Samoczynnie wyskakująca nowa karta w przeglądarkach

**Posty:** 2 · przez **throllu** 23 Lut 2014, 18:07

Witam

Od pewnego czasu tzn. od instalacji niejakiego FLV player dzieje się iż, przeglądarki (mozilla, ie) same otwierają sobie nową kartę w dowolnych momentach.
Nawet jeżeli przeglądarka jest zamknięta, uruchamia ją i otwiera nową kartę. Usunąłem już z systemu cały ten dodatkowy "syf" który towarzyszył flv playerowi ale problem pozostał.
Otwierana karta jest z jakimś błędnym adresem (http:///) tzn. błąd wczytania strony strony.
Przeskanowałem komputer programem adware i usunąłem błędy. Nie pomogło.

Kod: Zaznacz wszystko: GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-02-23 16:56:08 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST1000LM rev.2AR1 931,51GB Running: xpldqixn.exe; Driver: C:\Users\Tomek\AppData\Local\Temp\uxldapow.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[4696] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 69 00000000774a1465 2 bytes [4A, 77] .text C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[4696] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 155 00000000774a14bb 2 bytes [4A, 77] .text ... * 2 .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000774a1465 2 bytes [4A, 77] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000774a14bb 2 bytes [4A, 77] .text ... * 2 .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000774a1465 2 bytes [4A, 77] .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000774a14bb 2 bytes [4A, 77] .text ... * 2 ---- Kernel IAT/EAT - GMER 2.1 ---- IAT C:\Windows\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort] [fffff8800107ae94] \SystemRoot\System32\Drivers\sptd.sys [.text] IAT C:\Windows\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUchar] [fffff8800107ac38] \SystemRoot\System32\Drivers\sptd.sys [.text] IAT C:\Windows\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUchar] [fffff8800107b614] \SystemRoot\System32\Drivers\sptd.sys [.text] IAT C:\Windows\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUlong] [fffff8800107ba10] \SystemRoot\System32\Drivers\sptd.sys [.text] IAT C:\Windows\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort] [fffff8800107b86c] \SystemRoot\System32\Drivers\sptd.sys [.text] ---- Devices - GMER 2.1 ---- Device \FileSystem\Ntfs \Ntfs fffffa800732e2c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{E8045DE3-2A57-4FEA-85DF-1A5D5F09FBAC} fffffa800a2f32c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{013688B0-001C-4589-AC8C-762461DA3CCA} fffffa800a2f32c0 Device \Driver\usbehci \Device\USBPDO-1 fffffa800dac52c0 Device \Driver\cdrom \Device\CdRom0 fffffa800a2022c0 Device \Driver\usbehci \Device\USBFDO-0 fffffa800dac52c0 Device \Driver\usbehci \Device\USBFDO-1 fffffa800dac52c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{C357DF18-726F-4F66-B39C-8EDBC1B1512C} fffffa800a2f32c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{7E83A5B9-7551-48A9-A58A-00E3155812A4} fffffa800a2f32c0 Device \Driver\NetBT \Device\NetBt_Wins_Export fffffa800a2f32c0 Device \Driver\usbehci \Device\USBPDO-0 fffffa800dac52c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{21C24648-26DC-4246-B9B5-34BB7F6F7FB2} fffffa800a2f32c0 Device \Driver\NetBT \Device\NetBT_Tcpip_{1B79F85B-13C9-4805-86D7-747C04DCDC0D} fffffa800a2f32c0 ---- Threads - GMER 2.1 ---- Thread C:\Windows\system32\services.exe [848:4772] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:4848] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:3224] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:5012] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:3628] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:3184] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:3188] 00000000015fedf0 Thread C:\Windows\system32\services.exe [848:3192] 00000000015fedf0 Thread C:\Windows\system32\svchost.exe [644:676] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:692] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:704] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:696] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:708] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:712] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:716] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [644:720] 000000000020edf0 Thread C:\Windows\system32\svchost.exe [1112:1588] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1592] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1596] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1600] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1604] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1608] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1612] 000000000190edf0 Thread C:\Windows\system32\svchost.exe [1112:1616] 000000000190edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2040] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:1164] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2052] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2056] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2060] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2064] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2068] 000000000017edf0 Thread C:\Windows\System32\spoolsv.exe [1640:2072] 000000000017edf0 Thread C:\Windows\system32\svchost.exe [1668:1748] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1752] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1756] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1760] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1764] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1768] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1772] 000000000174edf0 Thread C:\Windows\system32\svchost.exe [1668:1776] 000000000174edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2924] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2928] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2932] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2936] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2940] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2944] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2948] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2952] 000000000331edf0 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:2960] 000000000333d160 Thread C:\Program Files\Windows Sidebar\sidebar.exe [2800:3020] 000000000333d160 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6196] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6200] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6204] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6208] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6212] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6216] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6220] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6224] 00000000022bedf0 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6232] 00000000022dd160 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5580:6272] 00000000022dd160 Thread C:\Windows\System32\svchost.exe [5188:5744] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:6088] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:5720] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:5732] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:5740] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:5736] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:5716] 0000000000a1edf0 Thread C:\Windows\System32\svchost.exe [5188:1940] 0000000000a1edf0 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c485089331bc Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c485089331bc@f008f1f8e642 0x4A 0x33 0x53 0x2A ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c485089331bc@2421ab0325fd 0x06 0x97 0x18 0x9C ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c485089331bc@01122334458b 0xB6 0xC0 0x56 0xF4 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c485089331bc (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c485089331bc@f008f1f8e642 0x4A 0x33 0x53 0x2A ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c485089331bc@2421ab0325fd 0x06 0x97 0x18 0x9C ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c485089331bc@01122334458b 0xB6 0xC0 0x56 0xF4 ... ---- Files - GMER 2.1 ---- File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn15.pdf 16966 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn04.pdf 18184 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn05.pdf 16970 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn07.pdf 16494 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn08.pdf 21958 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn09.pdf 17657 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn10.pdf 17871 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn11.pdf 18840 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn12.pdf 17655 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn13.pdf 17967 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn14.pdf 17838 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn16.pdf 20552 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn17.pdf 23018 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn18.pdf 18062 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn19.pdf 20259 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn20.pdf 22933 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn21.pdf 18734 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn22.pdf 18736 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn23.pdf 18714 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn24.pdf 18630 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\431 Wykaz stali zbrojeniowej\wsz kn25.pdf 22325 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn04.pdf 17817 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn06.pdf 18164 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn21.pdf 17484 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn22.pdf 17456 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn23.pdf 17607 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn24.pdf 17599 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T21 PAB Architektura UAKTUALNIENIE\Opis techniczny 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T21 PAB Architektura UAKTUALNIENIE\T23_5-A1 Rysunki 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_2 Obliczenia statyczne\0 piwnice 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_2 Obliczenia statyczne\1 parter 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_2 Obliczenia statyczne\2 1. piętro 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_2 Obliczenia statyczne\3 2. piętro 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_2 Obliczenia statyczne\f fundamenty 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T27 PAB Przyłącze kanalizacji deszczowej\część rys_kd 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice I PRZETARG\zp_rzp-00048-12\3. Modyfikacja - aktualny SIWZ\MODYFIKACJA - aktualny SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T27 PAB Przyłącze kanalizacji deszczowej\załączniki_kd 0 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn04.pdf 17817 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn06.pdf 18164 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn21.pdf 17484 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn22.pdf 17456 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn23.pdf 17607 bytes File C:\Users\Tomek\Desktop\Przetargi Art-bud\Czechowice dziedzice NIE PRZENOSIĆ\Czechowice dziedzice II PRZETARG\zp_rzp-00002-13\2. SIWZ\SIWZ\załącznik nr 1 - dokumentacja projektowa\T22 PAB Konstrukcja\T22_3 Wykay materiałowe\432 Wykaz stali konstrukcyjnej\wsk kn24.pdf 17599 bytes ---- EOF - GMER 2.1 ----

