Prośba o sprawdzenie logów

**Posty:** 1 · przez **k..a** 31 Gru 2013, 00:44

Gdy mam włączoną przeglądarkę chrome co jakiś czas włączają mi się reklamy np. gry, koła fortuny itd. (nie klikam na nic, nawet w czasie oglądania filmów). Jestem ciemna w tych sprawach dlatego proszę o sprawdzenie logów.

Kod: Zaznacz wszystko: OTL logfile created on: 2013-12-30 22:50:44 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kasia\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16750) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,82 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 40,77% Memory free 4,51 Gb Paging File | 1,84 Gb Available in Paging File | 40,79% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 445,95 Gb Total Space | 401,51 Gb Free Space | 90,03% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Kasia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-12-30 22:48:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kasia\Downloads\OTL.exe PRC - [2013-12-29 13:19:11 | 001,299,680 | ---- | M] () -- C:\Users\Kasia\AppData\Local\Temp\GPUTemp.exe PRC - [2013-12-19 02:08:28 | 003,993,000 | ---- | M] () -- C:\Program Files (x86)\fst_pl_14\fst_pl_14.exe PRC - [2013-12-18 11:40:10 | 003,154,344 | ---- | M] () -- C:\Users\Kasia\AppData\Local\fst_pl_14\upfst_pl_14.exe PRC - [2013-12-04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2013-09-18 11:08:30 | 001,193,176 | ---- | M] () -- C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe PRC - [2013-06-13 13:08:07 | 001,260,320 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2013-04-21 10:04:58 | 000,333,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WWAHost.exe PRC - [2013-01-18 13:51:24 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe PRC - [2013-01-18 13:51:24 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin PRC - [2012-09-06 21:11:30 | 001,327,104 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe PRC - [2012-09-06 21:06:14 | 000,393,216 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe PRC - [2012-07-17 10:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2012-07-17 10:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2012-07-17 10:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2012-07-14 00:27:00 | 000,769,432 | ---- | M] (Nero AG) -- c:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2012-06-05 15:56:28 | 000,266,240 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe PRC - [2012-04-24 22:37:56 | 000,169,752 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-12-29 13:19:11 | 001,299,680 | ---- | M] () -- C:\Users\Kasia\AppData\Local\Temp\GPUTemp.exe MOD - [2013-12-19 02:08:28 | 003,993,000 | ---- | M] () -- C:\Program Files (x86)\fst_pl_14\fst_pl_14.exe MOD - [2013-12-18 11:40:10 | 003,154,344 | ---- | M] () -- C:\Users\Kasia\AppData\Local\fst_pl_14\upfst_pl_14.exe MOD - [2013-12-04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll MOD - [2013-12-04 03:48:03 | 013,586,896 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll MOD - [2013-12-04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll MOD - [2013-12-04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll MOD - [2013-12-04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll MOD - [2013-12-04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll MOD - [2013-09-18 11:08:30 | 001,193,176 | ---- | M] () -- C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe MOD - [2013-02-21 06:58:24 | 000,089,672 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll MOD - [2013-01-18 13:20:54 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll MOD - [2009-02-27 16:38:20 | 000,139,264 | R--- | M] () -- C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2013-12-24 22:02:36 | 000,335,216 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\mcafee\AppStats\MfeASUM.exe -- (MfeASUM) SRV:[b]64bit:[/b] - [2013-11-28 11:42:10 | 000,178,048 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\mcafee\msc\McAPExe.exe -- (McAPExe) SRV:[b]64bit:[/b] - [2013-11-26 22:22:00 | 001,025,232 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe -- (mfecore) SRV:[b]64bit:[/b] - [2013-11-04 16:46:16 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp) SRV:[b]64bit:[/b] - [2013-11-04 16:41:02 | 000,219,272 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire) SRV:[b]64bit:[/b] - [2013-08-16 06:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2013-08-02 17:52:58 | 000,602,944 | ---- | M] (McAfee, Inc.) [On_Demand | Running] -- C:\Program Files\mcafee\virusscan\mcods.exe -- (McODS) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (MSK80Service) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (McProxy) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (mcpltsvc) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (McNaiAnn) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc) SRV:[b]64bit:[/b] - [2013-07-30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc) SRV:[b]64bit:[/b] - [2013-07-02 01:44:21 | 000,016,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2013-06-24 23:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2013-06-18 00:23:36 | 000,431,656 | ---- | M] (Acer Incorporate) [Auto | Running] -- C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe -- (LMSvc) SRV:[b]64bit:[/b] - [2013-06-01 10:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2013-05-04 07:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2013-05-04 07:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2013-05-01 00:16:28 | 000,470,056 | ---- | M] (Acer Incorporated) [On_Demand | Stopped] -- C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe -- (DeviceFastLaneService) SRV:[b]64bit:[/b] - [2013-04-21 10:50:07 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2013-04-21 10:50:07 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2013-04-21 10:05:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2013-04-09 05:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2013-03-15 23:00:12 | 000,662,088 | ---- | M] (Acer Incorporated) [On_Demand | Running] -- C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc) SRV:[b]64bit:[/b] - [2013-03-02 03:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2013-03-02 03:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2012-07-26 04:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2012-05-11 14:31:46 | 000,200,728 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv) SRV:[b]64bit:[/b] - [2012-05-11 14:31:46 | 000,200,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service) SRV:[b]64bit:[/b] - [2012-04-20 22:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2012-01-26 22:19:18 | 000,332,080 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Program Files\mcafee\msc\McAWFwk.exe -- (McAWFwk) SRV - [2013-12-05 20:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-07-09 11:52:39 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2013-06-13 13:08:07 | 001,260,320 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2013-05-31 09:53:40 | 000,310,912 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2013-01-28 20:49:14 | 004,230,016 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2012-07-26 04:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2012-07-17 10:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012-07-17 10:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012-07-17 10:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2012-07-14 00:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- c:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2012-06-05 15:56:28 | 000,266,240 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc) SRV - [2012-04-24 22:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS) SRV - [2010-10-12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2013-12-24 22:02:36 | 000,031,408 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Program Files\mcafee\AppStats\MfeASKM.sys -- (MfeASKM) DRV:[b]64bit:[/b] - [2013-11-26 22:07:22 | 000,096,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mfencrk.sys -- (mfencrk) DRV:[b]64bit:[/b] - [2013-11-26 22:07:02 | 000,411,944 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mfencbdc.sys -- (mfencbdc) DRV:[b]64bit:[/b] - [2013-11-04 16:51:44 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\cfwids.sys -- (cfwids) DRV:[b]64bit:[/b] - [2013-11-04 16:46:34 | 000,343,696 | ---- | M] (McAfee, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\mfewfpk.sys -- (mfewfpk) DRV:[b]64bit:[/b] - [2013-11-04 16:43:04 | 000,782,360 | ---- | M] (McAfee, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\mfehidk.sys -- (mfehidk) DRV:[b]64bit:[/b] - [2013-11-04 16:41:22 | 000,519,576 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mfefirek.sys -- (mfefirek) DRV:[b]64bit:[/b] - [2013-11-04 16:40:00 | 000,311,120 | ---- | M] (McAfee, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\mfeavfk.sys -- (mfeavfk) DRV:[b]64bit:[/b] - [2013-11-04 16:39:20 | 000,179,792 | ---- | M] (McAfee, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\mfeapfk.sys -- (mfeapfk) DRV:[b]64bit:[/b] - [2013-11-04 16:28:52 | 000,069,344 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mfeelamk.sys -- (mfeelamk) DRV:[b]64bit:[/b] - [2013-10-10 12:53:35 | 