Problem ze skryptami / firefox,windows 8

**Posty:** 271 · przez **Sythev** 29 Maj 2015, 12:05

Witam

Od wczoraj męcze się z czymś dziwnym..
Raz,że przegladarka i komputer strasznie wolno reaguje i otwiera się wszystko bardzo długo po czym wyskakuje skrypt (zdjecie w załaczniku) i nawet jak zrobie 'przerwij skrypt' albo 'kontyunuj" to zawsze sie zwiesza i wyskakuje 'brak odpowiedzi' i po chwili dziala dobrze..i tak co 2-3min jak otwieram nowa strone

Mogę prosic o sprawdzenie logow itp?

Nie wiem może to wina braku aktualizacji itp?

Prosilbym o pomoc

Dodano 29.05.2015 11:39:21:
gmer

Dodano 29.05.2015 11:39:59:

Kod: Zaznacz wszystko: GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-05-29 12:38:08 Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000030 rev. 465,76GB Running: djc1ypxt.exe; Driver: C:\Users\Adam\AppData\Local\Temp\kxldrpoc.sys ---- User code sections - GMER 2.1 ---- .text C:\Windows\System32\WUDFHost.exe[1080] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\Windows\System32\WUDFHost.exe[1080] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\Windows\System32\WUDFHost.exe[1080] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\Windows\System32\WUDFHost.exe[1080] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1948] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1948] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1948] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1948] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\valWBFPolicyService.exe[2556] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\valWBFPolicyService.exe[2556] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\valWBFPolicyService.exe[2556] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\valWBFPolicyService.exe[2556] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Windows Defender\MsMpEng.exe[2628] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Windows Defender\MsMpEng.exe[2628] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Windows Defender\MsMpEng.exe[2628] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Windows Defender\MsMpEng.exe[2628] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE[3776] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE[3776] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE[3776] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE[3776] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\rundll32.exe[4712] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007fff730a169a 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\rundll32.exe[4712] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007fff730a16a2 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\rundll32.exe[4712] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007fff730a181a 4 bytes [0A, 73, FF, 7F] .text C:\WINDOWS\system32\rundll32.exe[4712] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007fff730a1832 4 bytes [0A, 73, FF, 7F] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[4004] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194 00007fff621d1f6a 4 bytes [1D, 62, FF, 7F] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[4004] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218 00007fff621d1f82 4 bytes [1D, 62, FF, 7F] ---- Threads - GMER 2.1 ---- Thread C:\WINDOWS\system32\csrss.exe [668:692] fffff9600089fb90 ---- Processes - GMER 2.1 ---- Library C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll (*** suspicious ***) @ C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe [2208](2015-02-09 13:59:45) 000000006fbc0000 Library C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll (*** suspicious ***) @ C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe [2208](2015-02-09 13:59:45) 000000006e940000 Library C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll (*** suspicious ***) @ C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe [2208](2015-02-09 13:59:45) 000000006a1c0000 Library C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll (*** suspicious ***) @ C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe [2208](2015-02-09 13:59:45) 000000006ff00000 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code ---- EOF - GMER 2.1 ----

Dodano 29.05.2015 11:46:58:

Dodano 29.05.2015 12:23:04:

