Sprawdzenie logów o olt

[polak0221]

prosze o sprawdzenie loga z olt z gory dzienkuje

Kod: Zaznacz wszystko



OTL logfile created on: 2013-10-27 11:39:34 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\krzysiek\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

3,99 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 41,38% Memory free
8,21 Gb Paging File | 5,38 Gb Available in Paging File | 65,56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 141,67 Gb Total Space | 85,60 Gb Free Space | 60,42% Space Free | Partition Type: NTFS
Drive D: | 79,49 Gb Total Space | 72,54 Gb Free Space | 91,26% Space Free | Partition Type: NTFS

Computer Name: KRZYSIEK-PC | User Name: krzysiek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2013-10-25 06:05:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\krzysiek\Downloads\OTL.exe
PRC - [2013-10-09 09:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2013-10-01 13:14:40 | 005,087,584 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013-09-02 21:35:59 | 000,829,392 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2008-11-12 23:26:59 | 000,341,280 | ---- | M] () -- C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe
PRC - [2008-07-30 03:29:26 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2008-07-30 01:53:00 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
PRC - [2008-07-30 01:52:56 | 000,454,704 | ---- | M] (Egis inc.) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2013-09-02 21:35:56 | 000,410,576 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
MOD - [2013-09-02 21:35:55 | 013,599,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
MOD - [2013-09-02 21:35:54 | 004,053,456 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll
MOD - [2013-09-02 21:35:04 | 000,709,584 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
MOD - [2013-09-02 21:35:03 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll
MOD - [2013-09-02 21:35:01 | 001,604,560 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
MOD - [2008-07-30 03:29:26 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2013-10-20 02:23:22 | 006,254,152 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV:[b]64bit:[/b] - [2013-09-24 11:53:30 | 000,164,056 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV:[b]64bit:[/b] - [2008-11-28 18:56:06 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe -- (ETService)
SRV:[b]64bit:[/b] - [2008-01-21 03:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2006-11-29 01:45:16 | 000,410,624 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\DRIVERS\xaudio64.exe -- (XAudioService)
SRV - [2013-10-09 09:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013-10-01 13:14:40 | 005,087,584 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-04-25 17:12:00 | 000,580,232 | ---- | M] (WiseCleaner.com) [Auto | Stopped] -- C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe -- (WiseBootAssistant)
SRV - [2010-03-18 21:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-08-24 13:16:12 | 000,378,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2008-11-12 23:26:59 | 000,341,280 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe -- (SiteAdvisor Service)
SRV - [2008-07-30 01:53:00 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008-07-27 19:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007-12-07 01:16:16 | 000,132,096 | ---- | M] () [Auto | Running] -- C:\Acer\Mobility Center\MobilityService.exe -- (MobilityService)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2013-09-24 10:54:06 | 000,023,168 | ---- | M] () [File_System | System | Running] -- C:\Windows\SysNative\DRIVERS\cmderd.sys -- (cmderd)
DRV:[b]64bit:[/b] - [2012-12-19 03:07:30 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\rminiv3.sys -- (mirrorv3)
DRV:[b]64bit:[/b] - [2011-07-04 18:58:18 | 000,085,504 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV:[b]64bit:[/b] - [2011-07-04 18:58:16 | 000,138,752 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbnet.sys -- (ewusbnet)
DRV:[b]64bit:[/b] - [2011-07-04 18:58:16 | 000,121,600 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV:[b]64bit:[/b] - [2011-07-04 18:58:16 | 000,117,248 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV:[b]64bit:[/b] - [2011-07-04 18:58:16 | 000,013,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV:[b]64bit:[/b] - [2008-11-17 23:50:30 | 004,751,360 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64)
DRV:[b]64bit:[/b] - [2008-10-08 18:42:40 | 000,006,656 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\hidshim.sys -- (hidshim)
DRV:[b]64bit:[/b] - [2008-10-08 18:42:38 | 000,024,576 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\nuvotonhidgeneric.sys -- (nuvotonhidgeneric)
DRV:[b]64bit:[/b] - [2008-09-25 14:39:48 | 000,058,912 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2008-09-20 02:43:58 | 000,068,096 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTSTOR64.SYS -- (RTSTOR)
DRV:[b]64bit:[/b] - [2008-07-30 01:53:50 | 000,060,976 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys -- (psdvdisk)
DRV:[b]64bit:[/b] - [2008-07-30 01:53:50 | 000,021,040 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys -- (PSDNServ)
DRV:[b]64bit:[/b] - [2008-07-30 01:53:48 | 000,022,064 | ---- | M] () [File_System | Boot | Running] -- C:\Windows\SysNative\DRIVERS\psdfilter.sys -- (PSDFilter)
DRV:[b]64bit:[/b] - [2008-06-26 01:39:02 | 000,252,928 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2008-04-25 19:08:46 | 000,325,168 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2008-01-21 03:51:07 | 000,016,384 | ---- | M] () [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2008-01-21 03:47:28 | 000,046,080 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:[b]64bit:[/b] - [2008-01-21 03:46:57 | 000,286,720 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\VSTAZL6.SYS -- (HSFHWAZL)
DRV:[b]64bit:[/b] - [2006-12-22 21:33:28 | 001,511,936 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAX_DPV.sys -- (HSF_DPV)
DRV:[b]64bit:[/b] - [2006-12-22 21:30:50 | 000,300,032 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAXHWAZL.sys -- (CAXHWAZL)
DRV:[b]64bit:[/b] - [2006-12-22 21:29:48 | 000,731,648 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAX_CNXT.sys -- (winachsf)
DRV:[b]64bit:[/b] - [2006-11-29 01:45:06 | 000,009,728 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\xaudio64.sys -- (XAudio)
DRV:[b]64bit:[/b] - [2006-06-19 23:27:24 | 000,017,024 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\mdmxsdk.sys -- (mdmxsdk)
DRV - [2008-09-30 17:42:20 | 000,017,952 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\int15_64.sys -- (int15)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp64&d=0713&m=aspire_8730
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp64&d=0713&m=aspire_8730
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.yahoo.com?fr=fp-comodo
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_en___PL547
IE - HKCU\..\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}: "URL" = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-comodo"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-comodo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "http://pl.yahoo.com?fr=fp-comodo"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0
FF - prefs.js..keyword.URL: "http://pl.search.yahoo.com/search?fr=ytff-comodo&p="
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\krzysiek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)