000,096,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2013-10-05 07:10:20 | 000,285,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2013-10-02 03:50:07 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2013-09-23 13:49:22 | 000,197,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HipShieldK.sys -- (HipShieldK) DRV:[b]64bit:[/b] - [2013-08-16 06:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013-08-10 07:30:22 | 000,151,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013-07-09 09:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2013-07-02 02:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2013-07-02 02:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2013-07-02 01:44:14 | 000,036,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2013-07-01 23:08:49 | 000,247,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2013-06-29 07:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2013-06-20 03:29:00 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\L1C63x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2013-06-13 13:08:07 | 000,030,496 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2013-06-01 04:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,586,952 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btfilter.sys -- (BtFilter) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,347,336 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,136,784 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_rcp.sys -- (BTATH_RCP) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,115,912 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_avdt.sys -- (btath_avdt) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_flt.sys -- (AthBTPort) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btath_lwflt.sys -- (BTATH_LWFLT) DRV:[b]64bit:[/b] - [2013-05-31 08:27:22 | 000,034,384 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_bus.sys -- (BTATH_BUS) DRV:[b]64bit:[/b] - [2013-05-24 00:18:09 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2013-05-22 21:51:48 | 000,377,160 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2013-05-20 18:20:18 | 005,359,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2013-05-17 04:49:12 | 003,847,168 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athw8x.sys -- (athr) DRV:[b]64bit:[/b] - [2013-04-21 10:50:07 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013-04-21 10:41:20 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013-04-21 10:39:44 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013-04-21 10:34:40 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013-04-21 10:26:27 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2013-04-21 10:09:46 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2013-04-21 10:04:56 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013-04-21 10:04:56 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013-03-14 09:03:14 | 000,353,864 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\RtsPStor.sys -- (RSPCIESTOR) DRV:[b]64bit:[/b] - [2013-03-02 11:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013-03-02 11:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2013-01-10 04:23:14 | 000,021,360 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\LMDriver.sys -- (LMDriver) DRV:[b]64bit:[/b] - [2013-01-10 04:23:14 | 000,015,704 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\RadioShim.sys -- (RadioShim) DRV:[b]64bit:[/b] - [2012-08-16 06:33:42 | 000,645,952 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2012-07-26 03:25:02 | 000,202,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthLEEnum.sys -- (BthLEEnum) DRV:[b]64bit:[/b] - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2012-07-02 08:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2012-06-30 03:00:53 | 001,119,232 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rtwlane.sys -- (RTL8192Ce) DRV:[b]64bit:[/b] - [2012-05-26 01:56:14 | 000,168,608 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NARAx64\0403000.00E\ccSetx64.sys -- (ccSet_NARA) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {32DC30E8-ED49-4B29-BCDA-32E3BCDD27D0} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{32DC30E8-ED49-4B29-BCDA-32E3BCDD27D0}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {32DC30E8-ED49-4B29-BCDA-32E3BCDD27D0} IE - HKLM\..\SearchScopes\{32DC30E8-ED49-4B29-BCDA-32E3BCDD27D0}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002\..\SearchScopes,DefaultScope = {32DC30E8-ED49-4B29-BCDA-32E3BCDD27D0} IE - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013-12-26 20:44:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Users\Kasia\AppData\Local\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Users\Kasia\AppData\Local\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013-12-30 09:14:00 | 000,000,000 | ---D | M] [2013-12-16 17:44:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kasia\AppData\Roaming\mozilla\Extensions [2013-12-29 13:23:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\i3i8fc3u.default\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - Extension: Dokumenty Google = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1\ CHR - Extension: Dysk Google = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\ CHR - Extension: YouTube = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\ CHR - Extension: Szukaj w Google = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\ CHR - Extension: Google Wallet = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\ CHR - Extension: Gmail = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_3\ O1 HOSTS File: ([2012-07-26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [fst_pl_14] C:\Program Files (x86)\fst_pl_14\fst_pl_14.exe () O4 - HKLM..\Run: [GPULoader] C:\Program Files (x86)\VLC Player GPU+\GPULog.exe () O4 - HKLM..\Run: [GPUTemp] C:\Users\Kasia\AppData\Local\Temp\GPUTemp.exe () O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe File not found O4 - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002..\Run: [AcerCloud] "C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe" startup File not found O4 - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002..\Run: [NextLive] C:\Users\Kasia\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe) O4 - HKU\S-1-5-21-2633788773-4294671590-2255056277-1002..\Run: [Spotify Web Helper] C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe () O4:[b]64bit:[/b] - HKLM..\RunOnce: [ETDUnst] C:\Windows\ETDUninst.dll (ELAN Microelectronics Corp.) O4 - HKLM..\RunOnce: [upfst_pl_14.exe] C:\Users\Kasia\AppData\Local\fst_pl_14\upfst_pl_14.exe () O4 - Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe" (Atheros Communications) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O7 - HKU\S-1-5-21-2633788773-4294671590-2255056277-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DB96FD82-3E4E-4372-BC0C-DD8236956422}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O18:[b]64bit:[/b] - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O18:[b]64bit:[/b] - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-12-30 22:36:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee [2013-12-30 22:33:22 | 002,214,216 | ---- | C] (ELAN Microelectronics Corp.) -- C:\Windows\ETDUninst.dll [2013-12-30 22:14:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013-12-30 17:39:55 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Brother [2013-12-29 13:19:42 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\0C1I1L1R1J0M1P0I1G [2013-12-29 13:19:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VLC Player GPU+ [2013-12-29 13:18:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FREESOFTTODAY [2013-12-29 13:18:53 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\fst_pl_14 [2013-12-29 13:18:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\fst_pl_14 [2013-12-29 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Programs [2013-12-29 13:17:32 | 000,000,000 | ---D | C] -- C:\Users\Kasia\.android [2013-12-29 13:17:28 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\cache [2013-12-29 13:17:27 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\newnext.me [2013-12-29 13:17:26 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Documents\Mobogenie [2013-12-29 13:17:26 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Mobogenie [2013-12-29 13:17:26 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\genienext [2013-12-29 13:17:13 | 001,005,464 | ---- | C] (AnyProtect.com) -- C:\Users\Kasia\AppData\Local\AnyProtectScannerSetup.exe [2013-12-29 13:16:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mobogenie [2013-12-29 12:31:59 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Desktop\obrazy [2013-12-26 20:40:48 | 000,000,000 | R--D | C] -- C:\Windows\BrowserChoice [2013-12-26 15:16:27 | 000,247,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys [2013-12-26 15:16:27 | 000,036,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys [2013-12-26 15:16:20 | 002,382,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll [2013-12-26 15:16:19 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll [2013-12-26 15:16:18 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2013-12-26 15:16:18 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2013-12-26 