Kod: Zaznacz wszystko: OTL logfile created on: 2015-05-29 13:06:58 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Adam\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17351) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,89 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 56,57% Memory free 7,89 Gb Paging File | 6,20 Gb Available in Paging File | 78,53% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,25 Gb Total Space | 407,95 Gb Free Space | 90,41% Space Free | Partition Type: NTFS Drive E: | 48,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: ADAM-PC | User Name: Adam | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2015-05-29 13:06:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Downloads\OTL_[www.programosy.pl](1).exe PRC - [2015-05-19 20:11:09 | 000,376,944 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2015-05-01 20:10:42 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2015-05-01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe PRC - [2015-05-01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe PRC - [2015-04-14 19:08:30 | 001,892,528 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe PRC - [2015-03-09 09:45:04 | 001,360,336 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe PRC - [2015-03-06 21:53:44 | 000,584,632 | ---- | M] (LENOVO INCORPORATED.) -- C:\Program Files\Lenovo\iMController\SystemAgentService.exe PRC - [2015-03-06 21:53:40 | 000,074,168 | ---- | M] () -- C:\Program Files\Lenovo\iMController\AutoUpdate.exe PRC - [2014-11-21 07:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe PRC - [2014-08-13 11:16:16 | 000,090,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe PRC - [2014-05-16 11:14:52 | 000,750,320 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe PRC - [2014-05-16 11:14:52 | 000,140,016 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe PRC - [2014-04-26 08:15:59 | 000,682,064 | ---- | M] () -- C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe PRC - [2014-04-07 13:54:02 | 000,110,128 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe PRC - [2014-02-22 10:00:27 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WWAHost.exe PRC - [2014-01-15 05:42:40 | 000,238,160 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2013-11-06 14:18:22 | 002,083,592 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe PRC - [2013-11-05 11:14:32 | 000,600,568 | ---- | M] (Lenovo Corporation) -- C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe PRC - [2013-11-01 17:16:06 | 000,013,064 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe PRC - [2013-11-01 17:16:04 | 000,467,720 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe PRC - [2013-10-28 16:48:36 | 000,915,968 | ---- | M] () -- C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe PRC - [2013-10-11 07:44:00 | 001,669,928 | ---- | M] (Lenovo) -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe PRC - [2013-10-08 11:28:50 | 000,251,896 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe PRC - [2013-10-08 11:28:46 | 000,140,280 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe PRC - [2013-09-16 05:19:26 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2013-09-16 05:19:24 | 000,134,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe PRC - [2013-09-16 05:19:22 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2013-08-22 06:17:05 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe PRC - [2013-08-22 04:54:31 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\backgroundTaskHost.exe PRC - [2013-06-28 15:32:46 | 000,100,712 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe PRC - [2013-03-06 21:49:22 | 000,110,144 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe PRC - [2011-09-01 09:23:44 | 000,447,104 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\SysWOW64\SASrv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2015-05-29 00:29:48 | 000,392,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\9b0c1539963f393f6641949a67757b8f\System.Xml.Linq.ni.dll MOD - [2015-05-29 00:29:41 | 007,785,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\43edd630a9f8cd6ac38c527b106ec94f\System.Xml.ni.dll MOD - [2015-05-29 00:06:37 | 002,803,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\ab763e7f2c7532e9fe8f587995105156\System.Runtime.Serialization.ni.dll MOD - [2015-05-29 00:05:45 | 000,968,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\00fc7d14bbb38db00e4103912c041adf\System.Configuration.ni.dll MOD - [2015-05-28 10:09:47 | 000,724,992 | ---- | M] () -- C:\Users\Adam\AppData\Local\Packages\e046963f.lenovocompanion_k1h2ywk1493x8\AC\Microsoft\CLR_v4.0_32\NativeImages\Lenovo_Comp257f541a#\aa8159233cf3ccaa7957d0801f33ff30\Lenovo_Components_MetricCollection.ni.dll MOD - [2015-05-04 11:53:42 | 000,008,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.IO\232833346ca4e705c2a15dd57af73bac\System.IO.ni.dll MOD - [2015-05-03 11:32:43 | 000,808,448 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Storage\f0a2c10499402eff632a7a7df0b4afef\Windows.Storage.ni.dll MOD - [2015-05-02 10:26:44 | 000,522,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Net.Http\f13998cc28c6bb3c3138398e19c0d631\System.Net.Http.ni.dll MOD - [2015-05-02 10:26:34 | 000,008,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Resoc6338000#\f4ecced1733e55fb58c2eec76e4507c0\System.Resources.ResourceManager.ni.dll MOD - [2015-05-02 10:26:27 | 000,573,952 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runt0d283adf#\291b5c55c40ec0ad886caaa65a5319fa\System.Runtime.WindowsRuntime.ni.dll MOD - [2015-04-25 10:33:32 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtbff93e24#\1849d6bdd0f61a224d41ac2963221204\System.Runtime.InteropServices.WindowsRuntime.ni.dll MOD - [2015-04-25 09:57:37 | 000,605,184 | ---- | M] () -- C:\Users\Adam\AppData\Local\Packages\E046963F.LenovoSupport_k1h2ywk1493x8\AC\Microsoft\CLR_v4.0_32\NativeImages\BackgroundT72ca5658#\b9c8c588d47bbea423afc74d60e1159f\BackgroundTasks_MetricCollection.ni.dll MOD - [2015-04-23 11:42:35 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Collections\ebeafb298ff3f25b6291e44deceb1d0c\System.Collections.ni.dll MOD - [2015-04-23 11:42:23 | 000,018,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime\7bf2203bf2d88857c463948cccf6156c\System.Runtime.ni.dll MOD - [2015-04-22 11:14:36 | 006,951,424 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\483443985708dc5439abe7fd6350abe4\System.Core.ni.dll MOD - [2015-04-22 11:13:24 | 010,030,592 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\1c5fe4cb68f67046baec4c3a854f722f\System.ni.dll MOD - [2015-04-14 19:08:23 | 016,863,920 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll MOD - [2015-03-06 21:53:40 | 000,074,168 | ---- | M] () -- C:\Program Files\Lenovo\iMController\AutoUpdate.exe MOD - [2014-10-19 19:23:39 | 000,797,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\e1a2f3f274995f1f847c00f962657943\Windows.Networking.ni.dll MOD - [2014-10-19 19:23:37 | 000,228,864 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\f7e726805e56676bd7b8662a3d842b0e\Windows.Foundation.ni.dll MOD - [2014-10-19 19:23:31 | 001,130,496 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.App640a3541#\6e37f358bf8363dad51e2333292d61a9\Windows.ApplicationModel.ni.dll MOD - [2014-10-19 19:11:33 | 000,118,272 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\1c09d6db83322a23a1744d75c4836f85\SMDiagnostics.ni.dll MOD - [2014-10-19 19:11:32 | 000,786,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\7159bb28e23de8ed898a2acb1dbfef6c\System.ServiceModel.Internals.ni.dll MOD - [2014-08-18 23:50:45 | 000,238,080 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Gloaae92e31#\a1306b1fdd9c22508f9e5d901fceb4cd\Windows.Globalization.ni.dll MOD - [2014-08-13 11:17:29 | 000,310,864 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\XFramePlugin.dll MOD - [2014-08-13 11:17:28 | 000,197,200 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\XCodec.dll MOD - [2014-08-13 11:17:26 | 000,121,424 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Win7Support.dll MOD - [2014-08-13 11:17:25 | 000,155,728 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\VPNPlugin.dll MOD - [2014-08-13 11:17:24 | 000,457,296 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDUIPlugin.dll MOD - [2014-08-13 11:17:22 | 000,149,072 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDSrvPlugin.dll MOD - [2014-08-13 11:17:21 | 000,164,432 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Trace.dll MOD - [2014-08-13 11:17:19 | 000,325,712 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\StatusBarMgrPlugin.dll MOD - [2014-08-13 11:17:17 | 000,847,952 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SMSUIPlugin.dll MOD - [2014-08-13 11:17:16 | 000,225,872 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsSrvPlugin.dll MOD - [2014-08-13 11:17:15 | 000,715,344 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsAppPlugin.dll MOD - [2014-08-13 11:17:14 | 000,312,912 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SettingUIPlugin.dll MOD - [2014-08-13 11:17:13 | 000,116,816 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\ServiceUIPlugin.dll MOD - [2014-08-13 11:17:12 | 000,282,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\sdk.dll MOD - [2014-08-13 11:17:11 | 000,397,392 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Proxy.dll MOD - [2014-08-13 11:17:09 | 000,553,040 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\PluginContainer.dll MOD - [2014-08-13 11:17:06 | 000,072,272 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSPowerMgr.dll MOD - [2014-08-13 11:17:04 | 000,138,320 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSNDIS.dll MOD - [2014-08-13 11:17:02 | 000,162,896 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSDialup.dll MOD - [2014-08-13 11:17:00 | 000,109,136 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSAdapt.dll MOD - [2014-08-13 11:16:59 | 000,104,016 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NotifyServicePlugin.dll MOD - [2014-08-13 11:16:58 | 000,243,792 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSrvPlugin.dll MOD - [2014-08-13 11:16:56 | 000,509,520 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSettingPlugin.dll MOD - [2014-08-13 11:16:55 | 000,525,392 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoUIExPlugin.dll MOD - [2014-08-13 11:16:54 | 000,324,688 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoSrvPlugin.dll MOD - [2014-08-13 11:16:52 | 000,315,472 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoRecordUIPlugin.dll MOD - [2014-08-13 11:16:51 | 000,165,456 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectSrvPlugin.dll MOD - [2014-08-13 11:16:50 | 000,338,512 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectPlugin.dll MOD - [2014-08-13 11:16:49 | 000,206,928 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISPlugin.dll MOD - [2014-08-13 11:16:48 | 001,153,616 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISAPI.dll MOD - [2014-08-13 11:16:45 | 000,826,448 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\MiniFramePlugin.dll MOD - [2014-08-13 11:16:44 | 000,283,216 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\MenuMgrPlugin.dll MOD - [2014-08-13 11:16:42 | 000,719,952 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\LiveUpdateInterface.dll MOD - [2014-08-13 11:16:40 | 000,123,984 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\LayoutPlugin.dll MOD - [2014-08-13 11:16:39 | 000,146,512 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\HelpUIPlugin.dll MOD - [2014-08-13 11:16:38 | 000,426,064 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DialupUIPlugin.dll MOD - [2014-08-13 11:16:37 | 000,240,720 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DialUpPlugin.dll MOD - [2014-08-13 11:16:36 | 000,419,408 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DiagnosisPlugin.dll MOD - [2014-08-13 11:16:35 | 000,329,296 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceSrvPlugin.dll