[2013-09-15 14:37:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\krzysiek\AppData\Roaming\mozilla\Extensions
[2013-09-27 15:39:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\krzysiek\AppData\Roaming\mozilla\Firefox\Profiles\hjk0s7ke.default\extensions
[2013-10-05 10:19:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013-10-26 07:13:44 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013-10-05 10:19:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013-10-26 07:13:44 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013-10-05 06:28:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2013-10-03 16:09:12 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:[b]64bit:[/b] - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4:[b]64bit:[/b] - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (COMODO)
O4:[b]64bit:[/b] - HKLM..\Run: [eDataSecurity Loader] C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe (Egis Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll ()
O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.dll ()
O4:[b]64bit:[/b] - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Plus Internet] C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx (WRC Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.7.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E020608-C19F-40FA-88F4-46C33A5551EE}: DhcpNameServer = 192.168.7.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E020608-C19F-40FA-88F4-46C33A5551EE}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3934D6E8-A1A1-4E28-BA84-1F027B194926}: NameServer = 156.154.70.25,156.154.71.25
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\siteadvisor {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAd64.dll ()
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\siteadvisor {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.dll ()
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - Explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013-10-26 21:40:57 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013-10-26 19:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2013-10-25 14:09:00 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Documents\Nowy folder (5)
[2013-10-25 14:09:00 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Documents\Nowy folder (4)
[2013-10-25 14:09:00 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Documents\Nowy folder (3)
[2013-10-25 14:09:00 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Documents\Nowy folder (2)
[2013-10-25 14:08:58 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Documents\Nowy folder
[2013-10-18 14:05:24 | 000,000,000 | ---D | C] -- C:\Bak
[2013-10-17 18:56:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
[2013-10-17 18:56:26 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Canneverbe Limited
[2013-10-17 18:56:24 | 000,000,000 | ---D | C] -- C:\Program Files\CDBurnerXP
[2013-10-17 18:50:16 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\Desktop\Nowy folder
[2013-10-15 13:56:53 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\WinRAR
[2013-10-15 13:52:00 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Plus Internet
[2013-10-15 13:50:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus Internet
[2013-10-15 13:50:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Plus Internet
[2013-10-14 09:23:38 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Local\ElevatedDiagnostics
[2013-10-10 14:51:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
[2013-10-10 14:51:52 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2013-10-10 14:49:31 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-10-10 14:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-10-10 14:49:27 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013-10-10 13:10:08 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Wise Care 365
[2013-10-10 13:09:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365
[2013-10-10 13:09:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wise
[2013-10-10 13:03:16 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\VSRevoGroup
[2013-10-10 12:57:40 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2013-10-05 10:19:01 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013-10-05 10:19:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013-10-05 10:19:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013-10-04 21:21:20 | 000,000,000 | -H-D | C] -- C:\VTRoot
[2013-10-03 16:21:18 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Comodo
[2013-10-03 16:11:45 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013-10-03 16:11:42 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013-10-03 16:11:42 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Local\temp
[2013-10-03 16:02:23 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013-10-03 16:02:23 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013-10-03 16:02:23 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013-10-03 16:01:04 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013-10-03 15:32:45 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013-10-03 15:08:27 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2013-10-03 14:23:37 | 000,000,000 | ---D | C] -- C:\Windows\Lhsp
[2013-10-03 14:01:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
[2013-10-03 14:00:28 | 000,000,000 | --SD | C] -- C:\ProgramData\Shared Space
[2013-10-03 13:59:34 | 000,000,000 | ---D | C] -- C:\Program Files\COMODO
[2013-10-03 13:59:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo
[2013-10-03 13:59:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo Downloader
[2013-10-03 13:11:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\F-Secure
[2013-10-03 13:08:51 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure
[2013-09-27 21:39:13 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Roaming\Unity
[2013-09-27 21:34:03 | 000,000,000 | ---D | C] -- C:\Users\krzysiek\AppData\Local\Unity

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013-10-27 11:40:49 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat
[2013-10-27 10:21:02 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-10-27 10:21:02 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-10-27 08:36:24 | 000,032,156 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2013-10-27 08:36:23 | 000,032,156 | ---- | M] () -- C:\ProgramData\nvModes.001
[2013-10-27 08:27:16 | 000,703,388 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-10-27 08:27:16 | 000,595,996 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-10-27 08:27:16 | 000,104,070 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-10-27 08:21:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml
[2013-10-27 08:20:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-10-26 23:46:37 | 000,307,784 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013-10-26 23:01:57 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013-10-26 21:40:57 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013-10-26 19:30:57 | 000,001,001 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
[2013-10-25 19:33:34 | 000,041,730 | ---- | M] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2013-10-17 18:56:26 | 000,001,700 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2013-10-15 13:50:22 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Plus Internet.lnk
[2013-10-10 14:51:52 | 000,001,610 | ---- | M] () -- C:\Users\Public\Desktop\Recuva.lnk
[2013-10-10 13:34:14 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\Wise Turbo Checker.job
[2013-10-10 13:34:13 | 000,000,428 | ---- | M] () -- C:\Windows\tasks\Wise Care 365.job
[2013-10-10 13:09:53 | 000,001,019 | ---- | M] () -- C:\Users\krzysiek\Application Data\Microsoft\Internet Explorer\Quick Launch\Wise Care 365.lnk
[2013-10-10 13:09:53 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Wise Care 365.lnk
[2013-10-10 12:57:40 | 000,001,103 | ---- | M] () -- C:\Users\krzysiek\Desktop\Revo Uninstaller.lnk
[2013-10-08 16:34:38 | 000,013,696 | ---- | M] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.29.jpg
[2013-10-08 16:34:30 | 000,013,390 | ---- | M] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.29[01].jpg
[2013-10-08 16:27:38 | 000,016,771 | ---- | M] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.27.jpg
[2013-10-05 14:25:26 | 000,001,795 | ---- | M] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk
[2013-10-05 10:19:01 | 000,002,501 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-10-04 06:12:01 | 000,000,004 | ---- | M] () -- C:\Users\krzysiek\AppData\Roaming\cache.ini
[2013-10-03 16:09:12 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013-10-03 14:26:16 | 000,001,795 | ---- | M] () -- C:\Users\krzysiek\Application Data\Microsoft\Internet Explorer\Quick Launch\COMODO Internet Security.lnk
[2013-10-03 14:01:17 | 000,000,549 | ---- | M] () -- C:\Users\Public\Desktop\Współdzielona przestrzeń.lnk