Kod: Zaznacz wszystko: OTL logfile created on: 2014-02-23 16:58:51 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tomek\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16518) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,90 Gb Total Physical Memory | 5,24 Gb Available Physical Memory | 66,34% Memory free 15,80 Gb Paging File | 12,76 Gb Available in Paging File | 80,78% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 456,69 Gb Total Space | 388,35 Gb Free Space | 85,04% Space Free | Partition Type: NTFS Drive D: | 450,00 Gb Total Space | 318,48 Gb Free Space | 70,77% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Tomek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-02-23 16:45:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe PRC - [2014-02-19 22:27:26 | 000,639,488 | ---- | M] () -- C:\Program Files\Update Software\winclient32.exe PRC - [2014-02-13 15:12:36 | 000,487,517 | ---- | M] () -- C:\monitor.exe PRC - [2014-02-13 01:36:25 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2014-02-04 14:56:52 | 003,813,712 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2014-01-03 23:09:58 | 001,716,224 | ---- | M] () -- C:\Program Files\Update Software\ntvmon32.exe PRC - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-06-11 18:12:05 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe PRC - [2012-10-17 16:43:25 | 000,363,800 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2012-10-17 16:43:25 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2012-10-17 16:43:25 | 000,277,784 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2012-10-17 16:43:25 | 000,161,560 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2012-10-17 16:43:25 | 000,128,280 | R--- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe PRC - [2012-05-30 19:55:26 | 001,112,968 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe PRC - [2012-05-28 01:16:00 | 002,458,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2012-05-02 07:03:44 | 002,279,304 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe PRC - [2012-04-25 12:18:10 | 000,784,264 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe PRC - [2012-02-13 14:02:24 | 000,031,624 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe PRC - [2012-01-31 14:56:48 | 001,640,328 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe PRC - [2011-12-19 18:16:50 | 001,104,208 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe PRC - [2011-12-19 18:16:48 | 001,304,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe PRC - [2011-12-19 18:16:44 | 001,014,096 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe PRC - [2011-12-19 18:16:42 | 000,936,272 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe PRC - [2011-12-19 18:12:06 | 004,467,280 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe PRC - [2010-11-21 04:24:27 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe PRC - [2010-09-20 11:24:42 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe PRC - [2009-11-02 13:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-02-19 22:27:26 | 000,639,488 | ---- | M] () -- C:\Program Files\Update Software\winclient32.exe MOD - [2014-02-14 15:05:34 | 000,236,544 | ---- | M] () -- C:\Program Files\Update Software\sqlite3.dll MOD - [2014-02-13 01:36:39 | 003,578,992 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2014-01-03 23:09:58 | 001,716,224 | ---- | M] () -- C:\Program Files\Update Software\ntvmon32.exe MOD - [2013-06-11 18:12:05 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll MOD - [2011-09-08 18:40:10 | 001,645,056 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll MOD - [2011-02-17 00:03:20 | 000,203,776 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\WinCRT.dll MOD - [2009-11-02 13:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009-11-02 13:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll MOD - [2006-08-12 11:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\HookDllPS2.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-02-06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2013-01-22 16:00:49 | 001,432,400 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2012-02-02 21:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2011-12-08 09:44:04 | 000,594,704 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV:[b]64bit:[/b] - [2011-12-08 09:43:56 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV:[b]64bit:[/b] - [2011-12-08 09:43:48 | 000,618,256 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2011-12-08 09:43:44 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2011-12-05 08:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:[b]64bit:[/b] - [2011-12-05 07:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014-02-13 14:43:24 | 000,034,244 | ---- | M] () [Auto | Stopped] -- C:\monitorsvc.exe -- (ProtectMonitor) SRV - [2014-02-13 01:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-04 14:56:50 | 002,222,416 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2014-02-04 10:37:32 | 000,377,616 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc) SRV - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-07-25 08:10:04 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-06-11 18:12:05 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-05-23 19:23:16 | 001,133,056 | ---- | M] (Innova Co S.a r.l.) [Auto | Stopped] -- D:\GRY\4game\4game-service.exe -- (4game-service) SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2013-01-22 13:54:37 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2012-10-24 18:16:51 | 004,702,568 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc) SRV - [2012-10-17 16:43:25 | 000,363,800 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012-10-17 16:43:25 | 000,277,784 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012-10-17 16:43:25 | 000,161,560 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2012-10-17 16:43:25 | 000,128,280 | R--- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) SRV - [2012-06-11 14:11:08 | 000,276,288 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012-05-28 01:16:00 | 002,458,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012-02-13 14:02:24 | 000,031,624 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe -- (SamsungDeviceConfigurationWinService) SRV - [2011-12-19 18:16:50 | 001,104,208 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2011-12-19 18:16:48 | 001,304,912 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2011-12-19 18:16:44 | 001,014,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-02-23 16:25:05 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,786,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,355,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,648,808 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,410,384 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2012-05-28 01:16:00 | 000,029,032 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2012-03-26 18:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-12-20 16:38:38 | 000,042,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WDKMD.sys -- (wdkmd) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2011-12-14 13:26:56 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (ibtfltcoex) DRV:[b]64bit:[/b] - [2011-12-13 10:26:20 | 000,747,008 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf) DRV:[b]64bit:[/b] - [2011-12-13 10:26:18 | 000,094,720 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:[b]64bit:[/b] - [2011-12-13 10:26:14 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio) DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:[b]64bit:[/b] - [2011-12-01 21:51:00 | 011,417,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) DRV:[b]64bit:[/b] - [2011-11-29 18:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-09-22 13:39:44 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI) DRV:[b]64bit:[/b] - [2011-08-17 15:19:38 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2011-04-11 18:55:24 | 000,007,680 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SGDrv64.sys -- (SGDrv) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV - [2014-02-21 08:05:18 | 000,063,200 | ---- | M] (Innova) [Kernel | On_Demand | Stopped] -- D:\GRY\Lineage II\Frost\frost.sys -- (Frost_5_8_1_8) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1004\..\SearchScopes,DefaultScope = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@4game.com/plugin: D:\GRY\4game\npplugin4game.dll (Innova Co S.a r.l.) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-02-23 16:14:18 | 000,000,000 | ---D | M] [2014-02-23 16:03:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomek\AppData\Roaming\Mozilla\Extensions [2014-02-23 16:14:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\r12j0mzz.default\extensions [2014-02-15 17:04:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014-02-23 16:03:10 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012-10-29 13:06:24 | 000,172,032 | ---- | M] (LiveVDO.tv) -- C:\Program Files (x86)\mozilla firefox\plugins\npfflivevdoplg.dll O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Windows 32 bit client manager] C:\Program Files\Update Software\winclient32.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Windows DLL Host Monitor] C:\Program Files\Update Software\ntvmon32.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1306820354-990092275-3131752356-1004..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-1306820354-990092275-3131752356-1004..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: = O7 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000016 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..Trusted Domains: 4game.com ([]https in Trusted sites) O15 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..Trusted Ranges: Range1 ([https] in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{013688B0-001C-4589-AC8C-762461DA3CCA}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{21a393e8-80d0-11e3-b828-a581700fbbd5}\Shell - "" = AutoRun O33 - MountPoints2\{21a393e8-80d0-11e3-b828-a581700fbbd5}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true O33 - MountPoints2\{7a9e3af1-4d49-11e3-9032-905ac7e91dd9}\Shell - "" = AutoRun O33 - MountPoints2\{7a9e3af1-4d49-11e3-9032-905ac7e91dd9}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{95362358-188e-11e2-9b69-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{95362358-188e-11e2-9b69-806e6f6e6963}\Shell\AutoRun\command - "" = E:\SecSWMgrGuide.exe O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-02-23 16:25:05 | 000,386,680 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-02-23 16:11:53 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-02-23 16:03:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2014-02-23 12:22:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64 [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Scan [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64\0400030.01B [2014-02-23 12:22:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2014-02-23 08:56:14 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\vlc [2014-02-23 08:56:14 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\FLV and Media Player [2014-02-23 08:49:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Applian Technologies [2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Update Software [2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\Program Files\Update Software [2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Retro PC Calculator [2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\Retro PC Calculator [2014-02-23 08:45:10 | 000,330,624 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysNative\PCProtect64.dll [2014-02-23 08:45:09 | 000,293,984 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysWow64\PCProtect.dll [2014-02-23 08:44:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Web Protect [2014-02-23 08:40:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Fighters [2014-02-23 08:40:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2014-02-23 08:37:31 | 000,000,000 | ---D | C] -- C:\Users\Tomek\.android [2014-02-23 08:37:29 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache [2014-02-19 09:11:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Basen_Dziennik_skan [2014-02-19 09:10:43 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\BUKOWINA [2014-02-15 17:04:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-02-15 06:10:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2014-02-15 