Zamulenie całego komputera, blokada programów, handy andy

**Posty:** 6 · przez **jajcash** 04 Maj 2015, 18:34

Ostatnio mój komputer bardzo, ale to bardzo zwolnił.
Programy zaczęły się wyłączać same z siebie.
Dzieją się ogólnie dziwne rzeczy.
Co jakiś czas włączają się jakieś programy, których nie instalowałem...
Nie mogę rónież odinstalowac programu andy oraz handy andy
Prosiłbym o pomoc.
Oto logi:

Gmer

Kod: Zaznacz wszystko: GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-05-04 18:31:07 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GJ00 232,89GB Running: gmer.exe; Driver: C:\Users\Lukasz\AppData\Local\Temp\uxloafod.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075df1401 2 bytes JMP 76b3b1ef C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075df1419 2 bytes JMP 76b3b31a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075df1431 2 bytes JMP 76bb8f09 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075df144a 2 bytes CALL 76b14885 C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075df14dd 2 bytes JMP 76bb8802 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075df14f5 2 bytes JMP 76bb89d8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075df150d 2 bytes JMP 76bb86f8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075df1525 2 bytes JMP 76bb8ac2 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075df153d 2 bytes JMP 76b2fc78 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075df1555 2 bytes JMP 76b368bf C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075df156d 2 bytes JMP 76bb8fc1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075df1585 2 bytes JMP 76bb8b22 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075df159d 2 bytes JMP 76bb86bc C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075df15b5 2 bytes JMP 76b2fd11 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075df15cd 2 bytes JMP 76b3b2b0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075df16b2 2 bytes JMP 76bb8e84 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075df16bd 2 bytes JMP 76bb8651 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075df1401 2 bytes JMP 76b3b1ef C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075df1419 2 bytes JMP 76b3b31a C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075df1431 2 bytes JMP 76bb8f09 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075df144a 2 bytes CALL 76b14885 C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075df14dd 2 bytes JMP 76bb8802 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075df14f5 2 bytes JMP 76bb89d8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075df150d 2 bytes JMP 76bb86f8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075df1525 2 bytes JMP 76bb8ac2 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075df153d 2 bytes JMP 76b2fc78 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075df1555 2 bytes JMP 76b368bf C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075df156d 2 bytes JMP 76bb8fc1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075df1585 2 bytes JMP 76bb8b22 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075df159d 2 bytes JMP 76bb86bc C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075df15b5 2 bytes JMP 76b2fd11 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075df15cd 2 bytes JMP 76b3b2b0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075df16b2 2 bytes JMP 76bb8e84 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\Andy\AndyPriorityMgr.exe[5064] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075df16bd 2 bytes JMP 76bb8651 C:\Windows\syswow64\kernel32.dll ---- Threads - GMER 2.1 ---- Thread C:\Windows\system32\svchost.exe [436:1316] 000007fef8a91e00 Thread C:\Windows\system32\svchost.exe [436:1380] 000007fef8891a50 Thread C:\Windows\system32\svchost.exe [436:2376] 000007fefc831a70 Thread C:\Windows\system32\svchost.exe [436:2364] 000007fefc831a70 Thread C:\Windows\system32\svchost.exe [436:3612] 000007feefa81ab0 Thread C:\Windows\system32\svchost.exe [436:4068] 000007feeeae506c Thread C:\Windows\system32\svchost.exe [436:4088] 000007fef0841c20 Thread C:\Windows\system32\svchost.exe [436:4064] 000007fef0841c20 Thread C:\Windows\system32\svchost.exe [436:416] 000007fef7d95170 Thread C:\Windows\system32\svchost.exe [436:2448] 000007fef7d95170 Thread C:\Windows\system32\svchost.exe [436:1212] 000007feeb2ca1a0 Thread C:\Windows\system32\svchost.exe [436:4808] 000007feeb2ca1a0 Thread C:\Windows\system32\svchost.exe [868:1308] 000007fefa788274 Thread C:\Windows\system32\svchost.exe [868:1728] 000007fefa788274 Thread C:\Windows\system32\svchost.exe [1192:1236] 000007fef937341c Thread C:\Windows\system32\svchost.exe [1192:1240] 000007fef9373a2c Thread C:\Windows\system32\svchost.exe [1192:1244] 000007fef9373768 Thread C:\Windows\system32\svchost.exe [1192:1248] 000007fef9375c20 Thread C:\Windows\system32\svchost.exe [1192:2044] 000007fef9373900 Thread C:\Windows\system32\svchost.exe [1192:2472] 000007fef409bd70 Thread C:\Windows\system32\svchost.exe [1192:4124] 000007fef7d95170 Thread C:\Windows\system32\svchost.exe [1192:3848] 000007fef3fe5124 Thread C:\Windows\system32\svchost.exe [1192:244] 000007fef43c4c30 Thread C:\Windows\System32\spoolsv.exe [1476:1760] 000007fef83810c8 Thread C:\Windows\System32\spoolsv.exe [1476:1764] 000007fef8346144 Thread C:\Windows\System32\spoolsv.exe [1476:1768] 000007fef8135fd0 Thread C:\Windows\System32\spoolsv.exe [1476:1780] 000007fef8123438 Thread C:\Windows\System32\spoolsv.exe [1476:1784] 000007fef81363ec Thread C:\Windows\System32\spoolsv.exe [1476:1800] 000007fef8425e5c Thread C:\Windows\System32\spoolsv.exe [1476:1804] 000007fef84d5074 Thread C:\Windows\System32\svchost.exe [4996:3884] 000007fef7d95170 Thread C:\Windows\System32\svchost.exe [4996:4360] 000007fef3fe9874 ---- Processes - GMER 2.1 ---- Process C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (*** suspicious ***) @ C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [1320] (Windows SysTool Service/SysTool PasSame LIMITED)(2015-01-24 21:23:32) 0000000001310000 Process C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp (*** suspicious ***) @ C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp [2696](2015-03-05 16:23:31) 0000000000210000 Process C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp (*** suspicious ***) @ C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp [2220](2015-03-09 03:52:09) 0000000000030000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller@Start 2 Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code ---- EOF - GMER 2.1 ----