MOD - [2014-08-13 11:16:33 | 000,566,864 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceMgrUIPlugin.dll MOD - [2014-08-13 11:16:32 | 000,345,680 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceAppPlugin.dll MOD - [2014-08-13 11:16:31 | 000,161,360 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DataServicePlugin.dll MOD - [2014-08-13 11:16:28 | 000,457,808 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\core.dll MOD - [2014-08-13 11:16:27 | 000,107,088 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\CompressRatePlugin.dll MOD - [2014-08-13 11:16:26 | 000,250,448 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Common.dll MOD - [2014-08-13 11:16:24 | 000,174,672 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\ATR2SMgr.dll MOD - [2014-08-13 11:16:23 | 000,267,344 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AtCodec.dll MOD - [2014-08-13 11:16:21 | 000,815,184 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookUIPlugin.dll MOD - [2014-08-13 11:16:20 | 000,291,408 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookSrvPlugin.dll MOD - [2014-08-13 11:16:19 | 001,095,248 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookPlugin.dll MOD - [2014-08-13 11:16:16 | 000,090,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe MOD - [2014-08-10 10:14:26 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtdf6812ee#\b7c90cd61aa57b4858a896d7e33c30d9\System.Runtime.Serialization.Primitives.ni.dll MOD - [2014-07-21 13:10:12 | 001,282,048 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\bf5509cf3a0d2e3afbd0c33e9153ecbd\Windows.Devices.ni.dll MOD - [2014-05-16 11:14:52 | 000,033,520 | ---- | M] () -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll MOD - [2014-02-15 10:49:59 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qico4.dll MOD - [2014-02-15 10:49:56 | 000,370,176 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qtiff4.dll MOD - [2014-02-15 10:49:36 | 000,350,720 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qmng4.dll MOD - [2014-02-15 10:49:21 | 000,082,944 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qgif4.dll MOD - [2014-02-15 10:49:18 | 000,192,000 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qjpeg4.dll MOD - [2014-02-15 09:44:02 | 009,559,040 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtGui4.dll MOD - [2014-02-15 09:33:20 | 001,148,416 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtNetwork4.dll MOD - [2014-02-15 09:32:03 | 000,398,336 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtXml4.dll MOD - [2014-02-15 09:31:50 | 002,416,640 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtCore4.dll MOD - [2014-01-27 13:52:41 | 017,395,376 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\c90ef9a73ea0044641d31b19023aad61\mscorlib.ni.dll MOD - [2013-11-01 17:16:06 | 000,013,064 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe MOD - [2013-10-28 16:48:36 | 000,915,968 | ---- | M] () -- C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe MOD - [2013-08-16 08:53:45 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\libgcc_s_dw2-1.dll MOD - [2013-08-16 08:53:45 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\mingwm10.dll MOD - [2013-03-06 21:52:00 | 000,015,424 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2013-03-06 21:49:06 | 000,626,240 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2015-05-12 07:27:04 | 000,102,376 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Windows\SysNative\ibmpmsvc.exe -- (IBMPMSVC) SRV:[b]64bit:[/b] - [2015-03-09 09:45:52 | 000,272,440 | ---- | M] (Lenovo) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe -- (LSCWinService) SRV:[b]64bit:[/b] - [2015-03-06 21:53:44 | 000,584,632 | ---- | M] (LENOVO INCORPORATED.) [Auto | Running] -- C:\Program Files\Lenovo\iMController\SystemAgentService.exe -- (Lenovo System Agent Service) SRV:[b]64bit:[/b] - [2015-03-05 01:09:48 | 001,429,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2015-02-21 01:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2015-02-04 01:58:28 | 000,366,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:[b]64bit:[/b] - [2015-02-04 01:58:28 | 000,023,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2014-12-06 03:35:00 | 000,229,888 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2014-11-12 01:06:52 | 002,449,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc) SRV:[b]64bit:[/b] - [2014-10-29 03:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv) SRV:[b]64bit:[/b] - [2014-09-10 09:19:56 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014-07-24 22:36:00 | 000,049,040 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Windows\SysNative\valWBFPolicyService.exe -- (valWBFPolicyService) SRV:[b]64bit:[/b] - [2014-07-24 22:36:00 | 000,032,256 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Windows\SysNative\valWbioSyncSvc.exe -- (valWbioSyncSvc) SRV:[b]64bit:[/b] - [2014-06-10 11:15:44 | 000,124,400 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD) SRV:[b]64bit:[/b] - [2014-04-08 17:20:46 | 001,410,888 | ---- | M] (LenovoEMC Products USA, LLC) [Auto | Stopped] -- C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe -- (LenovoEMCDiscovery) SRV:[b]64bit:[/b] - [2014-04-07 13:54:02 | 000,110,128 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE) SRV:[b]64bit:[/b] - [2014-04-03 04:51:48 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2014-03-14 08:26:25 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2014-03-08 07:41:25 | 001,306,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2014-03-06 09:02:13 | 000,834,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2014-02-22 17:53:10 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2014-02-22 11:26:58 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2014-02-22 11:25:39 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2014-02-22 11:25:14 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2014-02-22 11:23:58 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2013-12-10 09:35:18 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2013-11-23 06:50:00 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2013-11-06 14:18:22 | 002,083,592 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe -- (Lenovo Settings Service) SRV:[b]64bit:[/b] - [2013-11-05 11:14:44 | 000,573,432 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe -- (AVControlCenter) SRV:[b]64bit:[/b] - [2013-11-05 11:14:40 | 000,695,800 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe -- (LENOVO.TVTVCAM) SRV:[b]64bit:[/b] - [2013-11-05 11:14:34 | 000,527,864 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe -- (LENOVO.TPKNRSVC) SRV:[b]64bit:[/b] - [2013-11-05 11:14:12 | 000,511,992 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE) SRV:[b]64bit:[/b] - [2013-09-24 17:03:40 | 000,054,976 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe -- (intelsba) SRV:[b]64bit:[/b] - [2013-08-27 14:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-27 14:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2013-08-22 13:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2013-08-22 13:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2013-08-22 13:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2013-08-22 13:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2013-08-22 13:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2013-08-22 12:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2013-08-22 12:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2013-08-22 11:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2013-08-22 11:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2013-08-22 11:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2013-08-22 11:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2013-08-22 11:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2013-08-22 11:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2013-08-06 10:43:00 | 000,047,400 | ---- | M] (Lenovo.) [On_Demand | Stopped] -- C:\Windows\SysNative\TPHDEXLG64.exe -- (TPHDEXLGSVC) SRV:[b]64bit:[/b] - [2013-07-25 08:39:26 | 000,206,552 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg) SRV:[b]64bit:[/b] - [2012-08-10 20:49:38 | 000,136,288 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC) SRV - [2015-05-19 20:11:08 | 000,148,080 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2015-05-01 20:10:42 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2015-05-01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc) SRV - [2015-05-01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc) SRV - [2015-04-14 19:08:31 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015-03-27 13:51:12 | 000,049,136 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService) SRV - [2015-02-19 01:51:18 | 000,835,776 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2015-02-18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2014-11-21 07:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2014-11-21 07:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2014-05-16 11:14:52 | 000,140,016 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe -- (FastbootService) SRV - [2014-04-26 08:15:59 | 000,682,064 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe -- (Internet Manager. RunOuc) SRV - [2014-03-15 02:23:56 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2014-03-14 08:10:16 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2014-01-15 05:42:44 | 000,351,824 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2013-11-01 17:16:04 | 000,467,720 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe -- (LocationTaskManager) SRV - [2013-10-11 07:44:00 | 001,669,928 | ---- | M] (Lenovo) [On_Demand | Running] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service) SRV - [2013-10-08 17:02:34 | 000,066,560 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe -- (BTDevManager) SRV - [2013-10-08 11:28:56 | 000,058,360 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe -- (QuickControlMasterSvc) SRV - [2013-10-08 11:28:46 | 000,140,280 | ---- | M] (Lenovo Group Limited) [On_Demand | Running] -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe -- (QuickControlService) SRV - [2013-09-16 05:19:26 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2013-09-16 05:19:22 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2013-08-22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2013-08-22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2011-09-01 09:23:44 | 000,447,104 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2015-05-12 07:27:04 | 000,063,464 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibmpmdrv.sys -- (IBMPMDRV) DRV:[b]64bit:[/b] - [2015-04-16 08:17:07 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2015-03-20 03:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2015-03-17 19:26:06 | 000,467,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2015-03-13 06:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2015-03-09 04:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2015-03-04 12:25:11 | 000,377,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2015-02-04 01:58:33 | 000,264,000 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2015-02-04 01:58:33 | 000,114,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2015-02-04 01:58:04 | 000,044,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2014-11-21 07:14:26 | 000,064,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl) DRV:[b]64bit:[/b] - [2014-11-21 07:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2014-11-10 20:06:59 | 000,136,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2014-11-04 21:33:40 | 000,058,176 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2014-10-29 05:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2014-10-17 06:56:23 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2014-10-17 05:35:04 | 000,086,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2014-10-07 08:54:45 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2014-08-15 02:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2014-06-11 05:52:54 | 000,124,800 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_cdcacm.sys -- (hwusb_cdcacm) DRV:[b]64bit:[/b] - [2014-05-16 11:14:52 | 000,065,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Fastboot.sys -- (Fastboot) DRV:[b]64bit:[/b] - [2014-05-04 12:56:10 | 000,379,392 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_wwanecm.sys -- (hwusb_wwanecm) DRV:[b]64bit:[/b] - [2014-05-01 15:31:39 | 000,055,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2014-04-01 08:23:41 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2014-03-13 14:35:24 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2014-02-24 14:39:30 | 000,552,176 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2014-02-24 14:39:28 | 000,031,472 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI) DRV:[b]64bit:[/b] - [2014-02-22 17:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2014-02-22 17:44:13 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2014-02-22 14:14:02 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2013-12-19 04:56:10 | 004,216,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2013-12-15 01:34:54 | 000,039,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2013-12-15 01:34:54 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2013-12-04 20:41:54 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum) DRV:[b]64bit:[/b] - [2013-11-30 13:40:22 | 000,091,648 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2013-11-19 07:10:22 | 000,449,496 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2013-10-26 03:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2013-10-18 07:47:46 | 001,387,200 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2013-10-11 07:44:00 | 000,020,736 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TPPWR64V.SYS -- (TPPWRIF) DRV:[b]64bit:[/b] - [2013-10-05 17:25:54 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2013-09-16 05:19:22 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2013-09-14 16:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2013-09-11 21:17:00 | 002,945,240 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane.sys -- (RTWlanE) DRV:[b]64bit:[/b] - [2013-09-05 08:39:44 | 000,548,056 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter) DRV:[b]64bit:[/b] - [2013-08-22 21:12:07 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2013-08-22 14:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2013-08-22 14:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013-08-22 14:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2013-08-22 14:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2013-08-22 14:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2013-08-22 14:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2013-08-22 14:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2013-08-22 14:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2013-08-22 14:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2013-08-22 13:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2013-08-22 13:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2013-08-22 13:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2013-08-22 13:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2013-08-22 13:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2013-08-22 13:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013-08-22 13:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2013-08-22 13:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2013-08-22 13:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2013-08-22 13:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013-08-22 13:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2013-08-22 13:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013-08-22 13:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2013-08-22 13:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2013-08-22 13:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2013-08-22 13:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2013-08-22 10:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013-08-19 06:36:04 | 000,077,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\IntelPcc.sys -- (IntelHSWPcc) DRV:[b]64bit:[/b] - [2013-08-13 01:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2013-08-10 02:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:[b]64bit:[/b] - [2013-08-06 10:43:00 | 000,152,832 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsX64.sys -- (Shockprf) DRV:[b]64bit:[/b] - [2013-08-06 10:43:00 | 000,028,928 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsHM64.sys -- (TPDIGIMN) DRV:[b]64bit:[/b] - [2013-08-02 03:40:04 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2013-07-30 20:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2013-07-26 09:07:30 | 000,827,096 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2013-07-25 21:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2013-07-08 20:37:41 | 003,344,352 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwew00.sys -- (NETwNe64) DRV:[b]64bit:[/b] - [2013-06-24 04:36:52 | 000,418,008 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER) DRV:[b]64bit:[/b] - [2013-06-19 17:22:22 | 008,244,312 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:[b]64bit:[/b] - [2013-06-18 16:45:26 | 000,460,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\e1i63x64.sys -- (e1iexpress) DRV:[b]64bit:[/b] - [2013-05-30 18:16:46 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGSUsbFilt.sys -- (LGSUsbFilt) DRV:[b]64bit:[/b] - [2013-05-30 18:16:40 | 000,064,280 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt) DRV:[b]64bit:[/b] - [2013-01-25 05:46:40 | 000,109,568 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2012-12-22 06:16:12 | 000,014,976 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV:[b]64bit:[/b] - [2009-11-24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid) DRV:[b]64bit:[/b] - [2009-11-24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV - [2015-03-27 11:08:48 | 000,034,976 | ---- | M] (Lenovo Group Limited) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys -- (SWIX64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{C5AA2E82-BEC4-47E2-B2E4-EA0AF1D0F12D}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{C5AA2E82-BEC4-47E2-B2E4-EA0AF1D0F12D}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data] IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad [binary data] IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "PL" FF - prefs.js..browser.search.hiddenOneOffs: "DuckDuckGo,Merlin,Wolne Lektury,WP" FF - prefs.js..browser.search.isUS: false FF - prefs.js..browser.search.region: "PL" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F003DA68-8256-4b37-A6C4-350FA04494DF}: C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-07-18 00:07:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Extensions [2015-04-04 20:36:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions [2015-05-27 22:20:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2015-05-19 20:11:10 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} O1 HOSTS File: ([2013-08-22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll File not found O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL File not found O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [BtServer] C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe (Realtek Semiconductor Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe () O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\WINDOWS\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [LenovoOptMouseUpdate] C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Lenovo Group Limited) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\WINDOWS\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtsCM] C:\WINDOWS\RtsCM64.exe (Realtek Semiconductor Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [TpShocks] C:\WINDOWS\SysNative\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [Fastboot] C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe (Lenovo) O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation) O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited) O4 - HKU\S-1-5-21-395553583-66053808-1738365731-1001..\RunOnce: [Application Restart #1] C:\Users\Adam\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Adam\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll File not found O9:[b]64bit:[/b] - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll File not found O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll File not found O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll File not found O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll File not found O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll File not found O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll File not found O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{15B9BF3D-CF5E-44CF-B0CA-B9ECF037F38A}: NameServer = 213.158.199.1 213.158.199.5 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{20265AEC-D3FD-4F1D-8540-5AF401F54C87}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DFA18D8C-0771-4B6F-B877-B76B56DA823D}: DhcpNameServer = 192.168.1.254 O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL File not found O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2014-01-15 11:12:38 | 000,150,608 | R--- | M] () - E:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2013-08-17 03:53:45 | 000,000,045 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{22ab83ac-fafa-11e4-8297-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{22ab83ac-fafa-11e4-8297-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 11:12:38 | 000,150,608 | R--- | M] () O33 - MountPoints2\{60794a3e-ad8f-11e4-8286-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{60794a3e-ad8f-11e4-8286-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 11:12:38 | 000,150,608 | R--- | M] () O33 - MountPoints2\{60794a9e-ad8f-11e4-8286-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{60794a9e-ad8f-11e4-8286-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 11:12:38 | 000,150,608 | R--- | M] () O33 - MountPoints2\{a693a58b-cda7-11e4-8286-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{a693a58b-cda7-11e4-8286-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 11:12:38 | 000,150,608 | R--- | M] () O33 - MountPoints2\{a693a6a5-cda7-11e4-8286-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{a693a6a5-cda7-11e4-8286-28d24482f56a}\Shell\AutoRun\command - "" = "F:\AutoRun.exe" O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015-05-28 14:12:55 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2015-05-28 14:12:55 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2015-05-28 12:28:16 | 002,819,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers.dll [2015-05-28 12:28:15 | 002,256,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2015-05-28 12:28:15 | 002,162,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll [2015-05-28 12:28:15 | 001,943,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2015-05-28 12:28:14 | 004,417,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll [2015-05-28 12:28:14 | 002,985,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll [2015-05-28 12:28:14 | 001,812,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRH.dll [2015-05-28 12:28:13 | 001,491,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbghelp.dll [2015-05-28 12:28:13 | 001,207,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbghelp.dll [2015-05-28 12:28:11 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\certcli.dll [2015-05-28 12:28:11 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dpapisrv.dll [2015-05-28 12:28:10 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\certcli.dll [2015-05-28 12:28:06 | 000,564,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apphelp.dll [2015-05-28 12:28:06 