06:10:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2014-02-14 18:09:04 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014-02-14 18:08:00 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-02-14 18:08:00 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-02-14 18:08:00 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-02-14 18:08:00 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-02-14 18:07:59 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-02-14 18:07:59 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-02-14 18:07:59 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-02-14 18:07:58 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-02-14 18:07:58 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-02-14 18:07:58 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-02-14 18:07:58 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-02-14 18:07:58 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-02-14 18:07:58 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-02-14 18:07:58 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-02-14 18:07:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-02-14 18:07:58 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-02-14 18:07:57 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-02-14 18:07:57 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-02-14 18:07:57 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014-02-14 18:07:57 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-02-14 18:07:55 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-02-14 18:07:55 | 001,964,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-02-14 18:07:53 | 005,768,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-02-13 22:13:34 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2014-02-13 22:13:34 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2014-02-13 22:13:21 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2014-02-13 22:13:21 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-02-23 16:34:51 | 001,662,556 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-02-23 16:34:51 | 000,737,980 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-02-23 16:34:51 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-02-23 16:34:51 | 000,154,636 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-02-23 16:34:51 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-02-23 16:33:50 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-02-23 16:33:50 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-02-23 16:26:11 | 000,000,828 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job [2014-02-23 16:25:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-02-23 16:25:51 | 4187,402,239 | -HS- | M] () -- C:\hiberfil.sys [2014-02-23 16:25:05 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-02-23 16:15:41 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Tomek.job [2014-02-23 16:12:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-02-23 16:03:16 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-02-23 15:35:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job [2014-02-23 12:22:42 | 000,001,453 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK [2014-02-23 08:50:11 | 000,001,325 | ---- | M] () -- C:\Users\Public\Desktop\FLV and Media Player.lnk [2014-02-23 08:45:16 | 000,003,976 | ---- | M] () -- C:\Windows\SysWow64\PCProtect.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysWow64\PCProtectOff.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysNative\PCProtectOff.ini [2014-02-23 08:43:53 | 000,000,571 | ---- | M] () -- C:\Windows\SysNative\MyDefrag.debuglog [2014-02-14 18:17:23 | 001,638,694 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014-02-13 15:12:36 | 000,487,517 | ---- | M] () -- C:\monitor.exe [2014-02-13 14:43:24 | 000,034,244 | ---- | M] () -- C:\monitorsvc.exe [2014-02-06 12:30:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-02-06 12:07:39 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-02-06 12:06:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-02-06 11:56:03 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-02-06 11:52:11 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-02-06 11:49:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-02-06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-02-06 11:48:11 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-02-06 11:32:49 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-02-06 11:17:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-02-06 11:11:37 | 005,768,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-02-06 11:01:36 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-02-06 11:00:46 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-02-06 10:57:13 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-02-06 10:52:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-02-06 10:50:32 | 002,041,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-02-06 10:49:22 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-02-06 10:47:22 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-02-06 10:46:27 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-02-06 10:25:43 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-02-06 10:09:30 | 001,964,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-02-06 09:40:06 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-02-06 09:34:31 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-02-23 16:03:16 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2014-02-23 16:03:16 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-02-23 12:22:44 | 000,000,452 | -H-- | C] () -- C:\Windows\tasks\Norton Security Scan for Tomek.job [2014-02-23 12:22:42 | 000,001,453 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK [2014-02-23 12:22:39 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSSx64\0400030.01B\isolate.ini [2014-02-23 08:50:11 | 000,001,325 | ---- | C] () -- C:\Users\Public\Desktop\FLV and Media Player.lnk [2014-02-23 08:45:16 | 000,003,976 | ---- | C] () -- C:\Windows\SysWow64\PCProtect.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | C] () -- C:\Windows\SysWow64\PCProtectOff.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | C] () -- C:\Windows\SysNative\PCProtectOff.ini [2014-02-23 08:43:53 | 000,000,571 | ---- | C] () -- C:\Windows\SysNative\MyDefrag.debuglog [2014-02-13 15:12:36 | 000,487,517 | ---- | C] () -- C:\monitor.exe [2014-02-13 14:43:24 | 000,034,244 | ---- | C] () -- C:\monitorsvc.exe [2013-01-22 16:01:34 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2013-01-22 15:47:09 | 001,638,694 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-11-25 19:16:02 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2012-10-27 17:32:18 | 000,008,552 | ---- | C] () -- C:\Users\Tomek\AppData\Local\soulseek-client.dat [2012-10-17 20:50:49 | 000,005,926 | ---- | C] () -- C:\Windows\HotFixList.ini [2012-03-26 18:19:10 | 000,755,188 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin [2012-03-26 18:19:08 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin [2012-03-26 18:03:46 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012-03-26 16:53:42 | 013,024,768 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-01-23 17:33:40 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Autodesk [2014-02-23 16:59:29 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Azureus [2013-07-08 04:41:27 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2014-02-23 08:50:57 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Fighters [2014-02-23 12:39:02 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\FLV and Media Player [2012-11-25 17:26:04 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Mathsoft [2014-02-20 17:14:23 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Mumble [2012-12-24 19:23:34 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\NapiProjekt [2014-02-20 17:13:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\TS3Client [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2014-02-23 16:58:51 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tomek\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16518) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,90 Gb Total Physical Memory | 5,24 Gb Available Physical Memory | 66,34% Memory free 15,80 Gb Paging File | 12,76 Gb Available in Paging File | 80,78% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 456,69 Gb Total Space | 388,35 Gb Free Space | 85,04% Space Free | Partition Type: NTFS Drive D: | 450,00 Gb Total Space | 318,48 Gb Free Space | 70,77% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Tomek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0B8D4F00-8C74-402E-886C-8FBD512A7300}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{0C070A7F-FC93-472C-BAF3-E30544E10C63}" = rport=139 | protocol=6 | dir=out | app=system | "{12DDD1E9-8676-4BC1-9ACF-42B7CE5A0672}" = lport=137 | protocol=17 | dir=in | app=system | "{41C16FF0-C521-4C32-95F9-342550108988}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{4B72E20E-FA51-48D7-B959-C02A023EC113}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5F110448-C23D-44CB-B340-D049481F5B35}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{67F66C2F-A98C-495E-A228-41F4A384FEF3}" = rport=138 | protocol=17 | dir=out | app=system | "{6D6BEF96-F1AA-4003-8853-E6314A1DDD14}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7A1A1C81-0C7C-4399-BB7B-33F1DCBAAD3D}" = rport=445 | protocol=6 | dir=out | app=system | "{7D510E25-B609-4289-A107-9726D39604A2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{7E6D7C0F-B7C8-42CB-AAE2-B0AC6511CAED}" = rport=137 | protocol=17 | dir=out | app=system | "{7EE2C10B-4957-474C-89FD-136CE319ABCD}" = lport=138 | protocol=17 | dir=in | app=system | "{900DFFC4-856C-4552-B8B3-2122F3D66D59}" = rport=10243 | protocol=6 | dir=out | app=system | "{A3204EC1-BD99-430B-8A55-96AB6A0F5B75}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{A47D74AD-6642-4184-A464-5F92FA2D6354}" = lport=2869 | protocol=6 | dir=in | app=system | "{B8E97C76-83B3-4EA2-A929-7697F754FD11}" = lport=10243 | protocol=6 | dir=in | app=system | "{C08197EB-B317-4010-9073-4BC70F628A8F}" = lport=139 | protocol=6 | dir=in | app=system | "{C5F380FA-B4B9-4228-84FC-F4422980CE57}" = lport=445 | protocol=6 | dir=in | app=system | "{C9FFD1F6-AF82-4AF5-88AF-75F649BA2AFE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{EDC44DC8-D4E5-4EFC-9D33-41A8B7030C1F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{FD7F8AE4-621B-4241-9863-DEF25EC25946}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02421082-946F-4D85-9A2C-D91420E61093}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{02D589EA-37E7-4E94-B75A-96C35B955375}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{03E5D0A6-507D-4FF8-9B51-0EE762048780}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{0590B240-60D2-4CE8-B338-4FEF1C833D29}" = protocol=6 | dir=in | app=d:\gry\starcraft\starcraft.exe | "{071594C7-DE12-4CF9-A686-C2AA35DAD2EA}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | "{0D309FF0-92DC-4B36-8AC5-785C62FB8ABD}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{171834C8-5D96-4276-9FFE-68B5AE92C0DF}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | "{18D023B2-9855-4497-AA57-64931091D6E2}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe | "{1A3F937F-2D4A-4DC9-AEB7-0AB22C52F13C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{1DC4A5E0-C08C-44F8-B4E4-AE8D9083A876}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{22ADEE27-C0A2-48D0-BBDE-124C873CFECC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{2BEA7EAA-286D-42F1-8681-D804D446FA06}" = protocol=17 | dir=in | app=d:\gry\diablo iii\diablo iii.exe | "{31216568-98CB-4F80-9CCF-21DF8316A689}" = protocol=58 | dir=in | app=system | "{433AD2FB-90F3-4FFD-964B-78B21938D572}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{44071E57-ABDF-4F21-BD54-51B0397D7D16}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{45C28E04-FF50-4FF5-8F3A-E2B95C53BF9A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{4754D60D-A43E-4715-AA3C-0B3552AE821B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{48779DDC-ACB5-4E3E-AD37-C908A4D65663}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{4F9E4995-4F35-4B98-B4F5-3A2F31757470}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{53A1E52A-63D5-4308-AADF-A83FD8B0B316}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{558989AF-0730-42F2-B4C4-85871DCDAF03}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{57D1B0B7-CF5D-4BA1-903E-A09F1D9E3214}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{5A4D2705-46FE-4CFB-9916-21827863DDC0}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{5C06B9F6-4DE1-4A1B-85C9-8E9C57F338B8}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{61B7C5D9-BB22-4023-A050-778864C13AF6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{63475A88-36B5-4E60-9340-551B4675087B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{63D3F785-86F6-466B-B402-F197040A196A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{63EB98E7-E9F7-4B2F-9999-C48F17AAB36D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{7345A7B1-D579-4631-B90B-1CA6B6C26E8B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{747D78CA-3E4B-46A9-9DA9-7D7C8B4873F4}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{833D022B-E03B-4077-BD4A-B5F823089A5E}" = protocol=17 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{986CB2B6-9766-460D-B15B-F226143C407D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{9F084FA0-980A-45FA-B623-9251691D5604}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{9F8AB6D2-0D57-4F26-88FE-6F7F437B880C}" = protocol=17 | dir=in | app=d:\gry\starcraft\starcraft.exe | "{A5499D6E-F721-4886-934F-55A3DDEDA223}" = dir=in | app=c:\program files (x86)\cyberlink\media+player10\media+player10.exe | "{A68A8ED5-2051-4FA8-B2C4-8982B0D9F960}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B1F6DE74-0564-4B39-A1AA-B48E41735E66}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | "{B234A1F4-8D04-4781-8A6C-0557DD0BAE13}" = protocol=6 | dir=out | app=system | "{B25435F3-6AAF-48B0-A0A4-2CABFA1336F7}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{B31EA6DC-9611-4F24-8CE5-DCC79370D2F8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{BDEDA1DF-0C34-49CA-AE67-63BA63CB0DCF}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | "{C1FE2735-18C8-4CCF-839F-16C9596E0D3C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{C25433D6-519B-429D-AB2B-A38DC8246942}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | "{C8826FB9-86C6-4CFC-BB8B-F965D5F88089}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{C966F6C8-6B23-4AEB-BA3E-E0DD8D10AEEA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{D948D7D0-FE8E-40CA-8E13-AB3B02EF608D}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{DA3F0B88-29B3-4525-AEFA-3FDD5F4CD49B}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe | "{DAB2BBCF-EAB5-4326-AEAC-EB70F84EA1CE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{DBA849CA-7200-474F-9330-8BA305F03438}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{E61E0781-F9A1-4542-BF17-7A31BB9FB884}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{E96B95B0-A325-4CA4-99AD-07EAC4599ABF}" = protocol=6 | dir=in | app=d:\gry\diablo iii\diablo iii.exe | "{F5CF056A-4EA0-4A5E-8932-21F3AF284A8D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F653CDC3-E92F-4845-99C5-AA1E9452D996}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{F6BA7584-1997-43AB-B501-4E8B56F107BC}" = protocol=17 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "TCP Query User{272AFD9E-EE19-47A8-B923-46180EE419CC}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "TCP Query User{86BA4508-EC55-41FA-B98F-E6E531B33D60}D:\gry\starcraft\starcraft.exe" = protocol=6 | dir=in | app=d:\gry\starcraft\starcraft.exe | "TCP Query User{B4806436-C4CB-4E58-B86C-6AF9754B0268}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "TCP Query User{CEBF39E5-C087-4063-A8CF-CCA6BF728BD7}D:\gry\lineage ii\system\l2.exe" = protocol=6 | dir=in | app=d:\gry\lineage ii\system\l2.exe | "TCP Query User{E4B95468-B68B-4203-8314-1AB490A378A8}C:\program files\vuze\azureus.exe" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | "TCP Query User{FE354C11-6C07-4D01-AFD2-3BBD8A53FB45}C:\users\tomek\desktop\dl\starcraft\starcraft.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\starcraft\starcraft.exe | "UDP Query User{12B044BE-10EA-4A8E-87A9-4F3054209C87}C:\users\tomek\desktop\dl\starcraft\starcraft.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\starcraft\starcraft.exe | "UDP Query User{4699F29C-3385-48B9-8041-C63523F64138}D:\gry\starcraft\starcraft.exe" = protocol=17 | dir=in | app=d:\gry\starcraft\starcraft.exe | "UDP Query User{476A7014-2254-447A-A5E2-93BB8017DD81}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "UDP Query User{4971FC46-8A07-41B1-8750-EB67C7050379}C:\program files\vuze\azureus.exe" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | "UDP Query User{6EE6EFA2-1207-46F9-96CD-A32B77447E92}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "UDP Query User{E74DCAE3-583C-4C99-BFB9-664D2B60CD86}D:\gry\lineage ii\system\l2.exe" = protocol=17 | dir=in | app=d:\gry\lineage ii\system\l2.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{0738F5F1-8E70-49A6-8692-F5722E1E5A4D}" = Easy Support Center "{09536BA1-E498-4CC3-B834-D884A67D7E34}" = Intel® Trusted Connect Service Client "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display "{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}" = Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5783F2D7-7001-0415-0102-0060B0CE6BBA}" = AutoCAD 2009 - Polski "{5783F2D7-A030-0415-0102-0060B0CE6BBA}" = AutoCAD Structural Detailing 2012 - Polski "{5783F2D7-A030-0415-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - Polski "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 296.87 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 296.87 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.7.13 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.0213 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{DF7756DD-656A-45C3-BA71-74673E8259A9}" = Oprogramowanie Intel® PROSet/Wireless WiFi "{F0932859-AA60-459E-B843-0BDECA34E2C7}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "8461-7759-5462-8226" = Vuze "AutoCAD 2009 - Polski" = AutoCAD 2009 - Polski "AutoCAD Structural Detailing 2012 - Polski" = AutoCAD Structural Detailing 2012 - Polski "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "ProInst" = Intel PROSet Wireless "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinRAR archiver" = WinRAR 4.20 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Usługa Autodesk Content Service "{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 5 "{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Settings "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite "{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}" = Mathcad 14.0 M020 Help "{21040472-F8DF-48A9-A093-2986C1495670}" = Lineage® II: Freya (High Five) "{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver "{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21 "{34FBC7C4-CD31-4D93-A428-0E524EAC4586}" = CyberLink Media+ Player10 "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.7 "{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01) "{62C4063B-948A-4C89-801B-A0B64DE4FF5B}" = Mumble 1.2.4 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012 "{65806C17-4C8E-4788-8072-309164E15137}_is1" = Zuzia10 System kosztorysowy "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8796E14E-2031-463F-8A9A-31062B2652B4}" = Mathcad 14.0 M020 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012 "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{93F34C5C-ACAA-48F3-9B26-70359A117F12}" = Intel(R) WiDi "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) "{B750B5C2-CC17-4967-905B-29F4EB986131}" = Software Launcher "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX "{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}" = Mathcad 14.0 M020 Resource Center "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.188 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F5CA78D9-B5E9-421E-8DF9-0B418BCBD563}" = LogMeIn Hamachi "{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}" = Quake Live Mozilla Plugin "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime "4game" = 4game "4game_lineage2eu" = LineageII EU "4game_lineage2pl" = LineageII PL "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Diablo III" = Diablo III "FLV and Media Player" = FLV and Media Player (3.2.0.3) "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite "InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}" = CyberLink Media+ Player10 "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go "InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "LiveVDO" = LiveVDO "LogMeIn Hamachi" = LogMeIn Hamachi "Mozilla Firefox 27.0.1 (x86 pl)" = Mozilla Firefox 27.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NapiProjekt_is1" = NapiProjekt (2.1.0.2287) "NSS" = Norton Security Scan "Sizzling Hot by Czciciel" = Sizzling Hot by Czciciel "SoulseekQt" = SoulseekQt "TeamSpeak 3 Client" = TeamSpeak 3 Client "Winamp" = Winamp [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-02-20 02:12:16 | Computer Name = Laptop | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\Autodesk\AutoCAD Structural Detailing 2012 - Polski\FaroImporter.exe". Nie można odnaleźć zestawu zależnego FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2014-02-22 12:50:45 | Computer Name = Laptop | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\Autodesk\AutoCAD Structural Detailing 2012 - Polski\FaroImporter.exe". Nie można odnaleźć zestawu zależnego FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2014-02-23 04:00:55 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = Error - 2014-02-23 04:01:04 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 08:24:42 | Computer Name = Laptop | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\Autodesk\AutoCAD Structural Detailing 2012 - Polski\FaroImporter.exe". Nie można odnaleźć zestawu zależnego FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2014-02-23 11:16:15 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = Error - 2014-02-23 11:16:21 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 11:24:53 | Computer Name = Laptop | Source = VSS | ID = 8194 Description = Error - 2014-02-23 11:26:33 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 11:26:33 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = [ Autodesk REX Events ] Error - 2013-01-24 15:39:04 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 15:45:41 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:36:08 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:36:32 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:45:07 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:26:08 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:33:47 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:34:24 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - Unhandled exception. Assembly name: DReinfBeam: Indeks wykraczał poza granice tablicy.; StackTrace: w R9cwy0DPsPISP5wPAr7.XTqVLgD8Tm9DxeNTa7j.GQtlauho0(Object , Int32 , String ) w vUGa6gztbZKcGaMkN0.bpWwcr6A4TtxnNgEIr.YirYgujrO(Object , EventArgs ) w System.EventHandler.Invoke(Object sender, EventArgs e) w System.Windows.Forms.Control.set_Text(String value) w System.Windows.Forms.TextBoxBase.set_Text(String value) w System.Windows.Forms.TextBox.set_Text(String value) w REX.Controls.Forms.CREXEditbox.EditBox.GkfTGGp6E(String ) w REX.Controls.Forms.CREXEditbox.EditBox.0vMjSh1U3() w REX.Controls.Forms.CREXEditbox.EditBox.ValidateControl(String text) w REX.Controls.Forms.CREXEditbox.EditBox.ValidateControl() w REX.Controls.Forms.CREXEditbox.EditBox.Homhc6FIC(Object , EventArgs ) w System.Windows.Forms.ContainerControl.UpdateFocusedControl() Error - 2013-01-25 12:57:04 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-25 12:59:10 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) [ System Events ] Error - 2013-08-27 23:21:45 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-08-27 23:21:45 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 Error - 2013-09-01 04:56:55 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-09-01 04:56:55 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 Error - 2013-09-02 06:05:59 | Computer Name = Laptop | Source = Service Control Manager | ID = 7031 Description = Usługa 4game-service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7030 Description = Usługa LogMeIn Hamachi Tunneling Engine jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą LogMeIn Hamachi Tunneling Engine. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi LogMeIn Hamachi Tunneling Engine z powodu następującego błędu: %%1053 Error - 2013-09-10 21:21:28 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-09-10 21:21:28 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 < End of report >