OTL - OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2015-05-04 17:47:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lukasz\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17728) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,87 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 35,15% Memory free 7,74 Gb Paging File | 4,76 Gb Available in Paging File | 61,51% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 116,21 Gb Total Space | 9,26 Gb Free Space | 7,96% Space Free | Partition Type: NTFS Drive D: | 86,31 Gb Total Space | 7,39 Gb Free Space | 8,56% Space Free | Partition Type: NTFS Computer Name: LUKASZ-TOSHIBA | User Name: Lukasz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2015-05-04 17:44:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL_[www.programosy.pl].exe PRC - [2015-05-04 17:44:05 | 000,380,416 | ---- | M] () -- C:\Users\Lukasz\Desktop\gmer.exe PRC - [2015-04-28 04:07:36 | 000,812,872 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2015-03-09 05:52:14 | 000,140,288 | ---- | M] () -- C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp PRC - [2015-03-05 18:23:32 | 000,193,536 | ---- | M] () -- C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp PRC - [2015-02-03 15:22:26 | 000,907,144 | ---- | M] () -- C:\Program Files\Andy\HandyAndy.exe PRC - [2015-02-03 14:29:12 | 000,856,968 | ---- | M] () -- C:\Program Files\Andy\AndyPriorityMgr.exe PRC - [2015-01-24 23:23:32 | 000,464,384 | ---- | M] (SysTool PasSame LIMITED) -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe PRC - [2014-12-19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2014-11-24 03:16:52 | 004,124,160 | ---- | M] (Anvisoft) -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe PRC - [2014-11-24 03:15:34 | 001,187,840 | ---- | M] (Anvisoft) -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe PRC - [2013-05-02 13:47:12 | 000,601,928 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe PRC - [2013-05-02 13:46:18 | 000,384,840 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe PRC - [2010-02-22 13:23:50 | 000,304,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe PRC - [2010-01-15 14:08:38 | 000,935,208 | ---- | M] (Nero AG) -- c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2009-07-28 20:26:42 | 000,062,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe PRC - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2015-05-04 17:44:05 | 000,380,416 | ---- | M] () -- C:\Users\Lukasz\Desktop\gmer.exe MOD - [2015-04-28 04:07:35 | 014,980,424 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll MOD - [2015-04-28 04:07:34 | 001,252,680 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll MOD - [2015-04-28 04:07:33 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll MOD - [2015-04-16 06:30:19 | 000,650,240 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HD-Agent\226094bcd20806b3103c5e55fef09582\HD-Agent.ni.exe MOD - [2015-04-16 04:00:21 | 011,923,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\18cd8947b7b9c5973aefed8f8afae2e3\System.Web.ni.dll MOD - [2015-04-02 13:52:31 | 000,155,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\JSON\6d92e1584c040ba41fee99b31190418f\JSON.ni.dll MOD - [2015-02-03 15:22:26 | 000,907,144 | ---- | M] () -- C:\Program Files\Andy\HandyAndy.exe MOD - [2015-02-03 14:29:12 | 000,856,968 | ---- | M] () -- C:\Program Files\Andy\AndyPriorityMgr.exe MOD - [2014-11-20 10:18:54 | 000,773,632 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\CoreScan.dll MOD - [2014-11-20 10:17:26 | 001,026,560 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Engine.dll MOD - [2014-11-20 10:17:00 | 000,300,032 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\UserProfile.dll MOD - [2014-11-18 09:15:10 | 000,125,952 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ExtractImpl.dll MOD - [2014-11-18 09:15:08 | 000,493,568 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\http_hook.dll MOD - [2014-11-18 09:15:08 | 000,117,760 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\FileSearcher.dll MOD - [2014-11-18 09:15:02 | 000,021,504 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\UnpackImpl.dll MOD - [2014-11-18 09:14:56 | 000,252,928 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\pyunpacker.dll MOD - [2014-11-18 09:14:54 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\fsmlib.dll MOD - [2014-11-18 03:43:13 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a229c5bed4a12b5db6ca55d223ada6df\System.ServiceProcess.ni.dll MOD - [2014-11-18 03:42:15 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1453d9e9a4989833ef3db4b22549ba1a\System.Windows.Forms.ni.dll MOD - [2014-11-18 03:42:06 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll MOD - [2014-11-18 03:41:59 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll MOD - [2014-11-18 03:41:55 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\237d509a79aeef6e4635b09450d98f2a\System.Configuration.ni.dll MOD - [2014-11-18 03:41:33 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll MOD - [2014-11-18 03:41:24 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll MOD - [2014-04-30 04:04:22 | 000,093,712 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\zlibwapi.dll MOD - [2014-04-30 04:04:22 | 000,088,080 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\libglog.dll MOD - [2014-04-30 04:04:22 | 000,038,928 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\fuzzy.dll MOD - [2014-04-30 03:27:26 | 000,649,744 | ---- | M] () -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\sqlite3.dll MOD - [2013-07-08 14:46:03 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2010-11-05 03:54:51 | 000,208,896 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2015-03-13 05:54:00 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2015-01-30 04:15:10 | 000,366,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv) SRV:[b]64bit:[/b] - [2015-01-30 04:15:10 | 000,023,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2010-02-05 17:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service) SRV:[b]64bit:[/b] - [2009-11-05 22:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV:[b]64bit:[/b] - [2009-07-28 14:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv) SRV - [2015-04-15 17:34:13 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015-03-09 05:52:14 | 000,140,288 | ---- | M] () [Auto | Running] -- C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp -- (vowegyhi) SRV - [2015-03-05 18:23:32 | 000,193,536 | ---- | M] () [Auto | Running] -- C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp -- (sibehylo) SRV - [2015-01-24 23:23:32 | 000,464,384 | ---- | M] (SysTool PasSame LIMITED) [Auto | Running] -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -- (WindowsMangerProtect) SRV - [2014-12-19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2014-12-11 10:30:48 | 000,315,496 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2014-11-24 03:15:34 | 001,187,840 | ---- | M] (Anvisoft) [Auto | Running] -- C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe -- (ASD2Svc) SRV - [2014-04-12 00:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2013-05-02 13:46:18 | 000,384,840 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc) SRV - [2013-05-02 13:45:56 | 000,393,032 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc) SRV - [2011-02-11 14:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo) SRV - [2011-02-10 10:25:36 | 000,112,080 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService) SRV - [2010-01-28 16:44:40 | 000,249,200 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService) SRV - [2010-01-15 14:08:38 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-12-11 17:27:32 | 000,048,792 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{d274785e-a122-4588-b510-cd4d0fe10348}w64.sys -- ({d274785e-a122-4588-b510-cd4d0fe10348}w64) DRV:[b]64bit:[/b] - [2014-12-08 23:57:14 | 000,048,792 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{26c0e773-8915-4ae2-90ba-954e6737ff14}w64.sys -- ({26c0e773-8915-4ae2-90ba-954e6737ff14}w64) DRV:[b]64bit:[/b] - [2014-12-07 22:06:54 | 000,048,792 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{19e0dd42-6e7b-42ea-b9ce-7baf10a5320d}w64.sys -- ({19e0dd42-6e7b-42ea-b9ce-7baf10a5320d}w64) DRV:[b]64bit:[/b] - [2014-11-24 03:40:12 | 000,051,608 | ---- | M] (Anvisoft) [File_System | System | Running] -- C:\Windows\SysNative\drivers\asd2fsm.sys -- (asd2fsm) DRV:[b]64bit:[/b] - [2014-11-24 03:40:12 | 000,050,584 | ---- | M] (Anvisoft) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\asdids.sys -- (Asdids) DRV:[b]64bit:[/b] - [2014-11-21 14:55:56 | 000,141,440 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2014-11-15 15:46:08 | 000,124,560 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:[b]64bit:[/b] - [2014-10-15 11:40:26 | 000,048,792 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{7012eec1-4f37-42d4-a2cd-26727494d248}w64.sys -- ({7012eec1-4f37-42d4-a2cd-26727494d248}w64) DRV:[b]64bit:[/b] - [2014-10-10 10:20:34 | 000,037,376 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem) DRV:[b]64bit:[/b] - [2014-10-10 10:20:34 | 000,030,720 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag) DRV:[b]64bit:[/b] - [2014-05-27 11:07:46 | 000,034,816 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64modem.sys -- (USBModem) DRV:[b]64bit:[/b] - [2014-05-27 11:07:46 | 000,028,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64diag.sys -- (UsbDiag) DRV:[b]64bit:[/b] - [2014-05-27 11:07:46 | 000,017,920 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64bus.sys -- (usbbus) DRV:[b]64bit:[/b] - [2013-10-02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2012-08-23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012-07-03 12:58:00 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetadb.sys -- (andnetadb) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-04-20 10:24:56 | 000,169,584 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-03-31 15:50:16 | 000,724,536 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2010-03-10 18:51:32 | 000,316,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2010-02-20 09:24:34 | 010,300,800 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2010-02-01 10:29:48 | 000,232,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2009-11-06 12:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-08-07 05:24:14 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-07-30 19:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst) DRV:[b]64bit:[/b] - [2009-07-14 16:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-07 08:51:42 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FwLnk.sys -- (FwLnk) DRV:[b]64bit:[/b] - [2009-06-22 17:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2013-05-02 13:46:12 | 000,070,984 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422134521&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&q={searchTerms} IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{92684CB5-D694-4195-8308-20E108E84B1C}: "URL" = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422134521&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{32C56134-84D3-415E-999E-C95A926FD788}: "URL" = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1422134611&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dspp&ts=1422134611&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{32C56134-84D3-415E-999E-C95A926FD788}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{92684CB5-D694-4195-8308-20E108E84B1C}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}: "URL" = http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B&ts=1422134639&type=default&q={searchTerms} IE - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\anvisoft.com/AdblockPlugin: C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\npAdblockPlugin.dll (Anvisoft) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-12-24 13:25:17 | 000,000,000 | ---D | M] [2015-03-31 10:23:14 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: () CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - plugin: Error reading preferences file CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.9.0_1\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.29_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.427.11450_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmiofmipcpmhgihiecmpiekcacigpgb\1.0_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcceagdollnkjlogmdckgjakjapmkdjf\4.0.0.2_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedcnlmdiigaodlpnljmelpgodnncldl\1.0.5568.28096_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\ CHR - Extension: No name found = C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\ O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O2:[b]64bit:[/b] - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - No CLSID value found. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Digital More) - {c0b1016f-b7e5-46f0-b415-6bf9e55ab00d} - C:\Program Files (x86)\Digital More\Extensions\c0b1016f-b7e5-46f0-b415-6bf9e55ab00d.dll File not found O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>) O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3:[b]64bit:[/b] - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\Toolbar\WebBrowser: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-21-2498732422-692747310-3384970171-1001\..\Toolbar\WebBrowser: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Andy] C:\Program Files\Andy\HandyAndy.exe () O4 - HKLM..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe (BlueStack Systems, Inc.) O4 - HKLM..\Run: [gmsd_pl_62] File not found O4 - HKU\.DEFAULT..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-18..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2498732422-692747310-3384970171-1001..\Run: [GoogleChromeAutoLaunch_CB77F52AAA5F9DDBE9C53CBF150DA9F5] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:[b]64bit:[/b] - Extra context menu item: Dołącz do istniejącego pliku PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: Dołącz obiekt docelowy łącza do istniejącego pliku PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: Konwertuj do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: Konwertuj obiekt docelowy łącza na plik Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Dołącz do istniejącego pliku PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Dołącz obiekt docelowy łącza do istniejącego pliku PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Konwertuj do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Konwertuj obiekt docelowy łącza na plik Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab (Java Plug-in 11.45.2) O16 - DPF: {CAFEEFAC-0018-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab (Java Plug-in 1.8.0_45) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab (Java Plug-in 11.45.