15:16:17 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll [2013-12-26 15:16:17 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll [2013-12-26 15:16:15 | 010,116,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll [2013-12-26 15:16:14 | 008,858,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll [2013-12-26 15:16:13 | 002,304,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2013-12-26 15:16:13 | 002,035,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2013-12-26 13:08:33 | 002,219,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll [2013-12-26 13:08:32 | 002,391,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2013-12-26 13:08:32 | 002,106,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2013-12-26 13:08:32 | 001,842,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll [2013-12-26 13:08:32 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfasfsrcsnk.dll [2013-12-26 13:08:31 | 006,987,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2013-12-26 13:08:31 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfasfsrcsnk.dll [2013-12-26 13:08:31 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll [2013-12-26 13:08:30 | 001,527,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll [2013-12-26 13:08:30 | 001,453,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll [2013-12-26 13:08:28 | 001,403,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2013-12-26 13:08:28 | 001,271,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2013-12-26 13:08:28 | 001,217,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2013-12-26 13:08:28 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2013-12-26 13:08:27 | 001,093,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2013-12-26 13:08:27 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll [2013-12-26 13:08:27 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2013-12-26 13:08:27 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll [2013-12-26 13:08:26 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupManager.dll [2013-12-26 13:08:26 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeParserTask.exe [2013-12-26 13:08:25 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll [2013-12-26 13:08:25 | 000,037,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys [2013-12-26 13:07:14 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.dll [2013-12-26 13:07:14 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.dll [2013-12-26 13:07:13 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.exe [2013-12-26 13:07:13 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndadmin.exe [2013-12-26 13:07:13 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.exe [2013-12-26 13:07:13 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndadmin.exe [2013-12-26 13:02:03 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2013-12-26 13:02:03 | 000,773,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2013-12-26 13:02:03 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resutils.dll [2013-12-26 13:02:03 | 000,488,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll [2013-12-26 13:02:03 | 000,447,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS [2013-12-26 13:02:03 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll [2013-12-26 13:02:02 | 001,622,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2013-12-26 13:02:02 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2013-12-26 13:02:02 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll [2013-12-26 13:02:02 | 000,285,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys [2013-12-26 13:02:02 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll [2013-12-26 13:02:02 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll [2013-12-26 13:02:02 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2013-12-26 13:02:02 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2013-12-26 13:02:02 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2013-12-26 13:02:02 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2013-12-26 13:02:02 | 000,059,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2013-12-26 13:02:02 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2013-12-26 13:02:02 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2013-12-26 13:01:39 | 013,661,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll [2013-12-26 13:01:37 | 010,799,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll [2013-12-26 13:01:34 | 001,173,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll [2013-12-26 13:01:33 | 000,914,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll [2013-12-26 13:01:32 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ubpm.dll [2013-12-26 13:01:32 | 000,151,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tpm.sys [2013-12-26 13:01:31 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ubpm.dll [2013-12-26 13:01:31 | 000,061,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\crashdmp.sys [2013-12-26 12:56:57 | 001,125,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll [2013-12-26 12:56:47 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll [2013-12-26 12:56:47 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2013-12-26 12:56:44 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mbsmsapi.dll [2013-12-26 12:56:42 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll [2013-12-26 12:56:42 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mbsmsapi.dll [2013-12-26 12:56:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncInfo.dll [2013-12-26 12:56:41 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncInfo.dll [2013-12-26 12:56:10 | 001,374,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll [2013-12-26 12:56:10 | 001,245,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll [2013-12-26 12:56:10 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll [2013-12-26 12:56:10 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx [2013-12-26 12:56:10 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll [2013-12-26 12:56:10 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx [2013-12-26 12:56:08 | 002,273,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll [2013-12-26 12:56:07 | 002,839,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll [2013-12-26 12:56:07 | 001,025,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2013-12-26 12:56:06 | 000,327,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys [2013-12-26 12:56:03 | 000,439,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe [2013-12-26 12:56:03 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll [2013-12-26 12:56:03 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll [2013-12-26 12:56:03 | 000,195,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys [2013-12-26 12:56:03 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmmbase.dll [2013-12-26 12:56:03 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmm.dll [2013-12-26 12:56:02 | 000,385,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe [2013-12-26 12:56:02 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wwanadvui.dll [2013-12-26 12:56:02 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.BackgroundTransfer.dll [2013-12-26 12:56:02 | 000,263,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmsvc.dll [2013-12-26 12:56:02 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmmbase.dll [2013-12-26 12:56:02 | 000,125,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys [2013-12-26 12:56:02 | 000,120,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\msgpioclx.sys [2013-12-26 12:56:02 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmcsp.dll [2013-12-26 12:56:01 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanmm.dll [2013-12-26 12:56:01 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.dll [2013-12-26 12:56:01 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\openfiles.exe [2013-12-26 12:56:01 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\openfiles.exe [2013-12-26 12:56:00 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LocationApi.dll [2013-12-26 12:56:00 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LocationApi.dll [2013-12-26 12:47:45 | 001,627,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2013-12-26 12:47:40 | 005,978,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll [2013-12-26 12:47:39 | 001,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2013-12-26 12:47:38 | 001,149,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmde.dll [2013-12-26 12:47:38 | 000,951,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.dll [2013-12-26 12:47:37 | 005,091,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll [2013-12-26 12:47:37 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll [2013-12-26 12:47:37 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll [2013-12-26 12:47:36 | 000,332,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys [2013-12-26 12:47:36 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll [2013-12-26 12:47:36 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeBrokerServer.dll [2013-12-26 12:47:35 | 000,893,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmde.dll [2013-12-26 12:47:35 | 000,601,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.dll [2013-12-26 12:47:35 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll [2013-12-26 12:47:35 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll [2013-12-26 12:47:35 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbmon.dll [2013-12-26 12:47:34 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll [2013-12-26 12:47:34 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Authentication.OnlineId.dll [2013-12-26 12:47:33 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\discan.dll [2013-12-26 12:47:32 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsquirt.exe [2013-12-26 12:47:32 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl [2013-12-26 12:47:32 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl [2013-12-26 12:47:32 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NdisImPlatform.dll [2013-12-26 12:47:32 | 000,077,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storahci.sys [2013-12-26 12:47:31 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDPrintProxy.DLL [2013-12-26 12:47:31 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevDispItemProvider.dll [2013-12-26 12:47:29 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevDispItemProvider.dll [2013-12-26 12:45:30 | 003,959,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013-12-26 12:45:22 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2013-12-26 12:45:20 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013-12-26 12:45:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013-12-26 12:45:19 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013-12-26 12:44:52 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013-12-26 12:44:51 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll [2013-12-26 12:44:51 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll [2013-12-25 14:41:47 | 000,888,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll [2013-12-25 14:41:47 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll [2013-12-25 14:41:47 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL [2013-12-25 14:41:47 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL [2013-12-25 14:41:47 | 000,096,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwfs.sys [2013-12-25 14:40:14 | 000,209,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NotificationUI.exe [2013-12-25 14:40:13 | 002,371,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll [2013-12-25 14:40:13 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll [2013-12-25 14:40:11 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll [2013-12-25 14:40:10 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll [2013-12-25 14:40:10 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll [2013-12-25 14:40:10 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll [2013-12-25 14:40:10 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll [2013-12-25 14:40:09 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSSync.dll [2013-12-25 14:40:09 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSSync.dll [2013-12-25 14:40:09 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll [2013-12-25 14:40:09 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll [2013-12-25 14:40:09 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2013-12-25 14:40:08 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll [2013-12-25 14:40:08 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.dll [2013-12-25 14:40:08 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll [2013-12-25 14:40:08 | 000,058,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dam.sys [2013-12-25 14:40:08 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2013-12-25 14:40:07 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2013-12-25 14:40:06 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2013-12-25 14:40:06 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2013-12-25 14:40:06 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcln.dll [2013-12-25 14:40:05 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll [2013-12-25 14:39:07 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll [2013-12-25 14:38:51 | 000,411,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2013-12-25 14:38:27 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS [2013-12-25 14:38:26 | 000,498,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2013-12-25 14:38:26 | 000,213,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS [2013-12-25 14:38:26 | 000,021,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2013-12-25 14:38:24 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013-12-25 14:38:22 | 002,842,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013-12-25 14:38:22 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013-12-25 14:38:17 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2013-12-25 14:38:17 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepapi.dll [2013-12-25 14:38:17 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepsync.dll [2013-12-25 14:38:17 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepapi.dll [2013-12-25 14:38:17 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepsync.dll [2013-12-25 14:38:13 | 000,362,496 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2013-12-25 14:38:13 | 000,300,032 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2013-12-25 14:38:13 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2013-12-25 14:38:13 | 000,035,328 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2013-12-25 14:38:12 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013-12-25 14:38:08 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrobj.dll [2013-12-25 14:38:08 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll [2013-12-25 14:38:08 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrobj.dll [2013-12-25 14:38:08 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll [2013-12-25 14:38:08 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe [2013-12-25 14:38:08 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx [2013-12-25 14:38:08 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe [2013-12-23 10:38:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT [2013-12-23 08:55:33 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssdisai.dll [2013-12-23 08:55:33 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appserverai.dll [2013-12-23 08:55:33 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDWebAI.dll [2013-12-23 08:55:33 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmHostAI.dll [2013-12-23 08:55:31 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2013-12-23 08:55:31 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2013-12-22 20:07:54 | 000,054,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys [2013-12-22 20:07:53 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2013-12-22 20:07:52 | 000,652,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2013-12-22 20:07:26 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys [2013-12-22 20:07:26 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys [2013-12-22 20:07:16 | 001,131,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentServer.dll [2013-12-22 20:07:15 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BCP47Langs.dll [2013-12-22 20:07:14 | 000,470,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netprofmsvc.dll [2013-12-22 20:07:14 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BCP47Langs.dll [2013-12-22 20:07:14 | 000,014,848 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\rars.rs [2013-12-22 20:07:14 | 000,014,848 | ---- | C] (Microsoft) -- C:\Windows\SysNative\rars.rs [2013-12-22 20:07:13 | 000,812,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Magnify.exe [2013-12-22 20:07:13 | 000,708,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentExtensions.dll [2013-12-22 20:07:13 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll [2013-12-22 20:07:13 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll [2013-12-22 20:07:13 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psmsrv.dll [2013-12-22 20:07:12 | 000,560,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmp4srcsnk.dll [2013-12-22 20:07:12 | 000,501,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairing.dll [2013-12-22 20:07:12 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl [2013-12-22 20:07:12 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll [2013-12-22 20:07:12 | 000,120,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthHost.exe [2013-12-22 20:07:12 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe [2013-12-22 20:07:11 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Magnify.exe [2013-12-22 20:07:11 | 000,449,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairing.dll [2013-12-22 20:07:11 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biwinrt.dll [2013-12-22 20:07:11 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\biwinrt.dll [2013-12-22 20:07:10 | 000,411,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmp4srcsnk.dll [2013-12-22 20:07:10 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl [2013-12-22 20:07:10 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bisrv.dll [2013-12-22 20:07:10 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe [2013-12-22 20:07:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll [2013-12-22 20:07:09 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll [2013-12-22 20:06:49 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe [2013-12-22 20:06:49 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe [2013-12-22 20:06:48 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2013-12-22 20:06:46 | 000,888,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe [2013-12-22 20:06:46 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe [2013-12-22 20:06:46 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll [2013-12-22 20:06:46 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll [2013-12-22 20:06:43 | 001,257,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2013-12-22 20:06:42 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2013-12-22 20:06:42 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2013-12-22 20:06:39 | 001,300,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2013-12-22 20:06:30 | 001,890,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2013-12-22 18:58:04 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll [2013-12-22 18:58:04 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2013-12-22 18:57:58 | 002,062,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2013-12-22 18:57:58 | 001,711,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2013-12-22 18:57:54 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys [2013-12-22 18:56:26 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll [2013-12-22 18:56:26 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll [2013-12-22 14:20:45 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\NVIDIA [2013-12-21 09:25:13 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\OpenOffice.org [2013-12-21 09:23:48 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 [2013-12-21 09:23:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3 [2013-12-21 09:20:41 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Documents\OpenOffice.org 3.4.1 (pl) Installation Files [2013-12-21 09:13:31 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Mobile Uploads [2013-12-21 09:13:12 | 000,000,000 | ---D | C] -- C:\ProgramData\clear.fi [2013-12-21 09:11:28 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Acer [2013-12-21 09:09:20 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\AcerCloud [2013-12-20 19:37:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2013-12-20 19:36:52 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Mozilla Firefox [2013-12-20 18:58:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2013-12-20 18:58:36 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Google [2013-12-20 18:58:13 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Deployment [2013-12-20 18:58:13 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Apps [2013-12-17 22:14:18 | 000,197,704 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\drivers\HipShieldK.sys [2013-12-16 18:13:16 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Macromedia [2013-12-16 18:11:13 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Adobe [2013-12-16 17:44:49 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Mozilla [2013-12-16 17:44:49 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Mozilla [2013-12-16 17:44:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2013-12-15 19:37:53 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Desktop\muzyka [2013-12-15 19:31:24 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\BMExplorer [2013-12-15 19:31:24 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Documents\Bluetooth Folder [2013-12-15 19:19:07 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\CrashDumps [2013-12-15 19:16:49 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\WildTangent [2013-12-15 19:15:03 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Spotify [2013-12-15 19:15:03 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Spotify [2013-12-15 19:11:42 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Documents\Notes [2013-12-15 15:46:58 | 000,000,000 | ---D | C] -- C:\Users\Kasia\PicStream [2013-12-15 15:34:17 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\ControlCenter4 [2013-12-15 15:18:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother [2013-12-15 15:17:28 | 000,000,000 | ---D | C] -- C:\Brother [2013-12-15 15:17:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ControlCenter4 [2013-12-15 15:17:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Browny02 [2013-12-15 15:16:57 | 001,441,792 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrWi211d.dll [2013-12-15 15:16:57 | 000,279,040 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrJDec.dll [2013-12-15 15:16:57 | 000,050,688 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrUsi11e.dll [2013-12-15 15:16:57 | 000,012,800 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\BrCiImg.dll [2013-12-15 15:16:54 | 000,050,176 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BRPRTINK.DLL [2013-12-15 15:16:48 | 000,245,760 | ---- | C] (brother) -- C:\Windows\SysWow64\NSSearch.dll [2013-12-15 15:16:48 | 000,073,728 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2.dll [2013-12-15 15:16:48 | 000,005,120 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2S.dll [2013-12-15 15:16:48 | 000,004,608 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2L.dll [2013-12-15 15:16:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Brother [2013-12-15 15:16:34 | 000,180,224 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysWow64\BroSNMP.dll [2013-12-15 15:14:05 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\InstallShield [2013-12-15 14:41:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ControlCenter4 [2013-12-15 14:37:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Brother [2013-12-15 13:53:35 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Documents\CyberLink [2013-12-15 13:53:31 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Software [2013-12-15 13:53:31 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\CyberLink [2013-12-15 13:53:30 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Cyberlink [2013-12-15 13:53:02 | 000,000,000 | ---D | C] -- C:\Users\Kasia\Documents\clear.fi [2013-12-15 13:52:56 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\clear.fi [2013-12-15 09:43:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Pokki [2013-12-15 09:41:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OEM [2013-12-15 09:41:08 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Atheros [2013-12-15 09:40:57 | 000,000,000 | ---D | C] -- C:\Program Files\Accessory Store [2013-12-15 09:40:51 | 000,000,000 | ---D | C] -- C:\ProgramData\OEM_YAHOO [2013-12-15 09:40:28 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2013-12-15 09:40:28 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Searches [2013-12-15 09:40:28 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2013-12-15 09:40:27 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Contacts [2013-12-15 09:39:48 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Macromedia [2013-12-15 09:39:47 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Adobe [2013-12-15 09:38:46 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\VirtualStore [2013-12-15 09:38:33 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Packages [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Ustawienia lokalne [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\AppData\Local\Temporary Internet Files [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Szablony [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\SendTo [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Recent [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\PrintHood [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\NetHood [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Documents\Moje wideo [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Documents\Moje obrazy [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Moje dokumenty [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Documents\Moja muzyka [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Menu Start [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\AppData\Local\Historia [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Dane aplikacji [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\AppData\Local\Dane aplikacji [2013-12-15 09:38:20 | 000,000,000 | -HSD | C] -- C:\Users\Kasia\Cookies [2013-12-15 09:38:09 | 000,000,000 | --SD | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Videos [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Saved Games [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Pictures [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Music [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Links [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Favorites [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Downloads [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Documents [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\Desktop [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2013-12-15 09:38:09 | 000,000,000 | R--D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2013-12-15 09:38:09 | 000,000,000 | -H-D | C] -- C:\Users\Kasia\AppData [2013-12-15 09:38:09 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Temp [2013-12-15 09:38:09 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\Microsoft [2013-12-15 09:38:09 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-12-30 22:36:18 | 000,001,848 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk [2013-12-30 22:23:27 | 000,001,060 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-12-30 22:23:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-12-30 22:16:00 | 000,000,302 | ---- | M] () -- C:\Windows\tasks\FoxTab.job [2013-12-30 22:15:38 | 001,793,398 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-12-30 22:15:38 | 000,794,946 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-12-30 22:15:38 | 000,710,244 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-12-30 22:15:38 | 000,159,530 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-12-30 22:15:38 | 000,132,614 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-12-30 22:14:23 | 000,002,269 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2013-12-30 22:12:44 | 000,067,584 | -H-- | M] () -- C:\Windows\bootstat.dat [2013-12-30 22:10:38 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013-12-30 22:10:26 | 3283,521,536 | -HS- | M] () -- C:\hiberfil.sys [2013-12-29 13:24:36 | 000,307,400 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013-12-29 08:22:56 | 001,005,464 | ---- | M] (AnyProtect.com) -- C:\Users\Kasia\AppData\Local\AnyProtectScannerSetup.exe [2013-12-26 21:30:58 | 000,888,742 | ---- | M] () -- C:\Users\Kasia\Desktop\DWML DRUK.odt [2013-12-21 09:25:17 | 000,001,243 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2013-12-21 09:23:48 | 000,001,198 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk [2013-12-20 19:37:02 | 000,001,216 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013-12-15 15:25:15 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2013-12-15 15:18:12 | 000,002,063 | ---- | M] () -- C:\Users\Public\Desktop\Brother Utilities.lnk [2013-12-15 14:26:55 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf [2013-12-15 09:41:26 | 000,002,609 | ---- | M] () -- C:\Users\Public\Desktop\eBay.lnk [2013-12-15 09:40:57 | 000,001,776 | ---- | M] () -- C:\Users\Public\Desktop\Zakup Online.lnk [2013-12-15 09:40:29 | 000,000,868 | ---- | M] () -- C:\Users\Kasia\Desktop\Downloads.lnk [2013-12-04 01:53:54 | 000,694,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-12-04 01:53:54 | 000,078,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-12-30 22:14:23 | 000,002,269 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2013-12-30 22:13:36 | 000,001,060 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-12-30 22:13:33 | 000,001,056 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-12-29 13:24:28 | 000,307,400 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013-12-29 13:16:23 | 000,000,302 | ---- | C] () -- C:\Windows\tasks\FoxTab.job [2013-12-26 21:30:55 | 000,888,742 | ---- | C] () -- C:\Users\Kasia\Desktop\DWML DRUK.odt [2013-12-26 13:02:03 | 000,385,528 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml [2013-12-25 14:40:05 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2013-12-21 09:25:17 | 000,001,243 | ---- | C] () -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2013-12-21 09:23:48 | 000,001,198 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk [2013-12-20 19:37:02 | 000,001,246 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2013-12-20 19:37:02 | 000,001,216 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013-12-17 22:13:56 | 000,002,641 | ---- | C] () -- C:\Windows\SysNative\drivers\mfencrk.inf [2013-12-17 22:13:55 | 000,002,951 | ---- | C] () -- C:\Windows\SysNative\drivers\mfencbdc.inf [2013-12-15 15:25:15 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2013-12-15 15:18:12 | 000,002,063 | ---- | C] () -- C:\Users\Public\Desktop\Brother Utilities.lnk [2013-12-15 14:26:55 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf [2013-12-15 09:41:26 | 000,002,609 | ---- | C] () -- C:\Users\Public\Desktop\eBay.lnk [2013-12-15 09:40:57 | 000,001,776 | ---- | C] () -- C:\Users\Public\Desktop\Zakup Online.lnk [2013-12-15 09:40:29 | 000,000,868 | ---- | C] () -- C:\Users\Kasia\Desktop\Downloads.lnk [2013-12-15 09:40:23 | 000,001,446 | ---- | C] () -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2013-07-19 11:01:28 | 000,598,384 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin [2013-07-19 11:01:20 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2013-07-19 11:01:19 | 000,754,652 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin [2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2012-07-26 08:21:26 | 000,067,584 | -H-- | C] () -- C:\Windows\bootstat.dat [2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2012-07-25 21:22:56 | 000,267,284 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin [2012-07-25 21:22:54 | 000,963,376 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin [2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2012-04-20 21:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll [color=#E56717]========== ZeroAccess Check ==========[/color] [2013-09-18 11:19:37 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-08-02 07:28:20 | 019,758,080 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-08-02 06:08:10 | 017,561,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-12-29 13:19:42 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\0C1I1L1R1J0M1P0I1G [2013-12-17 15:34:39 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\ControlCenter4 [2013-12-30 22:11:46 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\newnext.me [2013-12-21 09:25:13 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\OpenOffice.org [2013-12-15 19:15:07 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Spotify [2013-12-15 19:16:50 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\WildTangent [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2013-12-30 22:50:44 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kasia\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16750) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,82 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 40,77% Memory free 4,51 Gb Paging File | 1,84 Gb Available in Paging File | 40,79% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 445,95 Gb Total Space | 401,51 Gb Free Space | 90,03% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Kasia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2633788773-4294671590-2255056277-1002\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03A2639B-89C4-47D0-B7A2-D0C13041C16B}" = lport=138 | protocol=17 | dir=in | app=system | "{04DCB6F6-E48F-49A3-B77A-8AF72B04F411}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{0AE11D70-F892-4CCC-8667-5A0611BE909D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{28F4D5FA-2176-446C-88BA-C420AE15839E}" = lport=445 | protocol=6 | dir=in | app=system | "{2C039492-E2C4-4CC4-927E-8E94B47C098F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3B839724-D1CA-4C02-A660-A5AC1BC66764}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{3E18D5E4-265C-4FEA-AED7-D4F4DEFD7A62}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{596604D3-ED18-4666-8CDD-DFF0A9ED5D77}" = lport=137 | protocol=17 | dir=in | app=system | "{59D7D8D3-666C-47F0-87B4-02B313F3BA92}" = rport=139 | protocol=6 | dir=out | app=system | "{5E0578E1-D99E-47C8-B044-1AE3478DB972}" = rport=10243 | protocol=6 | dir=out | app=system | "{631BC787-5D88-4CFA-ABF8-D4610B591ECE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7062E5E2-69F9-4731-B37E-164D69536611}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7A49171E-B00B-4562-89AA-4754414B1247}" = lport=139 | protocol=6 | dir=in | app=system | "{8AA8AAA5-7BC1-456E-B9E5-D3BAF02774BD}" = rport=445 | protocol=6 | dir=out | app=system | "{978BBBC5-EAF1-4485-882C-811D8F6D2598}" = rport=137 | protocol=17 | dir=out | app=system | "{9DA54444-EA9C-4304-BBF5-3CF4BFCE44CE}" = rport=138 | protocol=17 | dir=out | app=system | "{A12A2C31-73F6-4D08-8E56-031E3D6D411F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C5972AEF-3068-4A0E-9832-9FF932C2088C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C60F1835-FDFE-43FF-8631-98BBAABFADB8}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{D86F6803-EF52-44AD-8AF4-5A7733D4DF3C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | "{EAC4318A-4CE0-48D1-8252-0EBF06E5ECBD}" = lport=2869 | protocol=6 | dir=in | app=system | "{EE0C1E88-3DB4-4353-A080-8C185A484D4E}" = lport=10243 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04D99498-8473-4685-B4CE-C6D7922EA69C}" = dir=out | name=@{microsoft.bingfinance_2.0.0.275_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | "{051B6408-2EC4-48A7-B357-B8761F3F9AD9}" = protocol=6 | dir=out | app=system | "{0622DACB-5F6E-4BED-B12C-8024998B87E7}" = dir=out | name=kindle | "{0CBB93E5-C2D7-4569-B241-59F3B0ED336B}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | "{0FBD08BE-D84D-44B5-9118-3184EB7D51BB}" = protocol=17 | dir=in | app=c:\program files (x86)\spotify\spotify.exe | "{1229D3E2-9C06-46D6-AD67-AEC837E25240}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{19955326-0787-4EF5-A920-BB57CCE9D47D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{1C806827-E1D8-469B-ACC1-095321216029}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{1D0C3BB2-F804-42AF-82CF-D1FA1C6EDBF9}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{1E73DDE3-0D78-4F69-AC4C-A29C559F0A96}" = dir=out | name=@{microsoft.zunevideo_1.5.299.