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sdbinst.exe [2015-05-28 12:28:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sdbinst.exe [2015-05-28 12:28:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shimeng.dll [2015-05-28 12:28:05 | 002,067,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpdshext.dll [2015-05-28 12:28:05 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WPDShServiceObj.dll [2015-05-28 12:28:05 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WPDShextAutoplay.exe [2015-05-28 12:28:04 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WPDShextAutoplay.exe [2015-05-28 12:14:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Migration [2015-05-28 12:13:59 | 000,467,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS [2015-05-28 12:13:54 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthHFSrv.dll [2015-05-28 12:13:54 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys [2015-05-28 12:13:53 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ahcache.sys [2015-05-28 12:13:52 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll [2015-05-28 12:13:52 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll [2015-05-28 12:13:31 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhotoMetadataHandler.dll [2015-05-28 12:13:30 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PhotoMetadataHandler.dll [2015-05-28 12:13:03 | 000,239,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys [2015-05-28 12:13:01 | 000,154,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys [2015-05-27 17:17:39 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\suplementy [2015-05-27 17:03:17 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\skany 27.05 [2015-05-23 10:59:35 | 000,410,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe [2015-05-23 00:53:59 | 001,091,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll [2015-05-23 00:53:59 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll [2015-05-23 00:53:58 | 003,633,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2015-05-23 00:53:58 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiobj.dll [2015-05-23 00:53:58 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\compstui.dll [2015-05-23 00:53:56 | 002,551,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2015-05-23 00:53:54 | 002,749,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2015-05-23 00:53:53 | 001,920,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2015-05-23 00:53:52 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2015-05-23 00:53:52 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2015-05-23 00:53:52 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2015-05-23 00:53:52 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll [2015-05-23 00:53:51 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2015-05-23 00:53:51 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll [2015-05-23 00:53:51 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe [2015-05-23 00:53:51 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2015-05-23 00:53:51 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll [2015-05-23 00:53:51 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll [2015-05-23 00:53:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll [2015-05-23 00:53:50 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll [2015-05-23 00:53:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msshooks.dll [2015-05-23 00:53:50 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msshooks.dll [2015-05-23 00:43:22 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastapi.dll [2015-05-23 00:43:22 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastapi.dll [2015-05-23 00:43:22 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdmat.dll [2015-05-23 00:43:22 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdmat.dll [2015-05-23 00:43:22 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uniplat.dll [2015-05-23 00:43:22 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\uniplat.dll [2015-05-23 00:43:22 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rootmdm.sys [2015-05-23 00:43:21 | 003,097,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll [2015-05-23 00:43:21 | 002,483,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2015-05-23 00:43:21 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rgb9rast.dll [2015-05-23 00:43:21 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rgb9rast.dll [2015-05-23 00:42:59 | 001,429,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll [2015-05-23 00:42:59 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2015-05-23 00:42:59 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UtcResources.dll [2015-05-23 00:42:58 | 001,018,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2015-05-23 00:42:58 | 000,325,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS [2015-05-23 00:42:58 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authz.dll [2015-05-23 00:42:58 | 000,189,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UCX01000.SYS [2015-05-23 00:38:49 | 000,000,000 | ---D | C] -- C:\Program Files\Validity Sensors [2015-05-23 00:17:10 | 000,729,088 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\MetroIntelGenericUIFramework.dll [2015-05-23 00:17:05 | 000,781,984 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiWinNextAgent64.dll [2015-05-23 00:17:04 | 002,476,656 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiVAD64.exe [2015-05-23 00:17:04 | 000,416,240 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiUMS64.exe [2015-05-23 00:17:04 | 000,210,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiUtils64.dll [2015-05-23 00:17:03 | 001,450,656 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiSecureSourceFilter64.dll [2015-05-23 00:17:03 | 000,644,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiAudioFilter64.dll [2015-05-23 00:17:03 | 000,601,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiMux64.dll [2015-05-23 00:17:03 | 000,344,736 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiSilenceFilter64.dll [2015-05-23 00:17:03 | 000,177,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiDDEAgent64.dll [2015-05-23 00:17:03 | 000,128,672 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiMCUMD64.dll [2015-05-23 00:17:03 | 000,094,368 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiLogServer64.dll [2015-05-23 00:17:02 | 004,011,168 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelWiDiAAC64.dll [2015-05-23 00:17:02 | 000,320,512 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\IntelOpenCL64.dll [2015-05-23 00:17:02 | 000,279,024 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-05-23 00:17:02 | 000,265,216 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\IntelOpenCL32.dll [2015-05-23 00:17:02 | 000,182,784 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxCoIn_v3379.dll [2015-05-23 00:17:00 | 000,906,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxstarter.exe [2015-05-23 00:17:00 | 000,391,152 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxtray.exe [2015-05-23 00:17:00 | 000,346,624 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxTMM.dll [2015-05-23 00:16:59 | 000,845,296 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxsrvc.exe [2015-05-23 00:16:59 | 000,526,848 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrrus.lrc [2015-05-23 00:16:59 | 000,526,336 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrrom.lrc [2015-05-23 00:16:59 | 000,525,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrsky.lrc [2015-05-23 00:16:59 | 000,525,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrptg.lrc [2015-05-23 00:16:59 | 000,525,312 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrsve.lrc [2015-05-23 00:16:59 | 000,525,312 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrslv.lrc [2015-05-23 00:16:59 | 000,524,800 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrtrk.lrc [2015-05-23 00:16:59 | 000,524,800 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrptb.lrc [2015-05-23 00:16:59 | 000,523,776 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrtha.lrc [2015-05-23 00:16:58 | 000,527,360 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrplk.lrc [2015-05-23 00:16:58 | 000,527,360 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrfra.lrc [2015-05-23 00:16:58 | 000,526,336 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrnld.lrc [2015-05-23 00:16:58 | 000,526,336 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrita.lrc [2015-05-23 00:16:58 | 000,525,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrhun.lrc [2015-05-23 00:16:58 | 000,525,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrhrv.lrc [2015-05-23 00:16:58 | 000,525,312 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrfin.lrc [2015-05-23 00:16:58 | 000,524,288 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrnor.lrc [2015-05-23 00:16:58 | 000,522,240 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrheb.lrc [2015-05-23 00:16:58 | 000,517,632 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrjpn.lrc [2015-05-23 00:16:58 | 000,516,096 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrkor.lrc [2015-05-23 00:16:57 | 009,081,856 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxress.dll [2015-05-23 00:16:57 | 000,527,872 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrell.lrc [2015-05-23 00:16:57 | 000,527,360 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxresn.lrc [2015-05-23 00:16:57 | 000,371,200 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrenu.lrc [2015-05-23 00:16:56 | 000,770,544 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxpers.exe [2015-05-23 00:16:56 | 000,548,864 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxpph.dll [2015-05-23 00:16:56 | 000,526,848 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrdeu.lrc [2015-05-23 00:16:56 | 000,525,824 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrcsy.lrc [2015-05-23 00:16:56 | 000,524,288 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrdan.lrc [2015-05-23 00:16:56 | 000,521,728 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrara.lrc [2015-05-23 00:16:56 | 000,514,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrcht.lrc [2015-05-23 00:16:56 | 000,513,536 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxrchs.lrc [2015-05-23 00:16:56 | 000,397,808 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxext.exe [2015-05-23 00:16:56 | 000,025,600 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igfxexps32.dll [2015-05-23 00:16:55 | 000,493,056 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igfxdv32.dll [2015-05-23 00:16:55 | 000,279,040 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxcpl.cpl [2015-05-23 00:16:55 | 000,243,712 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxdo.dll [2015-05-23 00:16:55 | 000,163,840 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxcmrt64.dll [2015-05-23 00:16:55 | 000,137,728 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igfxcmrt32.dll [2015-05-23 00:16:54 | 002,065,920 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfxcmjit64.dll [2015-05-23 00:16:54 | 001,815,040 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igfxcmjit32.dll [2015-05-23 00:16:54 | 000,155,136 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igfx11cmrt64.dll [2015-05-23 00:16:54 | 000,133,632 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igfx11cmrt32.dll [2015-05-23 00:16:50 | 010,591,744 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igdumdim64.dll [2015-05-23 00:16:49 | 003,207,680 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igdrcl64.dll [2015-05-23 00:16:49 | 002,882,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igdrcl32.dll [2015-05-23 00:16:48 | 004,216,320 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\drivers\igdkmd64.sys [2015-05-23 00:16:46 | 026,002,432 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igdfcl64.dll [2015-05-23 00:16:43 | 