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013-10-26 23:01:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2013-10-26 19:30:57 | 000,001,013 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk
[2013-10-26 19:30:57 | 000,001,001 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
[2013-10-17 18:56:26 | 000,001,700 | ---- | C] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2013-10-17 18:56:25 | 000,001,644 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2013-10-15 13:50:52 | 000,093,696 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys
[2013-10-15 13:50:52 | 000,085,504 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_jubusenum.sys
[2013-10-15 13:50:52 | 000,055,296 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys
[2013-10-15 13:50:52 | 000,029,184 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_juextctrl.sys
[2013-10-15 13:50:52 | 000,022,528 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys
[2013-10-15 13:50:41 | 000,999,936 | ---- | C] () -- C:\Windows\SysNative\drivers\mod7700.sys
[2013-10-15 13:50:41 | 000,138,752 | ---- | C] () -- C:\Windows\SysNative\drivers\ewusbnet.sys
[2013-10-15 13:50:41 | 000,121,600 | ---- | C] () -- C:\Windows\SysNative\drivers\ewusbmdm.sys
[2013-10-15 13:50:41 | 000,029,696 | ---- | C] () -- C:\Windows\SysNative\drivers\ewdcsc.sys
[2013-10-15 13:50:41 | 000,013,952 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys
[2013-10-15 13:50:30 | 000,117,248 | ---- | C] () -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys
[2013-10-15 13:50:22 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Plus Internet.lnk
[2013-10-10 14:51:52 | 000,001,610 | ---- | C] () -- C:\Users\Public\Desktop\Recuva.lnk
[2013-10-10 13:34:13 | 000,000,408 | ---- | C] () -- C:\Windows\tasks\Wise Turbo Checker.job
[2013-10-10 13:34:12 | 000,000,428 | ---- | C] () -- C:\Windows\tasks\Wise Care 365.job
[2013-10-10 13:09:53 | 000,001,019 | ---- | C] () -- C:\Users\krzysiek\Application Data\Microsoft\Internet Explorer\Quick Launch\Wise Care 365.lnk
[2013-10-10 13:09:53 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Wise Care 365.lnk
[2013-10-10 12:57:40 | 000,001,103 | ---- | C] () -- C:\Users\krzysiek\Desktop\Revo Uninstaller.lnk
[2013-10-08 16:32:49 | 000,013,390 | ---- | C] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.29[01].jpg
[2013-10-08 16:32:47 | 000,013,696 | ---- | C] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.29.jpg
[2013-10-08 16:32:46 | 000,016,771 | ---- | C] () -- C:\Users\krzysiek\Desktop\P08-10-13_17.27.jpg
[2013-10-05 10:19:01 | 000,002,501 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-10-03 16:02:23 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013-10-03 16:02:23 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013-10-03 16:02:23 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013-10-03 16:02:23 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013-10-03 16:02:23 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013-10-03 14:26:16 | 000,001,795 | ---- | C] () -- C:\Users\krzysiek\Application Data\Microsoft\Internet Explorer\Quick Launch\COMODO Internet Security.lnk
[2013-10-03 14:16:39 | 000,041,730 | ---- | C] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2013-10-03 14:02:33 | 001,474,832 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat
[2013-10-03 14:01:19 | 000,001,795 | ---- | C] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk
[2013-10-03 14:01:17 | 000,000,549 | ---- | C] () -- C:\Users\Public\Desktop\Współdzielona przestrzeń.lnk
[2013-10-03 13:12:37 | 000,000,004 | ---- | C] () -- C:\Users\krzysiek\AppData\Roaming\cache.ini
[2013-09-24 10:03:11 | 000,000,024 | -HS- | C] () -- C:\Users\krzysiek\AppData\Roaming\System5908ConfigCollection.dat
[2013-09-24 10:03:11 | 000,000,024 | -HS- | C] () -- C:\Users\krzysiek\AppData\Roaming\1D959CA221C7573.sys
[2013-08-15 12:41:22 | 000,000,037 | -HS- | C] () -- C:\Users\krzysiek\AppData\Local\70149b02515b3bb20dd492.47983420
[2013-08-11 07:26:46 | 000,003,584 | ---- | C] () -- C:\Users\krzysiek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-07-30 10:25:36 | 000,000,680 | ---- | C] () -- C:\Users\krzysiek\AppData\Local\d3d9caps.dat
[2013-07-27 22:35:10 | 000,049,152 | ---- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll
[2013-07-27 20:56:30 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2013-07-27 18:29:28 | 000,032,156 | ---- | C] () -- C:\ProgramData\nvModes.001
[2013-07-27 12:43:22 | 000,032,156 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2013-07-27 12:01:00 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll
[2013-07-27 12:01:00 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2013-07-27 12:01:00 | 000,000,036 | ---- | C] () -- C:\Windows\PidList.ini

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2006-11-02 16:30:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2011-01-21 16:56:31 | 012,898,304 | ---- | M] ()
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2011-01-21 16:46:32 | 011,582,464 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-03-03 05:53:36 | 000,891,392 | ---- | M] ()
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\fastprox.dll -- [2009-03-03 05:36:24 | 000,615,424 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2008-01-21 03:50:58 | 000,513,024 | ---- | M] ()
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\wbemess.dll

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:793F316E
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:F3176E45
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:DBC416F8
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:73933431
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:DAFD38AE
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:9F683177
@Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 109 bytes -> C:\ProgramData\Temp:DFC5A2B2

< End of report >

[Tres3K]

Czytaj regulamin, bo raczej jeszcze tego nie zrobiłeś - > wszystko-o-logach-aktualizacja-30-01-2012-vt117887.html

Chodzi mi dokładnie o nazwanie tematu, i napisz w czym jest problem. Inaczej nikt Ci nie odpowie.