**Posty:** 4765 · przez **ordynat** 23 Lut 2014, 19:06

MOD - [2014-02-19 22:27:26 | 000,639,488 | ---- | M] () -- C:\Program Files\Update Software\winclient32.exe
MOD - [2014-02-14 15:05:34 | 000,236,544 | ---- | M] () -- C:\Program Files\Update Software\sqlite3.dll
MOD - [2014-01-03 23:09:58 | 001,716,224 | ---- | M] () -- C:\Program Files\Update Software\ntvmon32.exe
SRV - [2014-02-13 14:43:24 | 000,034,244 | ---- | M] () [Auto | Stopped] -- C:\monitorsvc.exe -- (ProtectMonitor)
O4:64bit: - HKLM..\Run: [Windows 32 bit client manager] C:\Program Files\Update Software\winclient32.exe ()
O4:64bit: - HKLM..\Run: [Windows DLL Host Monitor] C:\Program Files\Update Software\ntvmon32.exe ()
[2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Update Software
[2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\Program Files\Update Software
[2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Retro PC Calculator
[2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\Retro PC Calculator
[2014-02-23 08:45:10 | 000,330,624 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysNative\PCProtect64.dll
[2014-02-23 08:45:09 | 000,293,984 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysWow64\PCProtect.dll
[2014-02-23 08:44:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Web Protect
[2014-02-23 08:40:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Fighters
[2014-02-23 08:40:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2014-02-23 08:45:16 | 000,003,976 | ---- | M] () -- C:\Windows\SysWow64\PCProtect.ini
[2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysWow64\PCProtectOff.ini
[2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysNative\PCProtectOff.ini

Noie znam tych obiektów.
Pliki sprawdź na -> JOTTI/ albo na VIRUSTOTAL

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
[2014-02-23 08:37:31 | 000,000,000 | ---D | C] -- C:\Users\Tomek\.android
[2014-02-23 08:37:29 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache

:Reg
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-21-1306820354-990092275-3131752356-1000\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.

**Posty:** 2 · przez **throllu** 23 Lut 2014, 19:52

Wg VIRUSTOTAL:
winclient32.exe - McAfee-GW-Edition Heuristic.BehavesLike.Win32.ModifiedUPX.F
sqlie3.dll - czysto
ntvmon32.exe - AVG Generic35.BXPG
AhnLab-V3 Trojan/Win32.Pasta
McAfee Artemis!D0D6D4A67A62
McAfee-GW-Edition Artemis!D0D6D4A67A62
Microsoft Trojan:Win32/Tivmonk.A
TrendMicro-HouseCall TROJ_GEN.R0C9H01BI14
VIPRE Trojan.Win32.Generic!BT
monitorsvc.exe - CMC Trojan-Clicker.Win32.Agent!O

resztę sprawdzę później i podeślę, ale widze trojany jakieś a norton tego nie znalazł

Raport:

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== C:\Users\Tomek\.android folder moved successfully. C:\Users\Tomek\AppData\Local\cache folder moved successfully. ========== REGISTRY ========== Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope not found. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-21-1306820354-990092275-3131752356-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: Tomek ->Temp folder emptied: 27867942 bytes ->Temporary Internet Files folder emptied: 342611992 bytes ->Java cache emptied: 1 bytes ->FireFox cache emptied: 18624193 bytes ->Flash cache emptied: 10818 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 14025943 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42323626 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 425,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 02232014_182945 Files\Folders moved on Reboot... File\Folder C:\Users\Tomek\AppData\Local\Temp\hsperfdata_Tomek\2684 not found! C:\Users\Tomek\AppData\Local\Temp\e4j5D6B.tmp_dir1393170477\exe4jlib.jar moved successfully. File move failed. C:\Users\Tomek\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot. File move failed. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...