020,974,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igdfcl32.dll [2015-05-23 00:16:43 | 000,329,216 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\igdbcl64.dll [2015-05-23 00:16:43 | 000,290,816 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igdbcl32.dll [2015-05-23 00:16:41 | 011,673,600 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\igd10iumd32.dll [2015-05-23 00:16:36 | 007,939,584 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\ig75icd64.dll [2015-05-23 00:16:32 | 006,276,608 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\ig75icd32.dll [2015-05-23 00:16:31 | 000,771,568 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\hkcmd.exe [2015-05-23 00:16:30 | 000,755,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\GfxUIHotKeyMenu.exe [2015-05-23 00:16:29 | 007,596,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\GfxUIEx.exe [2015-05-23 00:16:29 | 000,194,560 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\gfxSrvc.dll [2015-05-23 00:16:27 | 000,530,928 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\DPTopologyApp.exe [2015-05-23 00:16:27 | 000,153,072 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\difx64.exe [2015-05-23 00:16:26 | 000,396,784 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysNative\CustomModeApp.exe [2015-05-19 20:10:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2015-05-12 07:27:04 | 000,102,376 | ---- | C] (Lenovo.) -- C:\WINDOWS\SysNative\ibmpmsvc.exe [2015-05-12 07:27:04 | 000,074,728 | ---- | C] (Lenovo.) -- C:\WINDOWS\SysNative\ibmpmctl.exe [2015-05-12 07:27:04 | 000,063,464 | ---- | C] (Lenovo.) -- C:\WINDOWS\SysNative\drivers\ibmpmdrv.sys [2015-05-12 07:27:04 | 000,042,472 | ---- | C] (Lenovo.) -- C:\WINDOWS\SysNative\tpinspm.dll [2015-04-30 13:18:44 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\cfg csgo [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015-05-29 13:07:01 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2015-05-29 13:04:18 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2015-05-29 13:02:18 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2015-05-29 13:02:10 | 610,743,247 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2015-05-29 13:02:09 | 3344,240,640 | -HS- | M] () -- C:\hiberfil.sys [2015-05-29 12:46:09 | 000,020,960 | ---- | M] () -- C:\Users\Adam\Desktop\otlfoto.png [2015-05-29 12:15:35 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys [2015-05-29 12:12:51 | 686,919,680 | -HS- | M] () -- C:\WINDOWS\lenovo_fastboot.img [2015-05-29 11:57:51 | 000,042,814 | ---- | M] () -- C:\Users\Adam\Desktop\skrypt.jpg [2015-05-29 10:55:43 | 000,065,154 | ---- | M] () -- C:\Users\Adam\Desktop\76808_442743159178084_1014628867_n.jpg [2015-05-28 14:21:02 | 000,513,344 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2015-05-27 17:54:30 | 021,357,945 | ---- | M] () -- C:\Users\Adam\Desktop\pozostale.zip [2015-05-27 17:53:13 | 012,897,072 | ---- | M] () -- C:\Users\Adam\Desktop\witaminy.zip [2015-05-27 17:50:42 | 020,415,302 | ---- | M] () -- C:\Users\Adam\Desktop\carbo i glutamina.zip [2015-05-27 17:47:17 | 010,923,017 | ---- | M] () -- C:\Users\Adam\Desktop\bcaa i kreatyna.zip [2015-05-27 17:07:15 | 001,825,074 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2015-05-27 17:07:15 | 000,807,160 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat [2015-05-27 17:07:15 | 000,722,476 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2015-05-27 17:07:15 | 000,163,478 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat [2015-05-27 17:07:15 | 000,135,592 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2015-05-27 17:06:18 | 003,198,151 | ---- | M] () -- C:\Users\Adam\Desktop\wywiad.zip [2015-05-23 00:26:45 | 000,015,854 | ---- | M] () -- C:\WINDOWS\SysNative\results.xml [2015-05-14 19:52:43 | 000,095,014 | ---- | M] () -- C:\Users\Adam\Desktop\aaaaaaaaaa.jpg [2015-05-14 19:51:12 | 000,129,818 | ---- | M] () -- C:\Users\Adam\Desktop\hehe.jpg [2015-05-12 07:27:04 | 000,102,376 | ---- | M] (Lenovo.) -- C:\WINDOWS\SysNative\ibmpmsvc.exe [2015-05-12 07:27:04 | 000,074,728 | ---- | M] (Lenovo.) -- C:\WINDOWS\SysNative\ibmpmctl.exe [2015-05-12 07:27:04 | 000,063,464 | ---- | M] (Lenovo.) -- C:\WINDOWS\SysNative\drivers\ibmpmdrv.sys [2015-05-12 07:27:04 | 000,042,472 | ---- | M] (Lenovo.) -- C:\WINDOWS\SysNative\tpinspm.dll [2015-05-02 13:24:22 | 002,775,091 | ---- | M] () -- C:\Users\Adam\Desktop\20150502_131419_Richtone(HDR).jpg [2015-04-30 22:35:31 | 000,124,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2015-04-30 22:35:19 | 000,102,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015-05-29 12:46:09 | 000,020,960 | ---- | C] () -- C:\Users\Adam\Desktop\otlfoto.png [2015-05-29 11:57:50 | 000,042,814 | ---- | C] () -- C:\Users\Adam\Desktop\skrypt.jpg [2015-05-29 10:55:43 | 000,065,154 | ---- | C] () -- C:\Users\Adam\Desktop\76808_442743159178084_1014628867_n.jpg [2015-05-27 17:53:51 | 021,357,945 | ---- | C] () -- C:\Users\Adam\Desktop\pozostale.zip [2015-05-27 17:52:44 | 012,897,072 | ---- | C] () -- C:\Users\Adam\Desktop\witaminy.zip [2015-05-27 17:50:10 | 020,415,302 | ---- | C] () -- C:\Users\Adam\Desktop\carbo i glutamina.zip [2015-05-27 17:46:18 | 010,923,017 | ---- | C] () -- C:\Users\Adam\Desktop\bcaa i kreatyna.zip [2015-05-27 17:05:49 | 003,198,151 | ---- | C] () -- C:\Users\Adam\Desktop\wywiad.zip [2015-05-23 00:43:21 | 000,410,336 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml [2015-05-23 00:17:02 | 000,002,940 | ---- | C] () -- C:\WINDOWS\SysNative\iglhxs64.vp [2015-05-23 00:16:55 | 000,012,288 | ---- | C] ( ) -- C:\WINDOWS\SysNative\IGFXDEVLib.dll [2015-05-23 00:16:49 | 000,347,648 | ---- | C] () -- C:\WINDOWS\SysNative\igdmd64.dll [2015-05-23 00:16:49 | 000,280,064 | ---- | C] () -- C:\WINDOWS\SysWow64\igdmd32.dll [2015-05-23 00:16:43 | 000,222,208 | ---- | C] () -- C:\WINDOWS\SysNative\igdde64.dll [2015-05-23 00:16:43 | 000,182,272 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll [2015-05-23 00:16:43 | 000,160,256 | ---- | C] () -- C:\WINDOWS\SysNative\igdail64.dll [2015-05-23 00:16:43 | 000,142,848 | ---- | C] () -- C:\WINDOWS\SysWow64\igdail32.dll [2015-05-23 00:16:29 | 000,267,407 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.th-TH.resources [2015-05-23 00:16:29 | 000,235,401 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.ru-RU.resources [2015-05-23 00:16:29 | 000,198,725 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.ja-JP.resources [2015-05-23 00:16:29 | 000,180,936 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.ko-KR.resources [2015-05-23 00:16:29 | 000,180,850 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.it-IT.resources [2015-05-23 00:16:29 | 000,176,838 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.ro-RO.resources [2015-05-23 00:16:29 | 000,175,862 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.hu-HU.resources [2015-05-23 00:16:29 | 000,175,571 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.tr-TR.resources [2015-05-23 00:16:29 | 000,175,067 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.nl-NL.resources [2015-05-23 00:16:29 | 000,174,802 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.pl-PL.resources [2015-05-23 00:16:29 | 000,174,269 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.pt-BR.resources [2015-05-23 00:16:29 | 000,173,276 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.sk-SK.resources [2015-05-23 00:16:29 | 000,173,059 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.sv-SE.resources [2015-05-23 00:16:29 | 000,172,833 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.pt-PT.resources [2015-05-23 00:16:29 | 000,168,215 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.sl-SI.resources [2015-05-23 00:16:29 | 000,166,833 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.nb-NO.resources [2015-05-23 00:16:29 | 000,154,805 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.zh-TW.resources [2015-05-23 00:16:29 | 000,152,993 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.zh-CN.resources [2015-05-23 00:16:28 | 002,384,896 | ---- | C] () -- C:\WINDOWS\SysNative\GfxRes.dll [2015-05-23 00:16:28 | 000,253,466 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.el-GR.resources [2015-05-23 00:16:28 | 000,201,128 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.ar-SA.resources [2015-05-23 00:16:28 | 000,192,758 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.he-IL.resources [2015-05-23 00:16:28 | 000,178,473 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.es-ES.resources [2015-05-23 00:16:28 | 000,178,290 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.fr-FR.resources [2015-05-23 00:16:28 | 000,178,123 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.de-DE.resources [2015-05-23 00:16:28 | 000,173,792 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.fi-FI.resources [2015-05-23 00:16:28 | 000,172,554 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.cs-CZ.resources [2015-05-23 00:16:28 | 000,171,691 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.hr-HR.resources [2015-05-23 00:16:28 | 000,166,220 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.da-DK.resources [2015-05-23 00:16:28 | 000,161,534 | ---- | C] () -- C:\WINDOWS\SysNative\Gfxres.en-US.resources [2015-05-14 19:52:42 | 000,095,014 | ---- | C] () -- C:\Users\Adam\Desktop\aaaaaaaaaa.jpg [2015-05-14 19:51:12 | 000,129,818 | ---- | C] () -- C:\Users\Adam\Desktop\hehe.jpg [2015-05-02 13:24:51 | 002,775,091 | ---- | C] () -- C:\Users\Adam\Desktop\20150502_131419_Richtone(HDR).jpg [2014-11-10 11:22:07 | 000,000,000 | ---- | C] () -- C:\Users\Adam\defogger_reenable [2014-07-18 23:51:28 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2014-07-18 23:48:26 | 000,007,605 | ---- | C] () -- C:\Users\Adam\AppData\Local\Resmon.ResmonCfg [2014-07-18 12:14:22 | 000,026,647 | ---- | C] () -- C:\Users\Adam\battery-report.html [2014-07-17 22:52:23 | 000,000,193 | ---- | C] () -- C:\Users\Adam\AppData\Local\RegisteredPackageInformation.xml [2014-05-16 20:23:06 | 000,103,936 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2014-05-16 10:48:15 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2014-05-16 10:45:16 | 000,044,104 | ---- | C] () -- C:\WINDOWS\runSW.exe [2014-05-16 10:45:15 | 000,451,072 | ---- | C] () -- C:\WINDOWS\SysWow64\ISSRemoveSP.exe [2013-08-27 14:00:08 | 000,001,536 | ---- | C] () -- C:\WINDOWS\SysWow64\IusEventLog.dll [2013-08-22 17:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2013-08-22 17:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2013-08-22 16:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-08-22 09:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2013-08-22 05:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2013-08-22 01:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2013-08-22 01:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2014-07-18 06:55:58 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2015-02-12 19:40:58 | 022,291,584 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2015-02-12 19:34:06 | 019,731,824 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013-08-22 11:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-22 04:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013-08-22 11:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2014-07-17 22:53:28 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Lenovo [2015-04-19 12:46:58 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\LSC [2015-02-09 19:18:04 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ModelViews [2014-10-20 13:17:25 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\My Bluetooth [2015-02-04 18:58:10 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Opera Software [2015-03-19 23:12:35 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WandoujiaUsbDriver [2015-02-11 19:00:27 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WebApp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 237 bytes -> C:\Users\Adam\SkyDrive:ms-properties < End of report >