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{22512293-0BA4-4D79-A87D-B21B18C3645F}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer cloud\sdd.exe | "{22ED8ED9-4D70-422C-9155-28D555DBDEF7}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer cloud\sdd.exe | "{2BDC03C2-C477-4191-A245-198ECCFC0E0E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{2E244E01-944C-4664-AE93-995A6A20B4AB}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{2E32BE33-D875-4AA4-9456-9D1DACCDE3AA}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} | "{30280BF5-815D-4AED-8F42-3C80F4E9B3A3}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe | "{31527E2A-6377-4071-B1BA-D92ADBA21ABA}" = dir=out | name=cut the rope | "{32A64FB1-7ECC-4E59-8A98-2B85283E9962}" = dir=out | name=the treasures of montezuma 3 | "{3317A661-FD29-4D23-9EEB-6D37651042CF}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{35BFA9A0-7369-4C3B-A03C-D4C9F6EAB371}" = dir=out | name=@{microsoft.bingnews_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | "{35FAB4EC-CDE3-4158-832B-50B43D83570D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{368959A1-642A-4136-A902-7F495E508C35}" = dir=in | app=c:\program files (x86)\acer\clear.fi sdk21\video\videoplayer.exe | "{36D40D1E-D810-461B-853E-B03649496C05}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer cloud\virtualdrive.exe | "{3718EAA4-738D-4EB8-8F0E-D4D25BE714E4}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{3B8E2E6E-D61F-4E53-A880-3328C188B11E}" = dir=out | name=ebay | "{3C65BC29-69B4-4756-927A-EA678FBE48BA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{42AA7202-C742-42E2-9883-066D2103D3B0}" = dir=in | name=music maker jam | "{432964A6-B8C5-4AC7-9339-E5D11B724BD4}" = dir=in | app=c:\program files (x86)\acer\clear.fi sdk21\video\musicplayer.exe | "{45BA3715-33C2-4515-988D-D6970FD3C80B}" = dir=out | name=@{microsoft.bingweather_2.0.0.310_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | "{46A672C3-5640-4905-BD41-A798569057CA}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{48495CE7-8EFB-45E0-BDAD-F4635A3DFA32}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe | "{4A9CB41F-A5A6-443D-8145-0F40A77789AF}" = protocol=6 | dir=in | app=c:\program files (x86)\spotify\data\spotifywebhelper.exe | "{4B8FD7F2-6804-4354-B83A-386A76191B45}" = dir=in | name=ebay | "{4C4A6CF6-F9F7-44A7-869E-4889B90F38EE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{4D839EB6-5027-4498-8C16-D8DDC2E730C4}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\virtualdrive.exe | "{4F7470AB-7EB9-46EC-9251-6BC463B3499D}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\sdd.exe | "{51996B83-B78D-43AE-9BDC-158082A30239}" = dir=out | name=7digital music store | "{53BAD370-5516-4A4F-B814-731605F5ECB3}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{566B8C9B-76D2-491D-BD6B-A0021D7D6635}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\clear.fi photo\windowsupnp.exe | "{5DCE8B6F-30EF-4A67-B362-E46CC585A225}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{5F447A75-BCBE-4077-87FE-33A255EBD93C}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\sdd.exe | "{64E54A62-E65E-4D63-B5E5-22F3729015F5}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{65316B6F-0900-4E4F-8768-410C0494735F}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{670B6E45-378C-4EB3-88FF-D6EBE7546440}" = dir=out | name=weatherbug.a | "{678F1467-6AD7-49EF-B0AC-616A11C5476E}" = dir=out | name=@{microsoft.bingtravel_2.0.0.274_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | "{6B711DC4-C188-4707-B307-848FA2821C27}" = dir=out | name=acer explorer | "{6F3162B2-FC3D-4F68-8A01-93B14FBC7008}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | "{6F849E49-A6EE-4E82-9689-55969C7B8B8D}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{70F73E66-D46B-42FB-9BBD-1957701A2FC5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{71B545A0-8986-445D-8445-451A397E158C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{75839D54-D432-44A1-B85F-823AE9CD4C06}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{7A1CD65D-3098-4053-830D-D6AD76323E81}" = dir=out | name=windows_ie_ac_001 | "{7A8D579D-1D30-4FF8-A610-F4AA9C229AB7}" = dir=out | name=@{microsoft.zunemusic_1.5.214.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{7DD2B8E4-0214-4D02-B127-5A91B7405904}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{7E471053-DF3D-42F4-A25F-EFFE6D7699AA}" = dir=out | name=tunein radio | "{7F70E9F5-26DB-4A55-9F47-98FCE7140147}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{8064B4D5-1696-45ED-817A-B0FCDB019687}" = dir=out | name=music maker jam | "{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{83FB1EFC-9488-4F10-80DE-3DF389AF2E6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{84CD9484-6683-4C08-943E-381931AC766C}" = dir=out | name=zinio | "{853A4724-F158-4A0B-93B6-42086714327A}" = dir=in | app=c:\program files (x86)\acer\clear.fi sdk21\movie\playmovie.exe | "{8C07D1B9-D464-45B3-B68F-A350DA81D3E7}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{909B29FA-5E29-4187-BAD6-53B25978BDD2}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\clear.fi photo\windowsupnp.exe | "{90BF17C4-2820-4010-9947-FA3B430B7248}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{92A828C9-1AB4-4885-AB56-7804F2019B32}" = dir=out | name=- games app - | "{933AA70A-8C60-43D3-B3A4-231DA7C6EFFC}" = dir=in | name=newsxpresso | "{946693DD-83D8-4ABE-B5A6-03AE26F338FF}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe | "{96B35CF7-899C-4359-AE28-40A29929914A}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\clear.fi media\dmcdaemon.exe | "{990D2535-7758-4ECC-B725-4021E46CD9E7}" = dir=out | name=@{microsoft.xboxlivegames_1.3.10.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{9B067DDB-5F72-4059-AE57-17B7F2CA9D56}" = dir=out | name=@{microsoft.bingmaps_1.6.1528.2509_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{A1F2F7F3-78B9-4962-9268-3AD414DA9336}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer cloud\ccd.exe | "{A2E70DFC-1004-4C60-9DE8-E2A0C85D7F72}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe | "{A617DC8E-DA56-4AA1-8AB8-5FDFCFBC3A35}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{AB1EAB5B-E211-42F6-87C6-89D5625AEDB4}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer cloud\virtualdrive.exe | "{AD825BD3-ABF4-4E35-A770-9E0589D23883}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{B15BF162-1D20-4FEA-A97B-C60AE5879D26}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{B998FC90-8B82-432C-9C0E-D98030854FC6}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe | "{BA49685D-4E0C-4F77-9417-83F0B69C9F58}" = protocol=17 | dir=in | app=c:\program files (x86)\spotify\data\spotifywebhelper.exe | "{BB14F319-807A-408B-BB81-A4639C3B28F5}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\clear.fi media\dmcdaemon.exe | "{BC077015-6ED1-469B-A9D7-2345BD3E5B4A}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{C3C5398F-7BB6-4AAC-A0F4-269395E2217D}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{CB1A8E0C-4101-445A-BC6E-58189B13A656}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{CDDFFFA6-6AB4-4537-A75A-8CAA5E977F49}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe | "{D1F8D51F-2577-4D67-AD64-9E505FE57B88}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{D64EFA47-08B1-427D-AA2F-D3DCF1532423}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{D6B83FE9-3489-4C6A-848F-7C27FEDB28B8}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{D7A98C43-8E44-4B5C-95E1-6317356A21E7}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{D7B6843A-2762-434D-B7B9-9BF82E17B737}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer cloud\ccd.exe | "{E0DBB663-23FA-4086-B18B-D711A5D11EB4}" = dir=out | name=@{microsoft.bing_1.5.1.259_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} | "{E15FE052-2701-49DF-8A50-AF0699359B0C}" = dir=out | name=@{microsoft.bingsports_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | "{E57777DE-44F1-4C46-80D2-65BFFDB9522B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{EDB400C5-A813-425E-A2AE-14A72E84ED82}" = dir=in | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} | "{F316CF3B-7C8B-44B4-8EF8-34E1FE454150}" = dir=out | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} | "{F807C0B3-8A86-408B-92C2-4FC369B68809}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{F88C2293-38BC-4D66-B962-9BD7A4B2157E}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{F8D69741-E5F2-4F06-8646-63CE5779E61C}" = dir=in | name=acer explorer | "{FA6BE741-1C82-426E-8B2B-09A32FA5AB42}" = dir=out | name=newsxpresso | "{FB8852F4-9A29-4A14-BCE9-5E46885FC786}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{FBDB71E0-4057-4FCB-853A-722FD7088C8A}" = protocol=6 | dir=in | app=c:\program files (x86)\spotify\spotify.exe | "{FD633BC9-1E9F-4B27-AB92-82C9D25F64A3}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\virtualdrive.exe | "{FF03054B-55B8-4821-BC62-6BDE0DC3792C}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "TCP Query User{DF24B07F-638A-492B-8AF1-7D0C0733C9C0}C:\program files (x86)\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe | "UDP Query User{D92A1983-4D79-4F6D-A658-F9497BCEAF35}C:\program files (x86)\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}" = Acer Recovery Management "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}" = Acer Device Fast-lane "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{91F52DE4-B789-42B0-9311-A349F10E5479}" = Acer Power Management "{A84A4FB1-D703-48DB-89E0-68B6499D2801}" = Qualcomm Atheros Bluetooth Suite (64) "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 311.83 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 311.83 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.11.