[dobiegniew]

Kod: Zaznacz wszystko

OTL Extras logfile created on: 2014-09-12 10:43:47 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\zbyszek\Pobrane
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17280)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,34 Gb Available Physical Memory | 44,86% Memory free
5,99 Gb Paging File | 3,73 Gb Available in Paging File | 62,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 222,55 Gb Total Space | 128,26 Gb Free Space | 57,63% Space Free | Partition Type: NTFS

Computer Name: PAVILION | User Name: zbyszek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = OperaStable] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1"
https [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0247FCE6-5CC8-4DF3-9304-CF7BCA1FCB24}" = rport=137 | protocol=17 | dir=out | app=system |
"{2B8EBDC6-17AB-4283-82CC-094964C7CB13}" = rport=138 | protocol=17 | dir=out | app=system |
"{31A8842F-2A77-4952-9DF9-6DEE1E8E4561}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{364A4773-E5CC-4AE5-9513-FFD4ADA6207D}" = lport=445 | protocol=6 | dir=in | app=system |
"{36E52F23-74E4-4C98-A125-4EDC9FB128DD}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{59DC191D-75B4-4026-A285-5C06ABF333BE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{88C1DD4E-79DB-4FF2-B0FF-46588DF79A9F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8D9E5B12-F6E4-4428-8FC9-90B785668634}" = lport=137 | protocol=17 | dir=in | app=system |
"{9DEFE200-34B6-44E6-9D33-EE8FF2ECB42D}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{A039A95D-9AD0-4911-B57B-3E26C908AB2D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{A41AAEB8-592E-4A07-B36E-F5C326410D48}" = lport=10243 | protocol=6 | dir=in | app=system |
"{AEC86E81-AE23-4C1F-A32B-8ED026B2D65B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B1972138-940F-46FA-BCB9-43E5D0A97275}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C98AD276-1663-43A2-9870-FEFA61A6DEDB}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CF36E254-6088-41C3-9BB2-D999792B8A29}" = rport=445 | protocol=6 | dir=out | app=system |
"{D1859CC2-0D0F-41C8-8A8C-8C9BB22BFEAF}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{DCE041D4-FCD3-43FD-B4C4-7EA82CF79B5B}" = rport=139 | protocol=6 | dir=out | app=system |
"{E4DFDDEC-5025-4DE2-B77B-63EF5AA8128E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E87E7AD1-772A-4C84-8A56-4BBAB21033F5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EB4B14BC-A0A9-4044-9A10-ED7CED41C808}" = lport=138 | protocol=17 | dir=in | app=system |
"{EC5BA8C0-1FE5-4B5D-807B-7A9E921698B1}" = lport=139 | protocol=6 | dir=in | app=system |
"{F2EF790A-3400-4030-8789-4CC9E1A74892}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F4F16B78-F5CF-40B5-BFF7-6EF666A77160}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F5A71EA8-2B5E-4ED9-927D-891B7F43A110}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FF8CC462-F162-45CA-A66E-661356AFEE8F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01AA2ACC-02AA-4EE2-AE0D-866CEDA6E1E4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{01FAF800-4F0D-454C-AB04-824679A32B9C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{0697F8AA-791E-40B0-889C-446511BC7059}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{10FB7CB5-61BD-4D04-B152-BC0B62FD418B}" = protocol=6 | dir=in | app=c:\program files\avid\studio\programs\ngstudio.exe |
"{113DA406-F92B-49CF-8E27-4F98D57B902F}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{14F4A454-5475-4155-81F7-3EE17E7D6989}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{152FAE67-C1FE-4056-9B07-FA197AC72112}" = protocol=6 | dir=in | app=c:\program files\lg software\lg smart share\dmr\smartsharedmr.exe |
"{169528D2-FFE4-4EFE-A3E7-20B9CFF7790C}" = protocol=17 | dir=in | app=c:\program files\avid\studio\programs\rm.exe |
"{1986CD2E-0C28-429D-BDE3-B99139D5E0B5}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1BAD7122-06F5-4C7F-B82F-B674A083FFF3}" = protocol=6 | dir=in | app=c:\program files\movies app\datamngr\srtool~1\ie\dtuser.exe |
"{1D00A198-20E5-48B0-AF21-64883AA812B3}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{1DA6C65B-545B-48BE-964E-8D9F560BF078}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1E62B221-FFA3-4D2C-80D3-4C6A8DAB0B2E}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{23016A99-EF53-430C-BB8E-BF346F43E42F}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{23A3390F-82D5-4FEC-A120-BF7BEB338F07}" = protocol=6 | dir=in | app=c:\program files\avid\studio\programs\umi.exe |
"{23ADD098-EE79-4E7E-BC9B-92A3EB89BC71}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{250A971F-316F-4738-9343-0901D32B1B56}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{27893526-459D-48BE-807C-5A9F703CA45D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{2A24845E-E175-463C-B0F9-2837594D6AD9}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 15\programs\umi.exe |
"{2BF06471-0F9A-49D8-BDE5-C1D52CF8AD82}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{2CB825FA-0499-430C-BA12-0E6FDD3ACC0A}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |
"{2D98B6E9-E701-46EF-ABF3-B4D0A604CD0D}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{30C4B8BC-2318-425F-9C37-71BC9DA1D9ED}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{35DC6C6D-7A23-4C22-BBDD-90656E9B9D74}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{3603AAD0-8909-4B32-9F4B-194589933D98}" = protocol=6 | dir=in | app=c:\program files\avid\studio\programs\rm.exe |
"{3A3CF4B1-71C7-498F-BAF5-F8D8686B6ACE}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{3D18571C-868B-49DB-8A6A-CF4692152EBE}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{3EBE0846-80EE-4369-AA7A-87AD7BB93F0B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4477B03B-1B58-4D91-A9EC-F5BCE5713E52}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 17\programs\umi.exe |
"{4D630D0E-A098-4427-A8F0-4F9D4F45ABCC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4D75A303-54B5-447B-A4E1-5D21E5AFF397}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 17\programs\ngstudio.exe |
"{502A6B8F-9439-4638-B931-457216AC8D31}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{525D0E14-2E49-445F-BBE0-E1957D46169D}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpoews01.exe |
"{60A1D606-FA8E-42AC-A627-A69D4E74528A}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{632CFF8C-5BAF-45ED-8ECE-3807A8BDD9EE}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqcopy2.exe |