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.231.1.206 217.172.224.160 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF3F9798-E73A-4372-B3C2-BCDEF39BA92B}: DhcpNameServer = 89.231.1.206 217.172.224.160 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\ms-help - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2015-03-05 20:55:42 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{b31eaff5-94e4-11e4-8f5c-00266c798f38}\Shell - "" = AutoRun O33 - MountPoints2\{b31eaff5-94e4-11e4-8f5c-00266c798f38}\Shell\AutoRun\command - "" = E:\LGAutoRun.exe O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LGAutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015-05-04 17:44:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL_[www.programosy.pl].exe [2015-05-04 17:36:22 | 000,619,688 | ---- | C] (Duplex Secure Ltd) -- C:\Users\Lukasz\Desktop\SPTDinst-v187-x64.exe [2015-05-04 17:28:08 | 000,619,688 | ---- | C] (Duplex Secure Ltd) -- C:\Users\Lukasz\Desktop\Niepotwierdzony 770060.crdownload [2015-05-04 05:04:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2015-05-04 05:04:16 | 000,097,888 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2015-05-04 05:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2015-05-04 04:55:19 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2015-04-26 15:24:03 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Desktop\hack [2015-04-20 01:14:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2015-04-18 09:31:23 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel [2015-04-18 09:31:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appraiser [2015-04-17 03:41:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2015-04-17 03:41:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2015-04-17 03:41:17 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2015-04-16 14:22:20 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Desktop\druk [2015-04-16 04:01:56 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2015-04-16 04:01:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2015-04-16 04:01:56 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2015-04-16 04:01:56 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2015-04-16 04:01:56 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2015-04-16 04:01:56 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2015-04-16 04:01:56 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2015-04-16 04:01:55 | 003,298,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2015-04-16 04:01:55 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2015-04-16 04:01:55 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2015-04-16 04:01:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2015-04-16 04:01:55 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll [2015-04-16 04:01:55 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2015-04-16 04:01:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2015-04-16 04:01:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll [2015-04-16 04:01:12 | 001,239,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe [2015-04-16 04:01:11 | 000,957,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll [2015-04-16 04:01:11 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll [2015-04-16 04:01:11 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll [2015-04-16 04:01:11 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll [2015-04-16 04:01:11 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll [2015-04-16 04:01:11 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll [2015-04-16 04:01:10 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2015-04-16 04:01:07 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll [2015-04-16 04:01:05 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2015-04-16 04:00:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2015-04-16 04:00:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2015-04-16 04:00:50 | 005,557,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2015-04-16 04:00:49 | 001,727,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2015-04-16 04:00:49 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2015-04-16 04:00:49 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2015-04-16 04:00:48 | 003,920,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2015-04-16 04:00:45 | 003,976,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2015-04-16 04:00:44 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2015-04-16 04:00:43 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2015-04-16 04:00:42 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2015-04-16 04:00:42 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2015-04-16 04:00:42 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe [2015-04-16 04:00:42 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2015-04-16 04:00:42 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2015-04-16 04:00:41 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2015-04-16 04:00:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2015-04-16 04:00:40 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe [2015-04-16 04:00:40 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2015-04-16 04:00:39 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe [2015-04-16 04:00:39 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll [2015-04-16 04:00:39 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe [2015-04-16 04:00:39 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll [2015-04-16 04:00:38 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2015-04-16 04:00:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2015-04-16 04:00:38 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2015-04-16 04:00:37 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2015-04-16 04:00:37 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2015-04-16 04:00:36 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2015-04-16 04:00:36 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2015-04-16 04:00:36 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2015-04-16 04:00:36 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2015-04-16 04:00:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2015-04-16 04:00:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2015-04-16 04:00:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2015-04-16 04:00:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2015-04-16 04:00:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2015-04-16 