" = Battlelog Web Plugins
"CWK" = CWK (Czasowy Wyłącznik Komputera)
"DAEMON Tools Lite" = DAEMON Tools Lite
"Free Download Manager_is1" = Free Download Manager 3.9.3
"Google Chrome" = Google Chrome
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń
"InstallShield_{29ED28E7-C3D6-43F7-A821-E5D0867DE47F}" = eJay Techno 5
"InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager
"League of Legends 3.0.1" = League of Legends
"MTA:SA 1.4" = MTA:SA v1.4.0
"MultiDoge 0.1.2" = MultiDoge 0.1.2
"MySSID_is1" = EXPERTool 7.12
"NS" = Norton Security
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Opera 25.0.1614.50" = Opera Stable 25.0.1614.50
"Origin" = Origin
"Steam App 10" = Counter-Strike
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Steam App 222900" = Dead Island: Epidemic
"Steam App 291480" = Warface
"Steam App 299460" = Woodle Tree Adventures
"Steam App 304930" = Unturned
"Steam App 63380" = Sniper Elite V2
"Steam App 80" = Counter-Strike: Condition Zero
"Steam App 8600" = RACE 07
"Szkoła podstawowa klasa 6 - Dzień dobry historio!" = Szkoła podstawowa klasa 6 - Dzień dobry historio!
"Winamp" = Winamp
"Worms Revolution - Gold Edition_is1" = Worms Revolution - Gold Edition
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Litecoin" = Litecoin
"Reddcoin" = Reddcoin
"UnityWebPlayer" = Unity Web Player
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 2014-10-16 03:12:32 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 7042
Description =
Error - 2014-10-16 03:12:32 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 9002
Description =
Error - 2014-10-16 03:12:32 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 3029
Description =
Error - 2014-10-16 03:12:33 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 3029
Description =
Error - 2014-10-16 03:12:33 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 3028
Description =
Error - 2014-10-16 03:12:33 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 3058
Description =
Error - 2014-10-16 03:12:33 | Computer Name = Grzesiu | Source = Windows Search Service | ID = 7010
Description =
Error - 2014-10-16 03:25:07 | Computer Name = Grzesiu | Source = Office 2013 Licensing Service | ID = 0
Description =
Error - 2014-10-16 03:48:24 | Computer Name = Grzesiu | Source = Application Hang | ID = 1002
Description = Program setup.exe w wersji 12.0.0.58851 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: 880 Godzina rozpoczęcia: 01cfe9156e977b40 Godzina zakończenia:
16 Ścieżka aplikacji: C:\Users\Krystian\AppData\Local\Temp\{8D46BA7C-F7B9-431F-8C8A-3C941231DAD9}\setup.exe
Identyfikator
raportu: cc482141-5508-11e4-afdc-99e0ad3fd28b
Error - 2014-10-16 04:26:54 | Computer Name = Grzesiu | Source = Application Hang | ID = 1002
Description = Program OTL.exe w wersji 3.2.69.0 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: 4b8 Godzina rozpoczęcia: 01cfe91a4ccf5780 Godzina zakończenia:
12 Ścieżka aplikacji: C:\Users\Krystian\Downloads\OTL.exe Identyfikator raportu:
f64ad281-550d-11e4-852c-b7bc987bd48e
[ System Events ]
Error - 2014-10-16 03:53:26 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:53:26 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:56:31 | Computer Name = Grzesiu | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi TBPanel z powodu następującego błędu: %%2
Error - 2014-10-16 03:56:34 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:56:37 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:57:33 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:57:34 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:57:38 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 03:57:39 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
Error - 2014-10-16 04:18:59 | Computer Name = Grzesiu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.
< End of report >
Wysoki ping.
w Windows 7
Opublikowano
Z dnia na dzień mam wysoki ping oraz nie działa mi program Malwarebytes Anti-Malware, nie wiem czy to jest spowodowane jakimś programem, czy też nie. Dlatego proszę, aby ktoś przejrzał logi
(Program malwarebytes anti-malware przestał działać)
Podpis problemu:
Nazwa zdarzenia problemu: APPCRASH
Nazwa aplikacji: mbam.exe
Wersja aplikacji: 2.3.55.0
Sygnatura czasowa aplikacji: 557a2a02
Nazwa modułu z błędem: MSVCR100.dll
Wersja modułu z błędem: 10.0.40219.325
Sygnatura czasowa modułu z błędem: 4df2be1e
Kod wyjątku: 40000015
Przesunięcie wyjątku: 0008d6fd
Wersja systemu operacyjnego: 6.1.7601.2.1.0.768.3
Identyfikator ustawień regionalnych: 1045
Dodatkowe informacje 1: 8374
Dodatkowe informacje 2: 83748d7ce6919cf452bf5c3838e036f3
Dodatkowe informacje 3: 314c
Dodatkowe informacje 4: 314c1ce9af96e5c1000c2b051382c98f
Addition.txt
FRST.txt
Shortcut.txt
GMER.txt