"{66E1CF15-F234-4B9D-B4E7-B3ADC4F73385}" = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{67437CDE-0C77-4AC1-81E2-333468820D38}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 17\programs\rm.exe |
"{69AC258B-ACB4-4E03-8802-6EEBB25AC2AC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6AF176D3-93CC-4679-B4A5-3BB20AC482B4}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |
"{6B2B665B-AABB-45CC-8D7E-1FAA52B4433D}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6F1B525C-4F6C-4808-8B10-E32442BA664C}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 15\programs\studio.exe |
"{708D89F7-4EF6-4DB6-BB6A-AE6F073B4DCB}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{7297AF9D-0B58-43DC-98DE-D28E5B8C93E1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{765D8E1B-46E6-4200-A328-7A21C6F2B397}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{77963850-B4D5-44F6-BC98-0AE964D8F26E}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 15\programs\umi.exe |
"{77D06EA3-79BA-4921-B5D6-1434F67FEF75}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{7B1E28AD-F3FF-488C-9EE5-FDD18486A50A}" = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |
"{7E69374B-3FDD-4EF0-95C1-54FCC58144E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{7EBADE6E-EE5C-481F-839C-19DB7160DC30}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{7F7C1E1B-D046-422C-AD4A-114921311E28}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{82C6F0D1-CBBA-4DC1-9DE2-698EB1786913}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{844801D8-6FF0-4A4E-9E37-CB813D4A82D7}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{890727F1-C6F8-468B-BB28-F31B681D2426}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8E82CBC9-C316-4F91-80D1-9C42C4458046}" = protocol=17 | dir=in | app=c:\program files\nero\km\nmdllhost.exe |
"{8F5E5A73-E688-4383-988A-944D0319AA7F}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpfccopy.exe |
"{8F76377B-BE38-4300-990D-616BD1BF72F9}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgm.exe |
"{8F81F659-1AAC-46A3-BB7E-52C95A08AF1D}" = protocol=17 | dir=in | app=c:\program files\lg software\lg smart share\dms\smartsharedms.exe |
"{9111BD02-AF7E-4587-A4E9-1188505F2F62}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe |
"{91EE80FB-8D13-4947-A69D-B40181381FBE}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |
"{9611C6A0-35DF-4490-AE59-745D5FD52F58}" = protocol=17 | dir=in | app=c:\program files\nero\nero blu-ray player\blu-rayplayer.exe |
"{974CC1EA-F315-4588-8E96-36F90B2F27EB}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{99FA5B14-B46B-4624-A7AF-D6608A5413D2}" = protocol=6 | dir=out | app=system |
"{9A4E01CD-3F6B-4DB8-86BC-E797B9E26611}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{9B3BD7B5-A7D8-4F74-A476-3D4432C000CB}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{9C764D7F-502F-4CD5-81AA-7773B26AAAAD}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A01875DD-22B2-4051-BC98-833BBA5B3475}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A3EC4843-5887-44E2-9EC9-CDD848321448}" = protocol=6 | dir=in | app=c:\program files\nero\nero blu-ray player\blu-rayplayer.exe |
"{A59280A4-62C8-492A-82D1-3281098DB832}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A66E61F9-D973-493F-AD83-A6ADC1E80516}" = protocol=6 | dir=in | app=c:\program files\lg software\lg smart share\dms\smartsharedms.exe |
"{AC2E223E-F899-48CB-9B13-FC2E1AC87382}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 17\programs\umi.exe |
"{AEF37B38-8BBE-4EA3-84CD-9A54EA98C6B8}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |
"{AFEB6755-C7AF-4B54-8AEF-C77E543C13D2}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 17\programs\ngstudio.exe |
"{B7ECE351-F9DC-4B2B-AC4D-3F1A8372E644}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{BB4F06C8-4B7C-4033-B381-E127F079E65E}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{BCBF6820-B1C0-4722-AC14-A6687C013F04}" = protocol=17 | dir=in | app=c:\program files\avid\studio\programs\umi.exe |
"{BDEDF732-9705-4ADA-B2E9-DE10E6A45D97}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgh.exe |
"{BFD1D7B8-6DC9-4937-9C15-ADB03A063319}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C01E9DC8-30D6-4749-9940-32D8ED70E791}" = protocol=17 | dir=in | app=c:\users\zbyszek\appdata\roaming\dropbox\bin\dropbox.exe |
"{C17E67B9-2BA4-4EB2-BE09-4B3797C472F5}" = protocol=17 | dir=in | app=c:\program files\movies app\datamngr\srtool~1\ie\dtuser.exe |
"{C2848AB6-AF55-438B-A293-FCB3D1156621}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{C6E57B0E-7345-4782-B4FE-BECC6F59EB3D}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C7EA0781-5254-44B1-A12E-9E4471FF7C38}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{C8406D52-0CC1-473A-92B8-2C39DC1D2BC2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C9429F3C-D7EC-488A-9200-49A73CEC353F}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 15\programs\rm.exe |
"{C95DB0A3-D072-4B32-9DC7-B19D2321FE9A}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CC3E39FA-F4E7-43F1-B269-0DB0F6F08022}" = protocol=17 | dir=in | app=c:\program files\avid\studio\programs\ngstudio.exe |
"{D238D6CD-8C13-4332-A0C7-9DDD39F2D984}" = protocol=17 | dir=in | app=c:\program files\lg software\lg smart share\dmr\smartsharedmr.exe |
"{D2B43601-EE1C-4956-A09B-EA6777445EA2}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |
"{D3AE0793-CD85-4700-BDF5-194EBDCB97BD}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{D9AF1403-9532-48F3-9C96-65E3286487FD}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{DBC85A4A-C311-4923-817E-10DEA0905252}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E18D5D1C-2536-4E06-9639-E258ADAD9202}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{E2001AB3-7D17-44F1-8603-BC95D625DD63}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E5A35AAB-BE00-406E-99C5-A7086BAEF76B}" = protocol=6 | dir=in | app=c:\program files\nero\km\nmdllhost.exe |
"{E65FC301-2D6A-46AA-A7C7-8BBCC8B4CB5B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{E710B6B8-07DC-4207-9404-5217F1E2E8C9}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{E7FE8C00-9051-49EA-8DC7-CE365078C23F}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E860E6F5-A605-4E6E-B8E1-99CD7FD0EFA2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F1D3A8A0-6B9A-44BA-B341-BA333649C9CD}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |
"{F7A5FE82-6F17-4CD9-AD85-1CCDEE310FC3}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{F95869CE-E886-4533-B706-852AF71519BC}" = protocol=6 | dir=in | app=c:\users\zbyszek\appdata\roaming\dropbox\bin\dropbox.exe |