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.1031 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}" = Acer Launch Manager "{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64 "{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM) "{0E4630AF-0AB7-440E-A978-1A78FC4F43B9}" = Nero Launcher "{18192D3F-5537-4560-AD89-D695F72AF91D}" = OpenOffice.org 3.4.1 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program "{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App "{2FF959E3-FFE4-46C4-96DA-03F26BCFEFCC}" = Brother MFL-Pro Suite DCP-J140W "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver "{35DA427D-BB23-49B8-9AFD-CFFCFE3B708D}" = clear.fi SDK- Movie 2 "{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime "{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer "{3D9CB654-99AD-4301-89C6-0D12A790767C}" = Identity Card "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup "{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}" = Nero BackItUp 12 Essentials OEM.a01 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{6D2BBE1D-E600-4695-BA37-0B0E605542CC}" = Office Addin "{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer" = WildTangent Games App "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX "{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime "{90150000-0138-0409-0000-0000000FF1CE}" = Microsoft Office "{91589413-6675-4C27-8AFC-EFB9103B90A5}" = eBay Worldwide "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A2D43081-CF7B-4637-A9F3-E2651AA5C4A8}" = Nero RescueAgent "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter "{B5AD89F2-03D3-4206-8487-018298007DD0}" = Acer Photo "{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components "{C9661090-C134-46E8-90B2-76D72355C2A6}" = Realtek PCIE Card Reader "{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM) "{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}" = Acer Docs "{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7}" = Nero BackItUp "{E9AF1707-3F3A-49E2-8345-4F2D629D0876}" = Acer Media "{EBA33CAD-E071-48d5-A168-FBA4EEB42E93}" = clear.fi SDK - Video 2 "{EE26E302-876A-48D9-9058-3129E5B99999}" = Live Updater "{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM) "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "fst_pl_14_is1" = fst_pl_14 "Google Chrome" = Google Chrome "Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office Second Edition Runtime "Mozilla Firefox 26.0 (x86 pl)" = Mozilla Firefox 26.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "MSC" = McAfee Internet Security Suite "NARA" = Norton Online Backup ARA "Spotify" = Spotify "Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime "VLC Player GPU+11.041.44" = GPU Monitor "WildTangent wildgames Master Uninstall" = WildTangent Games "WildTangentGameProvider-acer-genres" = Game Channels "WTA-0af4e2cf-d387-42fb-8fe3-e20230b54eea" = Plants vs. Zombies - Game of the Year "WTA-40b3713d-bb87-4799-836e-68ded64c77e9" = Governor of Poker 2 Premium Edition "WTA-42d412b8-d8fa-486e-b2f0-0cd12e69ea0e" = John Deere Drive Green "WTA-508c6fb2-ba49-475f-b1c5-23e9a510d8ce" = Delicious: Emily's Childhood Memories Premium Edition "WTA-70214ac3-9ae2-4abe-b0f1-af8adb360961" = Jewel Match 3 "WTA-96bcef10-8539-4924-abf5-d330c88ad0a4" = Bejeweled 3 "WTA-d7067fa6-857b-422a-b715-36da8ac00d6f" = Tales of Lagoona "WTA-d9fab4ad-ceee-484c-8e41-84de7adec5bc" = Magic Academy [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2633788773-4294671590-2255056277-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "VuuPC Packages" = VuuPC Packages [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-12-18 09:52:08 | Computer Name = laptop | Source = SideBySide | ID = 16842824 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest". Błąd w pliku manifestu lub w pliku zasad "C:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest" w wierszu 4. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error - 2013-12-18 09:52:08 | Computer Name = laptop | Source = SideBySide | ID = 16842824 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest". Błąd w pliku manifestu lub w pliku zasad "C:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest" w wierszu 4. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error - 2013-12-18 09:52:08 | Computer Name = laptop | Source = SideBySide | ID = 16842824 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest". Błąd w pliku manifestu lub w pliku zasad "C:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest" w wierszu 4. Element asmv2:clrClassInvocation jest elementem podrzędnym elementu urn:schemas-microsoft-com:asm.v1^entryPoint, co nie jest obsługiwane w tej wersji systemu Windows. Error - 2013-12-19 12:20:23 | Computer Name = laptop | Source = Microsoft-Windows-Immersive-Shell | ID = 2486 Description = Aplikacja microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.People nie została uruchomiona w wyznaczonym czasie. Error - 2013-12-21 04:21:04 | Computer Name = laptop | Source = MsiInstaller | ID = 10005 Description = Error - 2013-12-21 04:21:07 | Computer Name = laptop | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service McAfee Network Agent since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error - 2013-12-22 09:15:59 | Computer Name = laptop | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service McAfee Network Agent since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error - 2013-12-23 06:03:24 | Computer Name = laptop | Source = Microsoft-Windows-Immersive-Shell | ID = 2486 Description = Aplikacja Microsoft.BingSports_8wekyb3d8bbwe!AppexSports nie została uruchomiona w wyznaczonym czasie. Error - 2013-12-23 06:03:53 | Computer Name = laptop | Source = Application Hang | ID = 1002 Description = Program wwahost.exe w wersji 6.2.9200.16420 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1820 Godzina rozpoczęcia: 01ceffc62e63002b Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Windows\system32\wwahost.exe Identyfikator raportu: 76c37a08-6bb9-11e3-be75-54bef75925dc Pełna nazwa pakietu powodującego błąd: Microsoft.BingSports_2.0.0.273_x64__8wekyb3d8bbwe Identyfikator aplikacji względem pakietu powodującego błąd: AppexSports Error - 2013-12-23 06:03:53 | Computer Name = laptop | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.BingSports_8wekyb3d8bbwe!AppexSports nie powiodła się. Błąd: -2144927142. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. [ System Events ] Error - 2013-12-23 06:14:03 | Computer Name = laptop | Source = DCOM | ID = 10010 Description = Error - 2013-12-23 06:14:05 | Computer Name = laptop | Source = Service Control Manager | ID = 7023 Description = Usługa Wykrywanie usług interakcyjnych zakończyła działanie; wystąpił następujący błąd: %%1 Error - 2013-12-23 06:14:05 | Computer Name = laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą McAfee Boot Delay Start Service. Error - 2013-12-23 06:14:05 | Computer Name = laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi McAfee Boot Delay Start Service z powodu następującego błędu: %%1053 Error - 2013-12-24 17:02:21 | Computer Name = laptop | Source = DCOM | ID = 10010 Description = Error - 2013-12-25 07:32:24 | Computer Name = laptop | Source = Service Control Manager | ID = 7043 Description = Usługa Instalator modułów systemu Windows nie została poprawnie zamknięta po odebraniu kodu sterującego przed zamknięciem. Error - 2013-12-25 07:33:12 | Computer Name = laptop | Source = Service Control Manager | ID = 7023 Description = Usługa Instalator modułów systemu Windows zakończyła działanie; wystąpił następujący błąd: %%19 Error - 2013-12-25 07:34:15 | Computer Name = laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi McAfee Inc. mfeapfk z powodu następującego błędu: %%1243 Error - 2013-12-25 07:38:44 | Computer Name = laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi McAfee Inc. mfeapfk z powodu następującego błędu: %%1243 Error - 2013-12-25 07:40:28 | Computer Name = laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi McAfee Inc. mfeapfk z powodu następującego błędu: %%1243 < End of report >

**Posty:** 4765 · przez **ordynat** 31 Gru 2013, 01:19

1) Odinstaluj:
"fst_pl_14_is1" = fst_pl_14
"VuuPC Packages" = VuuPC Packages

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.
Daj z tego raport C:\AdwCleaner\AdwCleaner.txt.

3) Zrób nowy log z OTL.