Kod: Zaznacz wszystko: OTL logfile created on: 2014-02-23 18:37:35 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tomek\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16518) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,90 Gb Total Physical Memory | 5,48 Gb Available Physical Memory | 69,34% Memory free 15,80 Gb Paging File | 13,32 Gb Available in Paging File | 84,30% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 456,69 Gb Total Space | 388,75 Gb Free Space | 85,12% Space Free | Partition Type: NTFS Drive D: | 450,00 Gb Total Space | 318,48 Gb Free Space | 70,77% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Tomek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-02-23 18:34:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe PRC - [2014-02-19 22:27:26 | 000,639,488 | ---- | M] () -- C:\Program Files\Update Software\winclient32.exe PRC - [2014-02-13 15:12:36 | 000,487,517 | ---- | M] () -- C:\monitor.exe PRC - [2014-02-13 01:36:25 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2014-02-04 14:56:52 | 003,813,712 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2014-01-03 23:09:58 | 001,716,224 | ---- | M] () -- C:\Program Files\Update Software\ntvmon32.exe PRC - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-10-17 16:43:25 | 000,363,800 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2012-10-17 16:43:25 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2012-10-17 16:43:25 | 000,277,784 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2012-10-17 16:43:25 | 000,161,560 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2012-10-17 16:43:25 | 000,128,280 | R--- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe PRC - [2012-05-30 19:55:26 | 001,112,968 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe PRC - [2012-05-28 01:16:00 | 002,458,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2012-05-02 07:03:44 | 002,279,304 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe PRC - [2012-04-25 12:18:10 | 000,784,264 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe PRC - [2012-02-13 14:02:24 | 000,031,624 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe PRC - [2012-01-31 14:56:48 | 001,640,328 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe PRC - [2011-12-19 18:16:50 | 001,104,208 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe PRC - [2011-12-19 18:16:48 | 001,304,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe PRC - [2011-12-19 18:16:44 | 001,014,096 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe PRC - [2011-12-19 18:16:42 | 000,936,272 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe PRC - [2011-12-19 18:12:06 | 004,467,280 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe PRC - [2010-11-21 04:24:27 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe PRC - [2010-09-20 11:24:42 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe PRC - [2009-11-02 13:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-02-19 22:27:26 | 000,639,488 | ---- | M] () -- C:\Program Files\Update Software\winclient32.exe MOD - [2014-02-14 15:05:34 | 000,236,544 | ---- | M] () -- C:\Program Files\Update Software\sqlite3.dll MOD - [2014-02-13 01:36:39 | 003,578,992 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2014-01-03 23:09:58 | 001,716,224 | ---- | M] () -- C:\Program Files\Update Software\ntvmon32.exe MOD - [2011-09-08 18:40:10 | 001,645,056 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll MOD - [2011-02-17 00:03:20 | 000,203,776 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\WinCRT.dll MOD - [2009-11-02 13:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009-11-02 13:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll MOD - [2006-08-12 11:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\HookDllPS2.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-02-06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2013-01-22 16:00:49 | 001,432,400 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2012-02-02 21:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2011-12-08 09:44:04 | 000,594,704 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV:[b]64bit:[/b] - [2011-12-08 09:43:56 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV:[b]64bit:[/b] - [2011-12-08 09:43:48 | 000,618,256 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2011-12-08 09:43:44 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2011-12-05 08:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:[b]64bit:[/b] - [2011-12-05 07:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014-02-13 14:43:24 | 000,034,244 | ---- | M] () [Auto | Stopped] -- C:\monitorsvc.exe -- (ProtectMonitor) SRV - [2014-02-13 01:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-04 14:56:50 | 002,222,416 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2014-02-04 10:37:32 | 000,377,616 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc) SRV - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-07-25 08:10:04 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-06-11 18:12:05 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-05-23 19:23:16 | 001,133,056 | ---- | M] (Innova Co S.a r.l.) [Auto | Stopped] -- D:\GRY\4game\4game-service.exe -- (4game-service) SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2013-01-22 13:54:37 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2012-10-24 18:16:51 | 004,702,568 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc) SRV - [2012-10-17 16:43:25 | 000,363,800 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012-10-17 16:43:25 | 000,277,784 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012-10-17 16:43:25 | 000,161,560 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2012-10-17 16:43:25 | 000,128,280 | R--- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) SRV - [2012-06-11 14:11:08 | 000,276,288 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012-05-28 01:16:00 | 002,458,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012-02-13 14:02:24 | 000,031,624 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe -- (SamsungDeviceConfigurationWinService) SRV - [2011-12-19 18:16:50 | 001,104,208 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2011-12-19 18:16:48 | 001,304,912 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2011-12-19 18:16:44 | 001,014,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-02-23 16:25:05 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,786,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,355,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2012-10-17 16:43:25 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,648,808 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,410,384 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2012-10-17 16:43:24 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2012-05-28 01:16:00 | 000,029,032 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2012-03-26 18:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-12-20 16:38:38 | 000,042,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WDKMD.sys -- (wdkmd) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2011-12-14 13:26:56 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (ibtfltcoex) DRV:[b]64bit:[/b] - [2011-12-13 10:26:20 | 000,747,008 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf) DRV:[b]64bit:[/b] - [2011-12-13 10:26:18 | 000,094,720 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:[b]64bit:[/b] - [2011-12-13 10:26:14 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio) DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:[b]64bit:[/b] - [2011-12-01 21:51:00 | 011,417,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) DRV:[b]64bit:[/b] - [2011-11-29 18:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-09-22 13:39:44 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI) DRV:[b]64bit:[/b] - [2011-08-17 15:19:38 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2011-04-11 18:55:24 | 000,007,680 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SGDrv64.sys -- (SGDrv) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) DRV:[b]64bit:[/b] - [2009-03-25 16:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV - [2014-02-21 08:05:18 | 000,063,200 | ---- | M] (Innova) [Kernel | On_Demand | Stopped] -- D:\GRY\Lineage II\Frost\frost.sys -- (Frost_5_8_1_8) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1306820354-990092275-3131752356-1004\..\SearchScopes,DefaultScope = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@4game.com/plugin: D:\GRY\4game\npplugin4game.dll (Innova Co S.a r.l.) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-02-23 16:14:18 | 000,000,000 | ---D | M] [2014-02-23 16:03:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomek\AppData\Roaming\Mozilla\Extensions [2014-02-23 17:31:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\r12j0mzz.default\extensions [2014-02-23 17:31:36 | 000,957,290 | ---- | M] () (No name found) -- C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\r12j0mzz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15 17:04:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014-02-23 16:03:10 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012-10-29 13:06:24 | 000,172,032 | ---- | M] (LiveVDO.tv) -- C:\Program Files (x86)\mozilla firefox\plugins\npfflivevdoplg.dll O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Windows 32 bit client manager] C:\Program Files\Update Software\winclient32.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Windows DLL Host Monitor] C:\Program Files\Update Software\ntvmon32.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1306820354-990092275-3131752356-1004..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-1306820354-990092275-3131752356-1004..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: = O7 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000016 - C:\Windows\SysNative\PCProtect64.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\SysWow64\PCProtect.dll (Objectify Media Inc) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..Trusted Domains: 4game.com ([]https in Trusted sites) O15 - HKU\S-1-5-21-1306820354-990092275-3131752356-1000\..Trusted Ranges: Range1 ([https] in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{013688B0-001C-4589-AC8C-762461DA3CCA}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{21a393e8-80d0-11e3-b828-a581700fbbd5}\Shell - "" = AutoRun O33 - MountPoints2\{21a393e8-80d0-11e3-b828-a581700fbbd5}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true O33 - MountPoints2\{7a9e3af1-4d49-11e3-9032-905ac7e91dd9}\Shell - "" = AutoRun O33 - MountPoints2\{7a9e3af1-4d49-11e3-9032-905ac7e91dd9}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{95362358-188e-11e2-9b69-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{95362358-188e-11e2-9b69-806e6f6e6963}\Shell\AutoRun\command - "" = E:\SecSWMgrGuide.exe O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-02-23 18:29:45 | 000,000,000 | ---D | C] -- C:\_OTL [2014-02-23 16:25:05 | 000,386,680 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-02-23 16:11:53 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-02-23 16:03:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2014-02-23 12:22:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64 [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Scan [2014-02-23 12:22:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64\0400030.01B [2014-02-23 12:22:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2014-02-23 08:56:14 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\vlc [2014-02-23 08:56:14 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\FLV and Media Player [2014-02-23 08:49:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Applian Technologies [2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Update Software [2014-02-23 08:46:41 | 000,000,000 | ---D | C] -- C:\Program Files\Update Software [2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Retro PC Calculator [2014-02-23 08:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\Retro PC Calculator [2014-02-23 08:45:10 | 000,330,624 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysNative\PCProtect64.dll [2014-02-23 08:45:09 | 000,293,984 | ---- | C] (Objectify Media Inc) -- C:\Windows\SysWow64\PCProtect.dll [2014-02-23 08:44:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Web Protect [2014-02-23 08:40:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Fighters [2014-02-23 08:40:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2014-02-19 09:11:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Basen_Dziennik_skan [2014-02-19 09:10:43 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\BUKOWINA [2014-02-15 17:04:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-02-15 06:10:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2014-02-15 