"{FAB51418-BEA4-4E31-BF6A-89287CDB20B8}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FBD48AFA-8C44-461C-A5D6-8DB44C24CEF4}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 15\programs\studio.exe |
"{FC77C220-C8DF-43A1-B4C3-CFCEF32CE231}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 15\programs\rm.exe |
"{FD16DE69-8A66-4939-B3C9-64C8322913CC}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 17\programs\rm.exe |
"{FD3C84E5-1B1B-42D9-991A-94E7EC61D0FE}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"TCP Query User{029D5367-06BC-407C-A881-59119FA67F3A}C:\windows\kmsemulator.exe" = protocol=6 | dir=in | app=c:\windows\kmsemulator.exe |
"TCP Query User{1DFAA78D-D04F-4BB6-A41C-D4E9B0FBC744}C:\program files\leawo\video converter\loadingscreen.exe" = protocol=6 | dir=in | app=c:\program files\leawo\video converter\loadingscreen.exe |
"TCP Query User{2CFE6113-C841-4A88-B1E5-337ABA902F00}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{5C627213-DDED-423C-9A97-E8D81F108FE0}C:\program files\tlen.pl\tlen.exe" = protocol=6 | dir=in | app=c:\program files\tlen.pl\tlen.exe |
"TCP Query User{6358517C-93F3-41C1-B514-5A23BB568CD5}C:\program files\leawo\dvd creator\loadingscreen.exe" = protocol=6 | dir=in | app=c:\program files\leawo\dvd creator\loadingscreen.exe |
"TCP Query User{778C57CC-B96B-4997-B0C7-6074C3961B17}C:\program files\tlen.pl\tlen.exe" = protocol=6 | dir=in | app=c:\program files\tlen.pl\tlen.exe |
"TCP Query User{7CE968C1-A4D5-4BF2-9C1B-0960B635AC94}C:\Program Files\Java\jre6\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\jdownloader.exe |
"TCP Query User{9232F029-A5D4-467C-8DCA-023558F91224}C:\program files\ppöúęö2.0\ihelper.exe" = protocol=6 | dir=in | app=c:\program files\ppöúęö2.0\ihelper.exe |
"TCP Query User{9F63572C-4133-419D-A14A-7C0C93B54341}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"TCP Query User{AE66C27F-8637-4D99-988C-400DAA4DC233}C:\program files\ppöúęö2.0\ihelper.exe" = protocol=6 | dir=in | app=c:\program files\ppöúęö2.0\ihelper.exe |
"TCP Query User{C1635E5F-9916-4EBA-8F97-ACFA1D3AF128}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{D45DB852-4865-4131-A630-C9944876E99B}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{D5C7DA2C-A842-4898-A357-1F05C7415E90}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{2DA52625-F8DC-40BB-88F0-EAEA02FEE6A6}C:\windows\kmsemulator.exe" = protocol=17 | dir=in | app=c:\windows\kmsemulator.exe |
"UDP Query User{304505CB-61DF-4DA2-B018-6629ED0FC474}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"UDP Query User{339A5066-750E-4F3F-9301-E0778A990FC5}C:\program files\leawo\dvd creator\loadingscreen.exe" = protocol=17 | dir=in | app=c:\program files\leawo\dvd creator\loadingscreen.exe |
"UDP Query User{42CB6FD3-9A55-4C76-93E5-FD44E5272D57}C:\program files\ppöúęö2.0\ihelper.exe" = protocol=17 | dir=in | app=c:\program files\ppöúęö2.0\ihelper.exe |
"UDP Query User{4587F758-D926-4A94-BBCF-56D019E09BEC}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{8DAE7C14-8C7C-4451-9B12-C34EAFC1DD18}C:\program files\ppöúęö2.0\ihelper.exe" = protocol=17 | dir=in | app=c:\program files\ppöúęö2.0\ihelper.exe |
"UDP Query User{8DCBA002-99B1-4C84-9E4D-0DDE1D6D293E}C:\program files\leawo\video converter\loadingscreen.exe" = protocol=17 | dir=in | app=c:\program files\leawo\video converter\loadingscreen.exe |
"UDP Query User{BDD6665F-02C4-4BB8-AB76-4AA0E3BC93E6}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{BE241BF2-9CBE-4988-9AE2-BCF0D087B78D}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{BFAFA2AA-D5C7-4D1A-839F-383D3DFEFD02}C:\program files\tlen.pl\tlen.exe" = protocol=17 | dir=in | app=c:\program files\tlen.pl\tlen.exe |
"UDP Query User{D1638E69-ADC6-4A5E-8C12-FBABEA49F8D1}C:\program files\tlen.pl\tlen.exe" = protocol=17 | dir=in | app=c:\program files\tlen.pl\tlen.exe |
"UDP Query User{F3A5425E-767D-4F80-887C-12A59A6541C2}C:\Program Files\Java\jre6\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\jdownloader.exe |
"UDP Query User{F4FEB665-F7B0-4E02-9971-F1F7DCB63503}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00A61104-74B5-4056-AD00-4397EF4FB141}" = iCloud
"{0299DF57-FF2E-42C6-A4D7-9480E537D191}" = Pinnacle Creative Pack Volume 2
"{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}" = Creative Pack Volume 1
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0A3925EA-5B0E-401B-A189-7419149747B2}" = Adobe AIR
"{0B9B3056-3E89-427D-BB27-B555F6077C47}" = Pinnacle Studio 17 Add-Ons
"{0CF7D22B-977C-43B2-9219-E03017FBAC6D}" = Nero Recode Help (CHM)
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1" = EZDownloader
"{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}" = ScoreFitter Volumes 1-2
"{103155E1-7E88-45C9-A429-B4DFDD5FEF99}" = ESET NOD32 Antivirus
"{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7
"{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1" = HD2 Toolkit wersja 4.1
"{160479AF-4A05-4EE5-B3E7-1625227567EB}_is1" = MiniTool Partition Wizard Professional Edition 7.5
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{178D71F4-DFB1-40EC-9D95-326FD8A3E7A0}" = Motion Graphics Toolkit for Studio
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1D273D91-D7D5-4036-8B84-EB4615FF5F81}" = SmartSound Sonicfire Pro 5
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{262BF2CD-601D-4F43-919C-4B00B1D1F338}" = Boris Graffiti
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{284BFDBC-DAC6-43EC-85A8-E1CEC0D3A114}" = Pinnacle Studio 16
"{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic
"{2A965A1A-307F-8FDF-6437-9C5089852B54}" = OneWay
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{36DA8969-4DCD-48FF-894A-6BD3936050C3}" = Nero Blu-ray Player Help (CHM)
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{40E51513-D917-4563-84F6-4EF6ADD46E2F}" = Nero Recode
"{418BAAD1-754D-48B4-B078-46EF4F25AF42}" = Google Drive
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CA46F9F-174C-4766-9EA2-2325DF414B9E}" = Nero Express Help (CHM)
"{4CF172C5-F121-41FA-B0B0-0D49840BF003}" = Filmmaker's Toolkit for Studio
"{4DB136AF-389B-4A34-AE34-50123559D08E}" = Nero MediaHome
"{511B5F54-CB1D-4F5B-BE0E-09B1D86BE586}" = Nero Video
"{5446D3AF-B060-49B6-9535-F300E1532022}" = Nero Video Help (CHM)
"{581DCE84-1948-4891-A4A7-A1222CC137C5}" = Nero RescueAgent
"{5909A89E-C97F-407C-AE2B-47BDED86BF5D}" = Prerequisite installer
"{5A347920-4AFC-11D5-9FB0-800649886934}" = SDFormatter