Dodano 29.05.2015 12:23:24:

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2015-05-29 13:06:58 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Adam\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17351) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,89 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 56,57% Memory free 7,89 Gb Paging File | 6,20 Gb Available in Paging File | 78,53% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,25 Gb Total Space | 407,95 Gb Free Space | 90,41% Space Free | Partition Type: NTFS Drive E: | 48,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: ADAM-PC | User Name: Adam | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0DF35ABB-0F7A-48E9-8E1B-8941AD704978}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe | "{1B6920BA-F147-497F-BD6C-77D55A7967FA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{1F100A6B-B671-420C-A4D4-9E53B6FBFBB9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{569439EB-27D0-4D7E-B42A-D50A680550B1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{5C2FB025-D2B9-453B-A8C4-468A7A5F73F2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5C637DD1-EEC2-46C3-B1C9-C73BF85FC0E3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{60AF55AF-D531-4D7F-9FB5-08B86B62A256}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{6D4BF174-2905-4C18-AF2E-37AFCDAEC9C6}" = rport=139 | protocol=6 | dir=out | app=system | "{7B86BE3A-14D3-4645-8043-DC801B03A876}" = rport=10243 | protocol=6 | dir=out | app=system | "{8137A3EA-F3BB-4EA6-95C5-D93E82511F50}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{861016FA-5C19-4883-9D9C-5F758D865C44}" = lport=138 | protocol=17 | dir=in | app=system | "{8BCCFEFB-3961-49F9-B64C-CE8C6770A69A}" = lport=10243 | protocol=6 | dir=in | app=system | "{92866FD7-FF1E-4250-AD6A-EA077CC2B09E}" = lport=139 | protocol=6 | dir=in | app=system | "{A3AE0E76-03B7-4F4F-83ED-3D63C4F78C73}" = rport=445 | protocol=6 | dir=out | app=system | "{A807D25E-461F-4165-AFF7-6CF928107FCC}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{AF093A03-208A-4E39-A28D-359C6A99AF88}" = rport=138 | protocol=17 | dir=out | app=system | "{B0386D01-A94D-4145-9134-B4698318C3C8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{B5B1FB88-EC8B-4674-943D-F346A5D1CC1F}" = rport=137 | protocol=17 | dir=out | app=system | "{C0FD5A67-E606-4397-B84F-4FAB86AF2653}" = lport=2869 | protocol=6 | dir=in | app=system | "{C9F32284-1272-4BF1-B565-71883B5A3DD4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe | "{E2F72420-EECB-459B-8414-3E16002EDC04}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{E65CF670-23A8-45BA-BA25-DEB406C50A07}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe | "{F685D417-A848-4A61-87E3-3AF5DC394C4D}" = lport=137 | protocol=17 | dir=in | app=system | "{FE97D34D-5881-4324-AA80-FA2060C97113}" = lport=445 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{069E78CE-68D1-40EF-B6CE-5DBD26BC0560}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{0B4293FA-68F0-4925-BB87-E5AD8DDFB4F9}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{0C31D05F-D80E-40EB-B199-0C13C1573E7A}" = dir=out | name=lenovo support | "{0C5D75FD-70C0-41F4-902E-8EC268F7DF32}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{199DA0CB-EA61-40F2-9F6F-42489BAC2038}" = dir=out | name=@{microsoft.bingfinance_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} | "{19F66A02-CBAA-4C41-A202-E9527997C84D}" = dir=out | name=@{microsoft.bingsports_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} | "{24775205-6F70-4080-879D-484A645B3619}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{24CAC38B-73C0-4B9D-8090-7163C3FA4CDE}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{2510431D-E596-437A-ADA4-4E269B099E8B}" = dir=out | name=accuweather for windows 8 | "{2A91CA5C-5D5D-48C5-973F-A5ADAAE5A478}" = dir=in | name=lenovo settings | "{2B2DA361-F7E3-4269-AB02-3FB0B999D54C}" = dir=out | name=@{microsoft.bingweather_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} | "{2D0001DA-2DAD-4B8A-BD04-CA6477F8BDD6}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{2D625DDE-8148-4750-B0CB-6EC4E4E0EBD6}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd cinema\powerdvdcinema10.exe | "{2EF3A318-7595-4212-B8B4-AF35E1A7906B}" = dir=in | app=c:\program files (x86)\wandoulabs\wandoujia2.exe | "{2FACAD7D-A3C9-49AB-9280-D8F0776E2C7F}" = dir=out | name=rara music with lenovo | "{308D6FAA-7795-433D-8EDB-115C4CE3175D}" = dir=out | name=companion | "{321C7E05-BD33-416D-99CA-C126CF1B33DD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{32D670BD-42ED-436D-AAFD-F6BE70FAEB85}" = dir=out | name=@{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{33125A7D-D07B-4289-AEF8-8E4A3170C49E}" = dir=in | name=lenovo quickcast | "{34B61DD0-BA4B-4B01-A2B5-27C48308FD9C}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{3D9DDA88-6ADE-40F5-BEF0-F1E214ECD37E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{43662A0E-0489-49C2-B8D6-EF615600BD7C}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{461A2960-2678-43C5-9E61-CE16D9011BFD}" = protocol=6 | dir=out | app=system | "{464437D8-04E2-4331-B473-8A15284BA1EB}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{46552D3C-185E-4A53-A7DD-41915F3E45C5}" = protocol=6 | dir=in | app=c:\program | "{47C305B3-AE66-4E06-B5EC-7DB827A9FB1D}" = protocol=17 | dir=out | app=c:\program files (x86)\lenovo\system update\uncserver.exe | "{4BD3BB6C-2B7F-4398-BDFE-B082BB1E5E6D}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{513C3E35-6A7C-4DA6-93BE-00885BC32F1C}" = protocol=6 | dir=out | app=c:\program files (x86)\lenovo\system update\uncserver.exe | "{51D40FDA-79C4-459C-A1B2-F11FA9FA2AFD}" = dir=in | app=c:\users\adam\appdata\local\microsoft\skydrive\skydrive.exe | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{557EF149-4D85-4D58-B140-FFD2509BE0A9}" = dir=out | name=windows_ie_ac_001 | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{5870A81E-8E55-4DBF-B08D-64121DA393B7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{5ED82247-1FA2-4350-8C3E-E6AEE30B8C06}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{6345A0BE-37A2-4460-876D-BF9622137447}" = dir=out | name=lenovo quickcast | "{675446B6-196A-41D1-9279-38DD02E6E05E}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{6994BF53-1D9F-4914-8A82-A6966E03A732}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{72072AAD-6D5A-4653-8AC9-1E4EA77891EB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{74295046-E9F4-49BE-8015-5475FF3370DE}" = dir=out | name=powerdvd for lenovo think | "{75EE30EC-4422-4936-9A02-326C14435D76}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{7654E927-8B55-481A-A44C-F7EE2CEC474B}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{77859C75-4DBC-4264-9C72-206660FD9228}" = dir=out | name=lenovo settings | "{79D4A0BC-AB91-4860-A72A-F5C34DC92E9F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7B5A2EE4-B74B-442B-B593-EE307B22F9DD}" = dir=out | name=lenovo settings | "{7D16D98E-AA75-479D-84D3-FBC4BE8F65CA}" = dir=out | name=@{microsoft.zunevideo_2.6.440.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{7E1EC1CD-7D74-4CB3-B49B-0D32B73B9AFF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{7EE49443-55D5-4C92-A2EA-97D354C7DF1C}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{83C58653-9C9E-4083-8ACC-106DC8FBAC20}" = dir=out | app=c:\program files (x86)\lenovo\quickcontrol\quickcontrolservice.exe | "{866AB61D-FB33-42E9-9E12-6AB5670CF29F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{8B06F14A-CCFE-4F10-B54B-54B2F1DA206B}" = protocol=17 | dir=in | app=c:\program | "{90214200-2D3C-4DCC-85D2-F83DD841C8DA}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{92E106AD-31E2-4736-8000-A85B404FA6DE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{935D6253-3EE7-4DB3-99C1-B8A96B4E9AA8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{93E26B6D-67F8-4A4E-86F6-D6D929D36FA3}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{9617DF67-66C9-4407-91AD-08DA7F32D856}" = dir=out | name=norton studio | "{979B0A13-D45C-4AE3-9D69-E57760BA6234}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{9852149A-3786-4190-AABF-F863F0EA4037}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{9BB3823C-91DF-4466-B057-0135367AD36A}" = dir=in | name=rara music with lenovo | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A1AA78C9-0EBA-4F20-92A9-0B81269575AE}" = dir=in | name=accuweather for windows 8 | "{A5732943-37A7-47AB-BB20-3EEA0487498C}" = dir=in | name=powerdvd for lenovo think | "{A58AE8A4-C38A-440B-927F-B08CBB9F0D83}" = dir=out | name=@{microsoft.bingtravel_3.0.4.318_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{A62B74F4-D38F-406A-B55A-D7A5E7DD4400}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{AA021A98-49D4-46BA-9DC0-2B8E6264288E}" = dir=in | name=lenovo quickcast | "{AD6461AC-96FF-4650-BF4F-F70C8392CF01}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{AF2C729B-1C9F-4A03-853B-4AA1DB671C49}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{B395DFB8-1647-4B33-96B3-95BD612AD355}" = dir=out | name=skype | "{B6F31C27-288A-4554-A63C-05BF710E86FF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{BF18D33F-8163-4083-98DF-3511715E7EBC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{C7E10971-5514-4886-9C5B-C3B906A756B4}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd10.exe | "{CBD6AFE5-441F-4A2E-8660-381AD706C2AF}" = dir=out | name=lenovo quickcast | "{D16AF609-B113-41BC-9F73-36408E343548}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{D23ED7F6-EE96-4463-9A31-9782119A31DE}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D6EECD50-2552-4B2C-BCCD-CA2DA38F0A00}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{D8A39957-890D-4DEE-AC30-54BABEA34106}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{D9CE01D2-ADDB-49BD-8534-1E407C2C5D2C}" = dir=out | name=txtr ebooks lenovo edition | "{DA625622-4F1A-45AF-91B1-62D07DBB7CE1}" = dir=out | name=lenovo settings | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{E0ECF072-4D31-4471-A117-C4F1C2A1D52F}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{E1C08855-6398-4F64-8189-6EFE42E11CED}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{E25BCD7C-FFEF-4F34-A0FA-5B14E8A9B041}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{E2B1EB03-809D-48F7-906E-83A170DFFCD6}" = dir=in | app=c:\program files (x86)\lenovo\quickcontrol\quickcontrolservice.exe | "{E6066A34-2DC3-4DCB-B27C-605305202F9C}" = dir=in | name=skype | "{E9391318-9154-4FF2-A24F-8A0A70428EEF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{F06399C7-C731-475F-B85B-6CCFFC82C4CE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{F197ADD6-D034-4E9F-9C9B-FF47F33E7361}" = dir=in | name=lenovo settings | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F693FAFA-B659-4AFD-BFCA-E384DF817475}" = dir=out | name=@{microsoft.bingnews_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F7F524C4-7591-427F-A037-F9EEEE1A018D}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{F86AD855-6846-4777-833A-6BE943A812D3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{FE82692A-C40F-4358-ADC6-E4A42ADA3B8F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "TCP Query User{5CDCE01F-E7C2-43E7-A049-DA060AFEC946}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "TCP Query User{75971BBC-F91D-4BAC-9298-A1AEE9ED12C0}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{15D63003-B870-4060-8DED-920709D78624}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{A45CACD5-C548-46F3-BDBE-31FA8BE3C181}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{053ACA98-6B07-4DD0-9DB3-F51E3EB1780C}" = Lenovo Patch Utility 64 bit "{0788641D-D31A-478D-BB34-C41564AE9F93}" = Dependency Package Update "{1CA74803-5CB2-4C03-BDBE-061EDC81CC7F}" = Lenovo Solution Center "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1" = Lenovo Settings UMDF driver "{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1" = Lenovo Settings Dependency Package "{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 "{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{4D70781C-36A9-4335-9568-565C6F61B5EB}" = Validity WBF DDK 5011 "{5252431C-288E-409D-ADCF-24407E0E6F70}" = Dependency Package Update "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{88C6A6D9-324C-46E8-BA87-563D14021442}_is1" = Lenovo Settings - Camera Audio "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component "{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}" = Dolby Digital Plus Advanced Audio "{B5E06417-A4AC-4225-B36E-7E34C91616E7}" = Intel® Trusted Connect Service Client "{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 "{FF5E324F-1FFF-49D4-8F71-0D25EDF12764}" = Validity WBF DDK 5011 "{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}" = Dependency Package Update "70FB73D983446AEE2932B0ED51A770D1BD1348DA" = Pakiet sterowników systemu Windows - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) "Bandizip" = Bandizip "C8A921233C0C441A4E4EAABC2AB08C872FD77A6E" = Pakiet sterowników systemu Windows - Intel Corporation (iaStorA) HDC (08/01/2013 12.8.0.1016) "CNXT_AUDIO_HDA" = Conexant HD Audio "Lenovo Dependency Package_is1" = Lenovo Dependency Package "LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility "LenovoEMC" = LenovoEMC Storage Connector "O365HomePremRetail - pl-pl" = Microsoft Office 365 - pl-pl "OnScreenDisplay" = On Screen Display "Power Management Driver" = Lenovo Power Management Driver "SynTPDeinstKey" = ThinkPad UltraNav Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{13F59938-C595-479C-B479-F171AB9AF64F}" = Lenovo User Guide "{1D2682EA-75DD-44B6-BF2D-CD3C49EAD012}" = Dependency Package Update "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.3 "{25C64847-B900-48AD-A164-1B4F9B774650}" = Lenovo System Update "{3117B53D-A409-4D99-A0DE-11A1A40696FA}" = Dependency Package Update "{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}" = WaveEditor "{34927EBC-98D4-4D53-98BE-510DF5999F50}" = Adobe AIR "{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go 7 "{4430150F-61B3-4142-BE04-EAC68C8DDA18}" = Dependency Package Update "{4855C42F-5197-4AAD-A50D-5066D2CC4647}" = Lenovo QuickControl "{4AF6C9BC-D8DB-4286-94D9-474CE54ADAA2}" = Dependency Package Update "{503B47A9-E34A-4841-ADD7-417191D5DB5E}" = Dependency Package Update "{546FF45D-2467-4950-AAFB-0A06ACBB6B2C}" = Dependency Package Update "{5B2190E9-199D-450A-94B3-4D6826C770C2}" = Dependency Package Update "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5BEFE1E1-F597-4B79-913B-15FFDB25B744}" = Dependency Package Update "{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}" = Intel(R) Update Manager "{63DE35C9-B080-4D03-B110-99E14FD35BCE}" = Dependency Package Update "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65316098-0220-4D5C-B37A-6136083A0897}" = Dependency Package Update "{6A6D86CD-B004-46b7-8951-7BB75A776F8C}" = Lenovo Solutions for Small Business "{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8E1CACF5-2493-4950-9AD5-189903FE57E7}" = ThinkPad OneLink Dock "{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component "{90150000-008C-0415-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D3D8C60-A5EF-4123-B2B9-172095903AB}" = REALTEK Bluetooth Driver "{9DAABC60-A5EF-41FF-B2B9-17329590CD5}" = REALTEK Wireless LAN Driver "{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.11) - Polish "{AFD7B869-3B70-40C7-8983-769256BA3BD2}" = Lenovo Solutions for Small Business Customizations "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer 5.5 "{C79D4402-E622-4922-9C02-89F9080BF081}_is1" = Lenovo Settings - Location Awareness "{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 "{D6E853EC-8960-4D44-AF03-7361BB93227C}" = PowerDVD Create 10 "{DDAA788F-52E6-44EA-ADB8-92837B11BF26}" = Metric Collection SDK "{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}" = Integrated Camera "{E33DB440-A008-4928-8A4E-5FC5ADDED608}" = OpenOffice.org 2.4 "{E8F27ADF-B1ED-41AF-A7EF-D5E71778480C}" = Lenovo Patch Utility "{E966DBE4-5075-465E-BA81-BC9A3A3204B3}" = Dependency Package Update "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}" = Lenovo Warranty Information "0E7DAF70-FB54-4B91-B192-7E771C25AEEB" = Intel Collaborative Processor Performance Control "Adobe AIR" = Adobe AIR "Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI "Fastboot" = RapidBoot HDD Accelerator "InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}" = PowerDVD Create "InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "Internet Manager" = Internet Manager "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.4.1028 "Mozilla Firefox 38.0.1 (x86 pl)" = Mozilla Firefox 38.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Steam" = Steam "vt30niemmp3_is1" = VT Niemiecki Kurs podstawowy mp3 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "SkyDriveSetup.exe" = Microsoft SkyDrive [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2015-05-26 06:38:35 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-05-26 06:38:35 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-05-26 14:05:04 | Computer Name = ADAM-PC | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 2015-05-27 03:31:53 | Computer Name = ADAM-PC | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 2015-05-27 05:20:44 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-05-28 06:25:52 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: LenovoEMCDiscovery.exe, wersja: 1.1.2.26394, sygnatura czasowa: 0x534413ac Nazwa modułu powodującego błąd: LenovoEMCDiscovery.exe, wersja: 1.1.2.26394, sygnatura czasowa: 0x534413ac Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000065839 Identyfikator procesu powodującego błąd: 0x10d4 Godzina uruchomienia aplikacji powodującej błąd: 0x01d099301d110e14 Ścieżka aplikacji powodującej błąd: C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe Ścieżka modułu powodującego błąd: C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe Identyfikator raportu: ea1775b3-0523-11e5-829c-28d24482f56a Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-05-28 08:12:02 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: LenovoEMCDiscovery.exe, wersja: 1.1.2.26394, sygnatura czasowa: 0x534413ac Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.3.9600.17736, sygnatura czasowa: 0x550f4336 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000f0f20 Identyfikator procesu powodującego błąd: 0x1198 Godzina uruchomienia aplikacji powodującej błąd: 0x01d0993f3895b855 Ścieżka aplikacji powodującej błąd: C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll Identyfikator raportu: beaed9e6-0532-11e5-829d-28d24482f56a Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-05-28 10:24:40 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-05-29 06:14:49 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: djc1ypxt.exe, wersja: 2.1.19357.0, sygnatura czasowa: 0x52e7ea83 Nazwa modułu powodującego błąd: djc1ypxt.exe, wersja: 2.1.19357.0, sygnatura czasowa: 0x52e7ea83 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000011aa Identyfikator procesu powodującego błąd: 0x161c Godzina uruchomienia aplikacji powodującej błąd: 0x01d099f84015d532 Ścieżka aplikacji powodującej błąd: C:\Users\Adam\Downloads\djc1ypxt.exe Ścieżka modułu powodującego błąd: C:\Users\Adam\Downloads\djc1ypxt.exe Identyfikator raportu: 896686d9-05eb-11e5-829f-28d24482f56a Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-05-29 07:07:15 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: LenovoEMCDiscovery.exe, wersja: 1.1.2.26394, sygnatura czasowa: 0x534413ac Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.3.9600.17736, sygnatura czasowa: 0x550f4336 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000f0f20 Identyfikator procesu powodującego błąd: 0x81c Godzina uruchomienia aplikacji powodującej błąd: 0x01d099ff574b31a5 Ścieżka aplikacji powodującej błąd: C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll Identyfikator raportu: dcbf8ac2-05f2-11e5-82a0-28d24482f56a Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: [ System Events ] Error - 2015-05-05 08:32:32 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-05 08:32:32 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-05 08:32:32 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-05 08:32:32 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-05 13:23:47 | Computer Name = ADAM-PC | Source = disk | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR12. Error - 2015-05-06 03:46:40 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-06 03:46:47 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-07 18:01:22 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-07 18:01:22 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = Error - 2015-05-08 10:40:55 | Computer Name = ADAM-PC | Source = Service Control Manager | ID = 7011 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi TPHKLOAD. < End of report >

**Posty:** 4765 · przez **ordynat** 29 Maj 2015, 14:15

W logach nie ma niczego podejrzanego.

"Skrypt nie odpowiada" - też tak czasami mam.
Zauważyłem, że u mnie to wyskakuje wtedy, gdy łączność z netem jest bardzo słaba (wina dostawcy internetu).
Może i u Ciebie tak jest?
Nie wiem, więc nie chcę niczego sugerować.
.

**Posty:** 271 · przez **Sythev** 29 Maj 2015, 16:19

neta mam LTE z T-Mobile i chodzi jak ta lala..

komputer ma czesto straszne zwieszki..dlugo mysli a jest nowy z farbyki Lenovo ,wiec to mnie dziwi..
Windows8 mnie drazni bo aktualizacja goni aktualizacje i tona nie potrzebnych rzeczy co na pewno spowalnia komputer

mozna jakos polepszyc wydajnosc? pousuwac jakies pliki? itp?

Dodano 01.06.2015 14:36:51:
ktoś tu jeszcze zaglada???