06:10:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2014-02-14 18:09:04 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014-02-14 18:08:00 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-02-14 18:08:00 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-02-14 18:08:00 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-02-14 18:08:00 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-02-14 18:07:59 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-02-14 18:07:59 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-02-14 18:07:59 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-02-14 18:07:58 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-02-14 18:07:58 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-02-14 18:07:58 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-02-14 18:07:58 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-02-14 18:07:58 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-02-14 18:07:58 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-02-14 18:07:58 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-02-14 18:07:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-02-14 18:07:58 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-02-14 18:07:57 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-02-14 18:07:57 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-02-14 18:07:57 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014-02-14 18:07:57 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-02-14 18:07:55 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-02-14 18:07:55 | 001,964,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-02-14 18:07:53 | 005,768,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-02-13 22:13:34 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2014-02-13 22:13:34 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2014-02-13 22:13:21 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2014-02-13 22:13:21 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-02-23 18:39:54 | 001,662,556 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-02-23 18:39:54 | 000,737,980 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-02-23 18:39:54 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-02-23 18:39:54 | 000,154,636 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-02-23 18:39:54 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-02-23 18:38:59 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-02-23 18:38:59 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-02-23 18:31:22 | 000,000,828 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job [2014-02-23 18:31:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-02-23 18:31:00 | 4187,402,239 | -HS- | M] () -- C:\hiberfil.sys [2014-02-23 18:12:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-02-23 16:25:05 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-02-23 16:15:41 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Tomek.job [2014-02-23 16:03:16 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-02-23 15:35:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job [2014-02-23 12:22:42 | 000,001,453 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK [2014-02-23 08:50:11 | 000,001,325 | ---- | M] () -- C:\Users\Public\Desktop\FLV and Media Player.lnk [2014-02-23 08:45:16 | 000,003,976 | ---- | M] () -- C:\Windows\SysWow64\PCProtect.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysWow64\PCProtectOff.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | M] () -- C:\Windows\SysNative\PCProtectOff.ini [2014-02-23 08:43:53 | 000,000,571 | ---- | M] () -- C:\Windows\SysNative\MyDefrag.debuglog [2014-02-14 18:17:23 | 001,638,694 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014-02-13 15:12:36 | 000,487,517 | ---- | M] () -- C:\monitor.exe [2014-02-13 14:43:24 | 000,034,244 | ---- | M] () -- C:\monitorsvc.exe [2014-02-06 12:30:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-02-06 12:07:39 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-02-06 12:06:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-02-06 11:56:03 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-02-06 11:52:11 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-02-06 11:49:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-02-06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-02-06 11:48:11 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-02-06 11:32:49 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-02-06 11:17:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-02-06 11:11:37 | 005,768,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-02-06 11:01:36 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-02-06 11:00:46 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-02-06 10:57:13 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-02-06 10:52:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-02-06 10:50:32 | 002,041,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-02-06 10:49:22 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-02-06 10:47:22 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-02-06 10:46:27 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-02-06 10:25:43 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-02-06 10:09:30 | 001,964,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-02-06 09:40:06 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-02-06 09:34:31 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-02-23 16:03:16 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2014-02-23 16:03:16 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-02-23 12:22:44 | 000,000,452 | -H-- | C] () -- C:\Windows\tasks\Norton Security Scan for Tomek.job [2014-02-23 12:22:42 | 000,001,453 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK [2014-02-23 12:22:39 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSSx64\0400030.01B\isolate.ini [2014-02-23 08:50:11 | 000,001,325 | ---- | C] () -- C:\Users\Public\Desktop\FLV and Media Player.lnk [2014-02-23 08:45:16 | 000,003,976 | ---- | C] () -- C:\Windows\SysWow64\PCProtect.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | C] () -- C:\Windows\SysWow64\PCProtectOff.ini [2014-02-23 08:45:16 | 000,002,184 | ---- | C] () -- C:\Windows\SysNative\PCProtectOff.ini [2014-02-23 08:43:53 | 000,000,571 | ---- | C] () -- C:\Windows\SysNative\MyDefrag.debuglog [2014-02-13 15:12:36 | 000,487,517 | ---- | C] () -- C:\monitor.exe [2014-02-13 14:43:24 | 000,034,244 | ---- | C] () -- C:\monitorsvc.exe [2013-01-22 16:01:34 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2013-01-22 15:47:09 | 001,638,694 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-11-25 19:16:02 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2012-10-27 17:32:18 | 000,008,552 | ---- | C] () -- C:\Users\Tomek\AppData\Local\soulseek-client.dat [2012-10-17 20:50:49 | 000,005,926 | ---- | C] () -- C:\Windows\HotFixList.ini [2012-03-26 18:19:10 | 000,755,188 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin [2012-03-26 18:19:08 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin [2012-03-26 18:03:46 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012-03-26 16:53:42 | 013,024,768 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-01-23 17:33:40 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Autodesk [2014-02-23 18:30:34 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Azureus [2013-07-08 04:41:27 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2014-02-23 08:50:57 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Fighters [2014-02-23 17:18:14 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\FLV and Media Player [2012-11-25 17:26:04 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Mathsoft [2014-02-20 17:14:23 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Mumble [2012-12-24 19:23:34 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\NapiProjekt [2014-02-20 17:13:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\TS3Client [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2014-02-23 18:37:35 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tomek\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16518) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,90 Gb Total Physical Memory | 5,48 Gb Available Physical Memory | 69,34% Memory free 15,80 Gb Paging File | 13,32 Gb Available in Paging File | 84,30% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 456,69 Gb Total Space | 388,75 Gb Free Space | 85,12% Space Free | Partition Type: NTFS Drive D: | 450,00 Gb Total Space | 318,48 Gb Free Space | 70,77% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Tomek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1306820354-990092275-3131752356-1000\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0B8D4F00-8C74-402E-886C-8FBD512A7300}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{0C070A7F-FC93-472C-BAF3-E30544E10C63}" = rport=139 | protocol=6 | dir=out | app=system | "{12DDD1E9-8676-4BC1-9ACF-42B7CE5A0672}" = lport=137 | protocol=17 | dir=in | app=system | "{41C16FF0-C521-4C32-95F9-342550108988}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{4B72E20E-FA51-48D7-B959-C02A023EC113}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5F110448-C23D-44CB-B340-D049481F5B35}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{67F66C2F-A98C-495E-A228-41F4A384FEF3}" = rport=138 | protocol=17 | dir=out | app=system | "{6D6BEF96-F1AA-4003-8853-E6314A1DDD14}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7A1A1C81-0C7C-4399-BB7B-33F1DCBAAD3D}" = rport=445 | protocol=6 | dir=out | app=system | "{7D510E25-B609-4289-A107-9726D39604A2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{7E6D7C0F-B7C8-42CB-AAE2-B0AC6511CAED}" = rport=137 | protocol=17 | dir=out | app=system | "{7EE2C10B-4957-474C-89FD-136CE319ABCD}" = lport=138 | protocol=17 | dir=in | app=system | "{900DFFC4-856C-4552-B8B3-2122F3D66D59}" = rport=10243 | protocol=6 | dir=out | app=system | "{A3204EC1-BD99-430B-8A55-96AB6A0F5B75}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{A47D74AD-6642-4184-A464-5F92FA2D6354}" = lport=2869 | protocol=6 | dir=in | app=system | "{B8E97C76-83B3-4EA2-A929-7697F754FD11}" = lport=10243 | protocol=6 | dir=in | app=system | "{C08197EB-B317-4010-9073-4BC70F628A8F}" = lport=139 | protocol=6 | dir=in | app=system | "{C5F380FA-B4B9-4228-84FC-F4422980CE57}" = lport=445 | protocol=6 | dir=in | app=system | "{C9FFD1F6-AF82-4AF5-88AF-75F649BA2AFE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{EDC44DC8-D4E5-4EFC-9D33-41A8B7030C1F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{FD7F8AE4-621B-4241-9863-DEF25EC25946}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02421082-946F-4D85-9A2C-D91420E61093}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{02D589EA-37E7-4E94-B75A-96C35B955375}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{03E5D0A6-507D-4FF8-9B51-0EE762048780}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{04C129D4-B31E-4876-BC78-7C173EB18806}" = protocol=58 | dir=in | app=system | "{0590B240-60D2-4CE8-B338-4FEF1C833D29}" = protocol=6 | dir=in | app=d:\gry\starcraft\starcraft.exe | "{071594C7-DE12-4CF9-A686-C2AA35DAD2EA}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | "{0D309FF0-92DC-4B36-8AC5-785C62FB8ABD}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{171834C8-5D96-4276-9FFE-68B5AE92C0DF}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | "{18D023B2-9855-4497-AA57-64931091D6E2}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe | "{1A3F937F-2D4A-4DC9-AEB7-0AB22C52F13C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{1DC4A5E0-C08C-44F8-B4E4-AE8D9083A876}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{22ADEE27-C0A2-48D0-BBDE-124C873CFECC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{2BEA7EAA-286D-42F1-8681-D804D446FA06}" = protocol=17 | dir=in | app=d:\gry\diablo iii\diablo iii.exe | "{433AD2FB-90F3-4FFD-964B-78B21938D572}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{45C28E04-FF50-4FF5-8F3A-E2B95C53BF9A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{4754D60D-A43E-4715-AA3C-0B3552AE821B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{48779DDC-ACB5-4E3E-AD37-C908A4D65663}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{4F9E4995-4F35-4B98-B4F5-3A2F31757470}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{53A1E52A-63D5-4308-AADF-A83FD8B0B316}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{558989AF-0730-42F2-B4C4-85871DCDAF03}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{57D1B0B7-CF5D-4BA1-903E-A09F1D9E3214}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{5A4D2705-46FE-4CFB-9916-21827863DDC0}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{5C06B9F6-4DE1-4A1B-85C9-8E9C57F338B8}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{61B7C5D9-BB22-4023-A050-778864C13AF6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{63475A88-36B5-4E60-9340-551B4675087B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{63D3F785-86F6-466B-B402-F197040A196A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{63EB98E7-E9F7-4B2F-9999-C48F17AAB36D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{7345A7B1-D579-4631-B90B-1CA6B6C26E8B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{747D78CA-3E4B-46A9-9DA9-7D7C8B4873F4}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{7C1F4A3D-0636-485A-8B31-6B87487BF2A6}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{833D022B-E03B-4077-BD4A-B5F823089A5E}" = protocol=17 