"{6372F44B-392B-4FD8-AF1E-E185283F6528}" = DJ_AIO_06_K209a-z_SW_Min
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{67330878-0617-41A9-A3B0-B5298E89E7BC}" = Pinnacle Winter Pack
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{6CC19BF6-B8B1-47EB-9BA4-A18B04697CDF}_is1" = Pinnacle System Keys
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Sterownik wideo firmy Pinnacle
"{6F7E6A11-F724-4A6F-ACDF-B56E65906EAB}" = Red Giant Holiday Pack
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{718207F0-E3DB-45C3-956D-0552629A08E8}_is1" = FileViewPro, âĺđńč˙ 1.5.0.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75CA8AAE-5346-4312-A9A8-5CF89955930F}" = Nero MediaHome Help (CHM)
"{78002155-F025-4070-85B3-7C0453561701}" = Obsługa programów Apple
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.18
"{7D0F4ACC-698A-41B9-B1E2-17594988FBEF}" = Pinnacle Studio 16 - Standard Content Pack
"{7F2D1105-70ED-4379-8772-3F06E1D23F5A}" = Creative Pack Volume 3 - Kids
"{88C4D8A6-9954-46A0-965D-92E55DAB8734}" = Premium Pack Volumes 1-2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Centrum obsługi urządzeń z systemem Windows Mobile
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1" = Ashampoo Burning Studio 2013 v.11.0.6
"{91B33C97-9E02-D93E-656C-D2D81585F29B}_is1" = Ashampoo Photo Optimizer 5
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A4A14B15-F25D-44F8-8483-291C1DF7C548}_is1" = WAV MP3 Converter v4.4 build 1429
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}" = Garmin USB Drivers
"{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.08) - Polish
"{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{B166374C-105E-445E-8E5D-A86CA5742645}" = Nero Burning Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 331.82
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B791E0AB-87A9-41A4-8D98-D13C2E37D928}" = Nero Info
"{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{C03E2FB3-250B-44A1-8B9E-61DFCD544133}" = Nero Disc to Device
"{C0CC75CD-F5B7-46AD-B016-17C0F5171718}" = Apple Mobile Device Support
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{C8242A93-DA0A-4DED-997B-CBA00E254E91}" = Pinnacle Scorefitter Volume 3 - Travel
"{C83B8B35-C2C4-3302-9A6E-C2AF1A59E8D6}" = Microsoft .NET Framework 4.5.1 (PLK)
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CDFE8F95-F80F-4115-9C3F-0E1FD8F9F58C}" = Nero ControlCenter Help (CHM)
"{D4ACFA69-25BA-4B10-8A5E-CA222939FCF9}" = Dazzle Video Capture DVC100 X86 Driver 1.06
"{D5115C78-2D22-4668-A5E2-6C87DED3ED1B}" = Nero Launcher
"{DB982BEA-E9FF-4C61-9058-57FFDA5076D1}" = HP Deskjet Ink Advant K209a-z All-in-One Driver Software 13.0 Rel .6
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX
"{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}" = LightScribe System Software
"{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic
"{E3D181F8-246B-497F-945E-6DB98CBA6677}" = Hollywood FX Volumes 1-3
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{ED7943A4-2FF0-4096-BBEA-DE3CC206E3D4}" = Nero Express
"{EE51AA68-7BF9-4FB3-9BB4-57CCD2C7EFFA}" = K209a-z
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1886CD7-9F73-417A-92E9-7E0AB0F0E099}" = Pinnacle Studio 16 - Install Manager
"{F2B9C8D6-C69C-4BA7-95D2-66F1C68D15DA}" = Nero Burning ROM
"{F32DC846-4457-40A8-BECA-BCC0E960BC53}" = iTunes
"{F384C1E1-3A16-4073-95C3-7271FE0ED4C2}" = Nero 2014
"{F69D4104-5394-4F7C-801C-D96DC92E7F69}" = Nero RescueAgent Help (CHM)
"{F7214014-27EE-4237-9978-2F9D1551559B}" = Title Extreme
"{FA78CC15-9F90-443B-BA61-A66595F06432}" = Nero Burning ROM Help (CHM)
"{FAF26102-09D7-4C58-AB01-0D59A2E517CA}" = Copy
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 9.20
"98157A226B40B173301B0F53C8E98C47805D5152" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"Avisynth" = AviSynth 2.5
"Batch Audio Converter_is1" = Batch Audio Converter 1.5
"CCleaner" = CCleaner (remove only)
"Christmas 3D Screensaver" = 3Planesoft Christmas 3D Screensaver 1.0.0.10
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Coral Clock 3D Screensaver" = 3Planesoft Coral Clock 3D Screensaver 1.1.0.6
"DAEMON Tools Pro" = DAEMON Tools Pro
"ffdshow_is1" = ffdshow v1.3.4530 [2014-02-09]
"focusbase" = focusbase
"Ge-Force" = Ge-Force
"Google Chrome" = Google Chrome
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer cenzura! Program 13.0
"InstallShield_{178D71F4-DFB1-40EC-9D95-326FD8A3E7A0}" = Motion Graphics Toolkit for Studio
"InstallShield_{1D273D91-D7D5-4036-8B84-EB4615FF5F81}" = SmartSound Sonicfire Pro 5
"InstallShield_{4CF172C5-F121-41FA-B0B0-0D49840BF003}" = Filmmaker's Toolkit for Studio
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"InstallShield_{6F7E6A11-F724-4A6F-ACDF-B56E65906EAB}" = Red Giant Holiday Pack
"InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"IObit Surfing Protection_is1" = Surfing Protection
"iZotope Music & Speech Cleaner_is1" = iZotope Music & Speech Cleaner
"JDownloader" = JDownloader
"Kalkulator matematyczny_is1" = Kalkulator matematyczny dla Windows NT/95/98/ME
"KLiteCodecPack_is1" = K-Lite Codec Pack 10.0.0 Full
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.2.1012
"McAfee Security Scan" = McAfee Security Scan Plus
"NirSoft Wireless Network Watcher" = NirSoft Wireless Network Watcher
"NVIDIA Drivers" = NVIDIA Drivers
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"pl.5fantastic.oneway.8566CE160176669D38AD6CA5DF2B8C8BE659144F.1" = OneWay
"Podstawy obróbki fotografii cyfrowej - Photoshop CS4" = Podstawy obróbki fotografii cyfrowej - Photoshop CS4
"proDAD-Adorage-3.0" = proDAD Adorage 3.0
"proDAD-Heroglyph-4.0" = proDAD Heroglyph 4.0
"proDAD-Mercalli-2.0" = proDAD Mercalli 2.0
"SavePass" = SavePass
"Sense" = Sense
"Shop for HP Supplies" = Shop for HP Supplies
"ShopperPro" = Shopper-Pro
"Side9 Screensaver" = Side9 Screensaver
"Smart Driver Updater_is1" = Smart Driver Updater v3.3
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Titanic Memories 3D Screensaver" = 3Planesoft Titanic Memories 3D Screensaver 1.1.0.3
"Tlen.pl" = Tlen.pl
"Unlocker" = Unlocker 1.9.1
"VirtualDubMod" = VirtualDubMod 1.5.10.2 PL
"VLC media player" = VLC media player 2.1.3
"VobSub" = VobSub v2.23 (Remove Only)
"WinPcapInst" = WinPcap 4.1.2
"WinRAR archiver" = WinRAR 5.01 (32-bit)
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"xvid" = XviD MPEG-4 Video Codec
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)
"Xvid Video Codec 1.3.2" = Xvid Video Codec
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar
"YInstHelper" = Yahoo! Install Manager