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "{986CB2B6-9766-460D-B15B-F226143C407D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{9F084FA0-980A-45FA-B623-9251691D5604}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{9F8AB6D2-0D57-4F26-88FE-6F7F437B880C}" = protocol=17 | dir=in | app=d:\gry\starcraft\starcraft.exe | "{A5499D6E-F721-4886-934F-55A3DDEDA223}" = dir=in | app=c:\program files (x86)\cyberlink\media+player10\media+player10.exe | "{A68A8ED5-2051-4FA8-B2C4-8982B0D9F960}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B1F6DE74-0564-4B39-A1AA-B48E41735E66}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | "{B234A1F4-8D04-4781-8A6C-0557DD0BAE13}" = protocol=6 | dir=out | app=system | "{B25435F3-6AAF-48B0-A0A4-2CABFA1336F7}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{B31EA6DC-9611-4F24-8CE5-DCC79370D2F8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{BDEDA1DF-0C34-49CA-AE67-63BA63CB0DCF}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | "{C1FE2735-18C8-4CCF-839F-16C9596E0D3C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{C25433D6-519B-429D-AB2B-A38DC8246942}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | "{C8826FB9-86C6-4CFC-BB8B-F965D5F88089}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{C966F6C8-6B23-4AEB-BA3E-E0DD8D10AEEA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{D948D7D0-FE8E-40CA-8E13-AB3B02EF608D}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{DA3F0B88-29B3-4525-AEFA-3FDD5F4CD49B}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe | "{DAB2BBCF-EAB5-4326-AEAC-EB70F84EA1CE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{DBA849CA-7200-474F-9330-8BA305F03438}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{E61E0781-F9A1-4542-BF17-7A31BB9FB884}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{E96B95B0-A325-4CA4-99AD-07EAC4599ABF}" = protocol=6 | dir=in | app=d:\gry\diablo iii\diablo iii.exe | "{F5CF056A-4EA0-4A5E-8932-21F3AF284A8D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F653CDC3-E92F-4845-99C5-AA1E9452D996}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{F6BA7584-1997-43AB-B501-4E8B56F107BC}" = protocol=17 | dir=in | app=c:\users\tomek\appdata\roaming\spotify\spotify.exe | "TCP Query User{272AFD9E-EE19-47A8-B923-46180EE419CC}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "TCP Query User{86BA4508-EC55-41FA-B98F-E6E531B33D60}D:\gry\starcraft\starcraft.exe" = protocol=6 | dir=in | app=d:\gry\starcraft\starcraft.exe | "TCP Query User{B4806436-C4CB-4E58-B86C-6AF9754B0268}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "TCP Query User{CEBF39E5-C087-4063-A8CF-CCA6BF728BD7}D:\gry\lineage ii\system\l2.exe" = protocol=6 | dir=in | app=d:\gry\lineage ii\system\l2.exe | "TCP Query User{E4B95468-B68B-4203-8314-1AB490A378A8}C:\program files\vuze\azureus.exe" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | "TCP Query User{FE354C11-6C07-4D01-AFD2-3BBD8A53FB45}C:\users\tomek\desktop\dl\starcraft\starcraft.exe" = protocol=6 | dir=in | app=c:\users\tomek\desktop\dl\starcraft\starcraft.exe | "UDP Query User{12B044BE-10EA-4A8E-87A9-4F3054209C87}C:\users\tomek\desktop\dl\starcraft\starcraft.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\starcraft\starcraft.exe | "UDP Query User{4699F29C-3385-48B9-8041-C63523F64138}D:\gry\starcraft\starcraft.exe" = protocol=17 | dir=in | app=d:\gry\starcraft\starcraft.exe | "UDP Query User{476A7014-2254-447A-A5E2-93BB8017DD81}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "UDP Query User{4971FC46-8A07-41B1-8750-EB67C7050379}C:\program files\vuze\azureus.exe" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | "UDP Query User{6EE6EFA2-1207-46F9-96CD-A32B77447E92}C:\users\tomek\desktop\dl\l2tower\l2tower.exe" = protocol=17 | dir=in | app=c:\users\tomek\desktop\dl\l2tower\l2tower.exe | "UDP Query User{E74DCAE3-583C-4C99-BFB9-664D2B60CD86}D:\gry\lineage ii\system\l2.exe" = protocol=17 | dir=in | app=d:\gry\lineage ii\system\l2.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{0738F5F1-8E70-49A6-8692-F5722E1E5A4D}" = Easy Support Center "{09536BA1-E498-4CC3-B834-D884A67D7E34}" = Intel® Trusted Connect Service Client "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display "{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}" = Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5783F2D7-7001-0415-0102-0060B0CE6BBA}" = AutoCAD 2009 - Polski "{5783F2D7-A030-0415-0102-0060B0CE6BBA}" = AutoCAD Structural Detailing 2012 - Polski "{5783F2D7-A030-0415-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - Polski "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 296.87 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 296.87 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.7.13 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.0213 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{DF7756DD-656A-45C3-BA71-74673E8259A9}" = Oprogramowanie Intel® PROSet/Wireless WiFi "{F0932859-AA60-459E-B843-0BDECA34E2C7}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "8461-7759-5462-8226" = Vuze "AutoCAD 2009 - Polski" = AutoCAD 2009 - Polski "AutoCAD Structural Detailing 2012 - Polski" = AutoCAD Structural Detailing 2012 - Polski "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "ProInst" = Intel PROSet Wireless "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinRAR archiver" = WinRAR 4.20 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Usługa Autodesk Content Service "{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 5 "{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Settings "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite "{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}" = Mathcad 14.0 M020 Help "{21040472-F8DF-48A9-A093-2986C1495670}" = Lineage® II: Freya (High Five) "{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver "{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21 "{34FBC7C4-CD31-4D93-A428-0E524EAC4586}" = CyberLink Media+ Player10 "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.7 "{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01) "{62C4063B-948A-4C89-801B-A0B64DE4FF5B}" = Mumble 1.2.4 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012 "{65806C17-4C8E-4788-8072-309164E15137}_is1" = Zuzia10 System kosztorysowy "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8796E14E-2031-463F-8A9A-31062B2652B4}" = Mathcad 14.0 M020 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012 "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{93F34C5C-ACAA-48F3-9B26-70359A117F12}" = Intel(R) WiDi "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) "{B750B5C2-CC17-4967-905B-29F4EB986131}" = Software Launcher "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX "{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}" = Mathcad 14.0 M020 Resource Center "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.188 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F5CA78D9-B5E9-421E-8DF9-0B418BCBD563}" = LogMeIn Hamachi "{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}" = Quake Live Mozilla Plugin "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime "4game" = 4game "4game_lineage2eu" = LineageII EU "4game_lineage2pl" = LineageII PL "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Diablo III" = Diablo III "FLV and Media Player" = FLV and Media Player (3.2.0.3) "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite "InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}" = CyberLink Media+ Player10 "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go "InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "LiveVDO" = LiveVDO "LogMeIn Hamachi" = LogMeIn Hamachi "Mozilla Firefox 27.0.1 (x86 pl)" = Mozilla Firefox 27.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NapiProjekt_is1" = NapiProjekt (2.1.0.2287) "NSS" = Norton Security Scan "Sizzling Hot by Czciciel" = Sizzling Hot by Czciciel "SoulseekQt" = SoulseekQt "TeamSpeak 3 Client" = TeamSpeak 3 Client "Winamp" = Winamp [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-02-23 04:00:55 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = Error - 2014-02-23 04:01:04 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 08:24:42 | Computer Name = Laptop | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\Autodesk\AutoCAD Structural Detailing 2012 - Polski\FaroImporter.exe". Nie można odnaleźć zestawu zależnego FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2014-02-23 11:16:15 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = Error - 2014-02-23 11:16:21 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 11:24:53 | Computer Name = Laptop | Source = VSS | ID = 8194 Description = Error - 2014-02-23 11:26:33 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 11:26:33 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = Error - 2014-02-23 13:31:41 | Computer Name = Laptop | Source = Autodesk Content Service | ID = 0 Description = Nie można uruchomić usługi. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase w Connect.MetaStore.MetaStorage.Initialize() w Connect.IVault.IVault.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2014-02-23 13:31:42 | Computer Name = Laptop | Source = WinMgmt | ID = 10 Description = [ Autodesk REX Events ] Error - 2013-01-24 15:39:04 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 15:45:41 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:36:08 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:36:32 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 17:45:07 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:26:08 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:33:47 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-24 18:34:24 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - Unhandled exception. Assembly name: DReinfBeam: Indeks wykraczał poza granice tablicy.; StackTrace: w R9cwy0DPsPISP5wPAr7.XTqVLgD8Tm9DxeNTa7j.GQtlauho0(Object , Int32 , String ) w vUGa6gztbZKcGaMkN0.bpWwcr6A4TtxnNgEIr.YirYgujrO(Object , EventArgs ) w System.EventHandler.Invoke(Object sender, EventArgs e) w System.Windows.Forms.Control.set_Text(String value) w System.Windows.Forms.TextBoxBase.set_Text(String value) w System.Windows.Forms.TextBox.set_Text(String value) w REX.Controls.Forms.CREXEditbox.EditBox.GkfTGGp6E(String ) w REX.Controls.Forms.CREXEditbox.EditBox.0vMjSh1U3() w REX.Controls.Forms.CREXEditbox.EditBox.ValidateControl(String text) w REX.Controls.Forms.CREXEditbox.EditBox.ValidateControl() w REX.Controls.Forms.CREXEditbox.EditBox.Homhc6FIC(Object , EventArgs ) w System.Windows.Forms.ContainerControl.UpdateFocusedControl() Error - 2013-01-25 12:57:04 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) Error - 2013-01-25 12:59:10 | Computer Name = Laptop | Source = AREX | ID = 0 Description = AREX.Engine - GetContextDefinition error!INTERNAL_ANGLE / INTERNAL_ANGLE: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.; StackTrace: w System.Object.GetType() w 1BQaaV4Mqitl93rDHqs.1uOoFj4CKctQdgkREsa.J8CQaXbqJ(Object , Object , Boolean ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.y0cNAALm9(pGJ0WZ4r3V6jKcsaoTK , Object , String ) w JCHl44K4MMibKxPH92E.ise6D3KXrvZLx7ElCdP.YTVHVa0uy(Object , Object , String ) [ System Events ] Error - 2013-08-27 23:21:45 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-08-27 23:21:45 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 Error - 2013-09-01 04:56:55 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-09-01 04:56:55 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 Error - 2013-09-02 06:05:59 | Computer Name = Laptop | Source = Service Control Manager | ID = 7031 Description = Usługa 4game-service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7030 Description = Usługa LogMeIn Hamachi Tunneling Engine jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą LogMeIn Hamachi Tunneling Engine. Error - 2013-09-08 12:31:36 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi LogMeIn Hamachi Tunneling Engine z powodu następującego błędu: %%1053 Error - 2013-09-10 21:21:28 | Computer Name = Laptop | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą 4game-service. Error - 2013-09-10 21:21:28 | Computer Name = Laptop | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi 4game-service z powodu następującego błędu: %%1053 < End of report >

Dodano Dzisiaj, 17:30:
up