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-209362424-1723514632-2550206352-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Adblock Plus for Google Chrome Packages" = Adblock Plus for Google Chrome Packages
"Dropbox" = Dropbox

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2014-06-05 02:06:11 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-05 02:09:29 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-05 02:09:35 | Computer Name = pavilion | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: mpc-hc.exe, wersja: 1.7.0.7670,
sygnatura czasowa: 0x51fb9e4a  Nazwa modułu powodującego błąd: splitter.ax, wersja:
1.13.138.14, sygnatura czasowa: 0x516a7e40  Kod wyjątku: 0xc0000005  Przesunięcie błędu:
0x0000810b  Identyfikator procesu powodującego błąd: 0x107c  Godzina uruchomienia aplikacji
powodującej błąd: 0x01cf8084b5d79abd  Ścieżka aplikacji powodującej błąd: C:\Program
Files\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe  Ścieżka modułu powodującego
błąd: C:\Program Files\K-Lite Codec Pack\Filters\Haali\splitter.ax  Identyfikator
raportu: f73a6c81-ec77-11e3-aecc-00247e568c47

Error - 2014-06-05 04:13:34 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-05 09:59:57 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-05 13:17:53 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-06 01:40:55 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-06 01:55:27 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-06 01:58:21 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

Error - 2014-06-06 03:56:55 | Computer Name = pavilion | Source = .NET Runtime | ID = 1022
Description =

[ Media Center Events ]
Error - 2014-07-29 11:40:13 | Computer Name = pavilion | Source = MCUpdate | ID = 0
Description = 17:40:13 - Błąd podczas nawiązywania połączenia z Internetem.  17:40:13
-     Nie można skontaktować się z serwerem.. 

Error - 2014-08-17 07:46:05 | Computer Name = pavilion | Source = MCUpdate | ID = 0
Description = 13:46:05 - Nie można pobrać pakietu Directory (Błąd: Upłynął limit
czasu operacji) 

[ System Events ]
Error - 2014-09-12 02:45:20 | Computer Name = pavilion | Source = Service Control Manager | ID = 7043
Description = Usługa Windows Update nie została poprawnie zamknięta po odebraniu
kodu sterującego przed zamknięciem.

Error - 2014-09-12 02:56:11 | Computer Name = pavilion | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi adfs z powodu następującego błędu:   %%2

Error - 2014-09-12 02:56:18 | Computer Name = pavilion | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Service Component of VO z powodu następującego
błędu:   %%2

Error - 2014-09-12 02:56:30 | Computer Name = pavilion | Source = Service Control Manager | ID = 7026
Description = Nie można załadować następujących sterowników startu rozruchowego
lub systemowego:   {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw

Error - 2014-09-12 02:57:19 | Computer Name = pavilion | Source = Service Control Manager | ID = 7034
Description = Usługa LiveUpdate niespodziewanie zakończyła pracę. Wystąpiło to razy:
1.

Error - 2014-09-12 02:59:13 | Computer Name = pavilion | Source = VDS Basic Provider | ID = 33554433
Description =

Error - 2014-09-12 04:11:00 | Computer Name = pavilion | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi adfs z powodu następującego błędu:   %%2

Error - 2014-09-12 04:11:02 | Computer Name = pavilion | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Service Component of VO z powodu następującego
błędu:   %%2

Error - 2014-09-12 04:11:06 | Computer Name = pavilion | Source = Service Control Manager | ID = 7026
Description = Nie można załadować następujących sterowników startu rozruchowego
lub systemowego:   {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw

Error - 2014-09-12 04:12:32 | Computer Name = pavilion | Source = Service Control Manager | ID = 7034
Description = Usługa LiveUpdate niespodziewanie zakończyła pracę. Wystąpiło to razy:
1.


< End of report >

[ToServeAndProtect]

dobiegniew, zostałeś troszkę źle przekierowany przez Tres3K. a to, że nie czytałeś regulaminu to nie twoja wina bo to dział dla niezarejestrowanych (czyli między innymi tych, co nie muszą czytać regulaminu).


dobiegniew, proszę zarejestruj się na forum i napisz temat w dziale BEZPIECZEŃSTWO. oraz zastosuj się do tego ważnego tematu: wszystko-o-logach-aktualizacja-30-01-2012-vt117887.html . Tam eksperci ci pomogą z problemem, bo tutaj nie zaglądają.