04:00:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2015-04-16 04:00:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2015-04-16 04:00:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2015-04-16 04:00:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2015-04-16 04:00:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2015-04-16 04:00:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2015-04-16 04:00:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2015-04-16 04:00:33 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2015-04-16 04:00:32 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2015-04-16 04:00:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2015-04-16 04:00:31 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2015-04-16 04:00:31 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2015-04-16 04:00:31 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2015-04-16 04:00:31 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2015-04-16 04:00:31 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2015-04-16 04:00:31 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2015-04-16 04:00:31 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2015-04-16 04:00:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2015-04-16 04:00:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2015-04-16 04:00:27 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll [2015-04-16 04:00:27 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll [2015-04-16 04:00:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2015-04-16 04:00:26 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll [2015-04-16 04:00:25 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll [2015-04-16 04:00:25 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll [2015-04-16 04:00:25 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll [2015-04-16 04:00:24 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll [2015-04-16 04:00:24 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll [2015-04-16 03:57:13 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2015-04-16 03:57:13 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2015-04-16 03:57:12 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2015-04-16 03:57:12 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2015-04-16 03:57:08 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2015-04-16 03:57:07 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2015-04-16 03:57:06 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2015-04-16 03:57:06 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2015-04-16 03:57:05 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2015-04-16 03:57:03 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2015-04-16 03:57:01 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2015-04-16 03:57:01 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2015-04-16 03:56:59 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2015-04-16 03:56:58 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2015-04-16 03:56:58 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2015-04-16 03:56:57 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2015-04-16 03:56:55 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2015-04-16 03:56:54 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2015-04-16 03:56:53 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2015-04-16 03:56:53 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2015-04-16 03:56:52 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2015-04-16 03:56:51 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2015-04-16 03:56:50 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2015-04-16 03:56:49 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2015-04-16 03:56:47 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2015-04-16 03:56:47 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2015-04-16 03:56:47 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2015-04-16 03:56:44 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2015-04-16 03:56:43 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2015-04-16 03:56:41 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2015-04-16 03:56:41 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2015-04-16 03:56:41 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2015-04-16 03:56:40 | 006,025,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2015-04-16 03:56:37 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2015-04-16 03:56:32 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2015-04-16 03:56:31 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2015-04-16 03:56:31 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2015-04-16 03:55:13 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clfsw32.dll [2015-04-16 03:55:13 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clfsw32.dll [2015-04-11 14:15:21 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Desktop\nokia 515 [2015-04-09 14:01:40 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Desktop\soft nowy [2015-04-05 06:35:35 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\GWX [2015-04-05 06:35:34 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\GWX [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015-05-04 17:47:30 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2015-05-04 17:47:30 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2015-05-04 17:44:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL_[www.programosy.pl].exe [2015-05-04 17:44:05 | 000,380,416 | ---- | M] () -- C:\Users\Lukasz\Desktop\gmer.exe [2015-05-04 17:39:26 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2015-05-04 17:38:57 | 000,001,338 | ---- | M] () -- C:\Windows\tasks\IZLY.job [2015-05-04 17:38:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2015-05-04 17:38:34 | 3117,391,872 | -HS- | M] () -- C:\hiberfil.sys [2015-05-04 17:36:23 | 000,619,688 | ---- | M] (Duplex Secure Ltd) -- C:\Users\Lukasz\Desktop\SPTDinst-v187-x64.exe [2015-05-04 17:33:03 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2015-05-04 17:28:08 | 000,619,688 | ---- | M] (Duplex Secure Ltd) -- C:\Users\Lukasz\Desktop\Niepotwierdzony 770060.crdownload [2015-05-04 17:19:01 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2015-05-04 05:03:10 | 000,097,888 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2015-05-04 03:49:22 | 001,670,970 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2015-05-04 03:49:22 | 000,740,968 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2015-05-04 03:49:22 | 000,654,480 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2015-05-04 03:49:22 | 000,156,298 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2015-05-04 03:49:22 | 000,122,352 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2015-05-02 07:22:45 | 000,002,196 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015-04-22 02:57:36 | 000,836,333 | ---- | M] () -- C:\Users\Lukasz\Desktop\pstrag.jpg [2015-04-17 04:00:09 | 001,643,576 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2015-04-15 17:34:10 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2015-04-15 17:34:09 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2015-04-09 14:09:59 | 000,002,411 | ---- | M] () -- C:\Windows\SysWow64\lgAxconfig.ini [2015-04-09 14:09:30 | 000,000,838 | ---- | M] () -- C:\Users\Lukasz\Desktop\LGMobile Support Tool.lnk [2015-04-08 17:51:06 | 193,128,998 | ---- | M] () -- C:\Users\Lukasz\Desktop\Grubson-Holizm-2015-320kbps.rar [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015-05-04 17:43:59 | 000,380,416 | ---- | C] () -- C:\Users\Lukasz\Desktop\gmer.exe [2015-04-22 02:57:36 | 000,836,333 | ---- | C] () -- C:\Users\Lukasz\Desktop\pstrag.jpg [2015-04-16 03:57:13 | 000,016,303 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf [2015-04-16 03:57:05 | 000,016,303 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf [2015-04-09 14:08:06 | 000,000,838 | ---- | C] () -- C:\Users\Lukasz\Desktop\LGMobile Support Tool.lnk [2015-04-08 17:19:37 | 193,128,998 | ---- | C] () -- C:\Users\Lukasz\Desktop\Grubson-Holizm-2015-320kbps.rar [2015-04-02 11:55:04 | 000,740,775 | ---- | C] () -- C:\ProgramData\AndyDrivers.zip [2015-03-19 11:30:52 | 000,000,017 | ---- | C] () -- C:\Users\Lukasz\AppData\Local\resmon.resmoncfg [2015-03-05 19:04:05 | 000,008,520 | ---- | C] () -- C:\Windows\SysWow64\BasementDusterOff.ini [2015-03-05 18:31:49 | 000,002,277 | ---- | C] () -- C:\Windows\patsearch.bin [2015-01-25 18:12:14 | 000,001,248 | ---- | C] () -- C:\Users\Lukasz\AppData\Roaming\IZLY [2015-01-11 20:34:59 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll [2015-01-11 20:34:59 | 000,002,411 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini [2014-12-11 14:06:52 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2014-11-10 17:44:02 | 001,643,576 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014-11-05 00:59:22 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat [2014-11-04 19:55:03 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2014-09-29 23:35:27 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2015-02-13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2015-02-13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2015-03-09 05:52:15 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38 [2015-04-02 15:58:33 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Andy [2014-10-19 07:32:24 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2014-11-17 12:36:49 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\DAEMON Tools Lite [2015-02-13 00:30:59 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Design Science [2015-01-24 23:28:41 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Dev-Cpp [2015-03-11 17:27:45 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\e-Deklaracje [2015-03-11 17:27:45 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2015-01-11 20:05:00 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\LG Electronics [2014-12-06 08:40:21 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\MPC-HC [2014-10-14 16:35:52 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Opera Software [2015-02-06 11:37:51 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\SoftGrid Client [2014-11-05 00:55:50 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Three Rings Design [2014-11-21 12:21:51 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Toshiba [2014-11-10 17:45:05 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\TP [2015-03-15 22:22:10 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\uTorrent [2014-11-04 20:11:54 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\WinBatch [2015-02-11 18:36:59 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Windows Live Writer [color=#E56717]========== Purity Check ==========[/color] < End of report >

OTL - Extras

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2015-05-04 17:47:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lukasz\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17728) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,87 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 35,15% Memory free 7,74 Gb Paging File | 4,76 Gb Available in Paging File | 61,51% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 116,21 Gb Total Space | 9,26 Gb Free Space | 7,96% Space Free | Partition Type: NTFS Drive D: | 86,31 Gb Total Space | 7,39 Gb Free Space | 8,56% Space Free | Partition Type: NTFS Computer Name: LUKASZ-TOSHIBA | User Name: Lukasz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = OperaStable] -- Reg Error: Key error. File not found .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = OperaStable] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{09715184-83E7-443A-AB11-7ADC80A14683}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{1014A050-0658-451C-A3AD-53F1F1814144}" = rport=10243 | protocol=6 | dir=out | app=system | "{11B3363F-A18C-4FC1-8E3B-D977ABE36F1C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{274A5F53-B1AF-41D3-B95B-19A6C9135F9F}" = rport=139 | protocol=6 | dir=out | app=system | "{3923874C-884A-4FD4-BFAB-B61DF22AF339}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3F8E898A-FCEC-4F93-8EC5-37B754BA8AF2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{44BC7D19-5B75-43FE-9CE5-0701D543F208}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{4A0254BB-ADC4-45C8-A384-157D593D38BE}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{4EF9EA94-8391-4A1A-8D73-1970372EF347}" = lport=445 | protocol=6 | dir=in | app=system | "{4FB9E5AC-363A-46B4-A27C-45560616C32D}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | "{5A7966B3-EDA1-4ACD-BAE1-92110F9836CF}" = rport=137 | protocol=17 | dir=out | app=system | "{609A4FAD-659D-4DD1-9F8A-2181010105B3}" = rport=138 | protocol=17 | dir=out | app=system | "{69069E7D-35F2-4397-B2E6-80D578FB966F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{7B1FFAE4-486D-4F5B-A5CF-4A0C71CBE82E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{82B02F2D-CC4B-49E3-A499-32BDE5881948}" = lport=2869 | protocol=6 | dir=in | app=system | "{8445F9CD-4363-49CE-B6AB-66E87D4F6EA9}" = lport=138 | protocol=17 | dir=in | app=system | "{87BBF5D0-462B-4779-8E37-43979C4171EE}" = rport=445 | protocol=6 | dir=out | app=system | "{90F777A2-3F2B-4519-B7D1-E4AD47560842}" = lport=139 | protocol=6 | dir=in | app=system | "{980BF6F3-2C47-4530-AAFF-C10E780D61D7}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{9DA362AF-B6A9-4465-8FAF-60075C1A8E5E}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{9DBED0A4-0721-488B-82FC-F8A2DD0D2380}" = lport=137 | protocol=17 | dir=in | app=system | "{9F04DB18-1E97-4AFD-BF32-BC31E70B8AC2}" = lport=2869 | protocol=6 | dir=in | app=system | "{AC2AFD4D-87DE-4288-8E00-57D5532858C8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{AFD36C8D-8A93-406F-9D83-3985C6E51553}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{D99A49E6-3B43-49B4-9C53-F18271469519}" = lport=10243 | protocol=6 | dir=in | app=system | "{D9C68626-5312-458F-9495-33DBD196A421}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{DFB7CBD6-17BD-437A-A5D0-7CCF7C6BEA99}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{F6F9F105-FED1-4E87-A4D2-AB43A078D68C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{FD2171D4-B010-48D0-B280-0713DFD4DC6E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{081B1BD6-733C-46AB-8A43-FA6C4E0CDDEE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{0EF03DCF-B4AD-452B-9E2F-055125D807D8}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{156E64A5-901D-4A16-9A72-19C5CF6DFB19}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{1778AFA6-6845-4BAD-AF9D-1AF3700C71D5}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{1B15D88B-C71A-48DB-A8DA-B13D390806EC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{213269F2-6A87-4DC3-B3F9-7A688BAFF181}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{2C3F2A81-FCD1-44E8-BB38-67FE0EF6990C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{2EBAAE49-F328-4E31-903B-F6BA1810E627}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{31548A6B-E37B-4A81-B249-D9C4F43C6C77}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{343BDD4B-0E5B-42BD-BF55-7734DC99ECD8}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{42E89103-41CF-4CCB-83E4-B4D94442D13B}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{444FC4AC-6E98-4119-BD55-8AFDD3C07411}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{46E219B9-1EF8-41FD-BE51-9ACD72FDF145}" = protocol=6 | dir=in | app=c:\program files\andy\andy.exe | "{4E935FB0-ACE6-42DA-B882-762FC170DAB1}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{58E9FC90-FDCF-4B90-83FF-98D65DA09726}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{5BC18D35-99F3-4654-BC6D-86BE995A2E50}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{5C8849EC-D547-40C4-B447-6DA87AE56B2D}" = protocol=17 | dir=in | app=c:\program files\andy\andy.exe | "{6B1F4892-6EC4-4AF3-BA6D-4882D3212A4E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6BA9DBB9-1021-4927-BE4F-6C470957E8A5}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{75C3D1CA-6E3C-41C4-AC15-BFA15B637EB0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{75DFA1EE-7498-4B57-B511-507002A101BD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{8396A9A5-463E-4951-BE47-56526E3AA879}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{8EFCD389-6DB7-4488-8C56-E8B2E7DF4AB2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{97386F2E-79A5-48A1-9D58-8BC7A58D8071}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{A989DCDA-E4E0-4ABE-AFFF-8C0BA4AE7ABD}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{AB02DE62-38C4-4CC0-A8CD-05F497C13D86}" = protocol=6 | dir=in | app=c:\users\lukasz\appdata\roaming\utorrent\utorrent.exe | "{BA4523E9-2066-42E1-B073-A6F436B4C86B}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{BAD89019-3F9C-423D-8BEC-BE1A6BE2A161}" = protocol=17 | dir=in | app=c:\users\lukasz\appdata\roaming\utorrent\utorrent.exe | "{BB47FF51-202E-4C24-93DA-8C377D368D60}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{C554005C-3BAD-4B09-939F-3A41EEB420BB}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{C744B637-13BC-4A76-838F-EC1C72D3D19E}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{CC2C19DF-7E81-4CBA-8C5A-A245AA46FBC4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E0AB6F97-20EA-486F-9065-E208EDFAEE79}" = protocol=6 | dir=out | app=system | "{E1C236D4-9FE9-4D33-9E6D-2AB52457711A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{E4FD1193-80C7-44C9-9BBE-7C6016FE3F3E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{F2491571-5676-4CF8-99F1-977539FCAC74}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{F7753FF3-EED5-41E7-B603-8E06E6061F6A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{FED7EF87-4B6F-44BB-8679-E76216D1BD37}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "TCP Query User{2D618434-E883-4279-966A-93981776EE06}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | "TCP Query User{5FE5C288-E6C4-4054-A491-1C77FA1ACDD9}C:\program files\andy\andy.exe" = protocol=6 | dir=in | app=c:\program files\andy\andy.exe | "TCP Query User{6B76D1FE-BE7C-4DC1-90A2-EC56DC28967C}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{6D4969B8-310B-42BB-A4A5-404B6C7DD8AC}C:\program files\andy\andy.exe" = protocol=17 | dir=in | app=c:\program files\andy\andy.exe | "UDP Query User{73C73DE6-837E-4D99-8B92-0933A4F2AE05}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{E8BD9EB5-83F3-4CE2-810E-D5A0F7B293ED}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2 "{45F1F774-38B4-3CC3-BAAF-051E6D19E48E}" = Microsoft .NET Framework 4.5.1 (PLK) "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{64A3A4F4-B792-11D6-A78A-00B0D0180250}" = Java SE Development Kit 8 Update 25 (64-bit) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{86401870-7AB7-4A8D-8AD6-12B27DF2E6E3}" = Oracle VM VirtualBox 4.3.20 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013 "{90150000-0015-0415-1000-0000000FF1CE}" = Microsoft Access MUI (Polish) 2013 "{90150000-0016-0415-1000-0000000FF1CE}" = Microsoft Excel MUI (Polish) 2013 "{90150000-0018-0415-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (Polish) 2013 "{90150000-0019-0415-1000-0000000FF1CE}" = Microsoft Publisher MUI (Polish) 2013 "{90150000-001A-0415-1000-0000000FF1CE}" = Microsoft Outlook MUI (Polish) 2013 "{90150000-001B-0415-1000-0000000FF1CE}" = Microsoft Word MUI (Polish) 2013 "{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch "{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English "{90150000-001F-0415-1000-0000000FF1CE}" = Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski "{90150000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2013 "{90150000-0044-0415-1000-0000000FF1CE}" = Microsoft InfoPath MUI (Polish) 2013 "{90150000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2013 "{90150000-0090-0415-1000-0000000FF1CE}" = Microsoft DCF MUI (Polish) 2013 "{90150000-00A1-0415-1000-0000000FF1CE}" = Microsoft OneNote MUI (Polish) 2013 "{90150000-00BA-0415-1000-0000000FF1CE}" = Microsoft Groove MUI (Polish) 2013 "{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013 "{90150000-00C1-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2013 "{90150000-00E1-0415-1000-0000000FF1CE}" = Microsoft Office OSM MUI (Polish) 2013 "{90150000-00E2-0415-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (Polish) 2013 "{90150000-012B-0415-1000-0000000FF1CE}" = Microsoft Lync MUI (Polish) 2013 "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski) "{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{996D32B6-F629-4764-894B-CB24D9C19051}" = Microsoft Security Client "{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board "{D3415F15-8C15-328C-933C-9075E60843CA}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition "CNXT_AUDIO_HDA" = Conexant HD Audio "Microsoft Security Client" = Microsoft Security Essentials "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK" = Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Office15.PROPLUS" = Microsoft Office Professional Plus 2013 "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinRAR archiver" = WinRAR 5.10 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0420F95C-11FF-4E02-B967-6CC22B188F9F}" = Nero BackItUp "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "{073B89C3-BA88-41B5-965F-B35A88EAE838}" = TOSHIBA Supervisor Password "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{1B87C40B-A60B-4EF3-9A68-706CF4B69978}" = Toshiba Assist "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help "{2290A680-4083-410A-ADCC-7092C67FC052}" = TOSHIBA Online Product Information "{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help "{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.0 "{26A24AE4-039D-4CA4-87B4-2F83218045F0}" = Java 8 Update 45 "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources "{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver "{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{397516AE-7DFE-4F90-84E0-BD616D559434}" = Nero BurnRights "{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}" = QuickTime 7 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}" = Nero RescueAgent "{543E6ACA-51B7-4283-82F2-57C0582A53C5}" = Windows Live UX Platform Language Pack "{5623b3a7-3df9-4251-95a4-d35cc785a55d}" = Nero 9 Essentials "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application "{607BE7BF-7C28-4ADB-A4A0-385962B901C3}" = TOSHIBA ConfigFree "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live "{659E4E8F-C986-4B13-9781-E88AA480366B}_is1" = NSBuilder wersja 20131017-r5 "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}" = Nero Express "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live "{7B77622E-DE90-48EA-B2C7-227B1DE58A01}" = Adobe AIR "{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E9CEA3B-EBD1-439C-A01D-830CB39613C6}" = TOSHIBA Hardware Setup "{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}" = Toshiba Manuals "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}" = TOSHIBA Media Controller "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station "{AC76BA86-0804-1033-1959-001802114130}" = Adobe Refresh Manager "{AC76BA86-1033-FFFF-7760-000000000006}" = Adobe Acrobat XI Pro "{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.10) - Polish "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program "{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live "{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D38066B8-DB52-E13A-8E40-545A2AE1EEDE}" = e-Deklaracje Desktop "{D4053664-2BFA-4458-80B8-700EFC309201}" = BlueStacks Notification Center "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}" = Nero BackItUp and Burn "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer "{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help "{E68EADA6-63A4-F6D3-FE12-968B879F7AD6}" = Adobe Download Assistant "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{F082CB11-4794-4259-99A1-D91BA762AD15}" = TOSHIBA TEMPRO "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver "{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}" = TOSHIBA Media Controller Plug-in "{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter "{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 17 ActiveX "Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI "ANDY OS" = Andy OS "Anvi Smart Defender" = Anvi Smart Defender 2.4 "BlueStacks App Player" = BlueStacks App Player "com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant "Dev-C++" = Dev-C++ "DSMT6" = MathType 6 "e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop "Google Chrome" = Google Chrome "InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder "InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime "InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board "InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition "JDownloader" = JDownloader "KLiteCodecPack_is1" = K-Lite Codec Pack 10.8.0 Full "LG PC Suite" = LG PC Suite "Winamp" = Winamp "WinLiveSuite" = Podstawowe programy Windows Live [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2498732422-692747310-3384970171-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "CodeBlocks" = CodeBlocks "Puzzle Pirates" = Puzzle Pirates "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2015-04-03 03:31:22 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:23 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:23 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:23 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:24 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:24 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:24 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:25 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:25 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = Error - 2015-04-03 03:31:25 | Computer Name = Lukasz-TOSHIBA | Source = Bonjour Service | ID = 100 Description = [ System Events ] Error - 2015-04-16 21:12:45 | Computer Name = Lukasz-TOSHIBA | Source = Service Control Manager | ID = 7006 Description = Wywołanie ScRegSetValueExW dla Start nie powiodło się i wystąpił następujący błąd: %%5. Error - 2015-04-16 21:14:17 | Computer Name = Lukasz-TOSHIBA | Source = Service Control Manager | ID = 7006 Description = Wywołanie ScRegSetValueExW dla FailureCommand nie powiodło się i wystąpił następujący błąd: %%5. Error - 2015-04-16 21:53:57 | Computer Name = LUKASZ-TOSHIBA | Source = Microsoft Antimalware | ID = 2001 Description = Produkt %%860 napotkał błąd podczas próby aktualizacji podpisów. Nowa wersja podpisu: Poprzednia wersja podpisu: 1.195.3410.0 Źródło aktualizacji: %%859 Etap aktualizacji: %%854 Ścieżka źródła: http://www.microsoft.com Typ podpisu: %%800 Typ aktualizacji: %%803 Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.11502.0 Kod błędu: 0x80240016 Opis błędu: Podczas sprawdzania aktualizacji wystąpił nieoczekiwany problem. Aby uzyskać informacje na temat instalowania aktualizacji i rozwiązywania problemów z nimi, zobacz Pomoc i obsługę techniczną. Error - 2015-04-16 21:53:57 | Computer Name = LUKASZ-TOSHIBA | Source = Microsoft Antimalware | ID = 2001 Description = Produkt %%860 napotkał błąd podczas próby aktualizacji podpisów. Nowa wersja podpisu: Poprzednia wersja podpisu: 1.195.3410.0 Źródło aktualizacji: %%859 Etap aktualizacji: %%854 Ścieżka źródła: http://www.microsoft.com Typ podpisu: %%800 Typ aktualizacji: %%803 Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.11502.0 Kod błędu: 0x80240016 Opis błędu: Podczas sprawdzania aktualizacji wystąpił nieoczekiwany problem. Aby uzyskać informacje na temat instalowania aktualizacji i rozwiązywania problemów z nimi, zobacz Pomoc i obsługę techniczną. Error - 2015-04-16 21:53:57 | Computer Name = LUKASZ-TOSHIBA | Source = Microsoft Antimalware | ID = 2001 Description = Produkt %%860 napotkał błąd podczas próby aktualizacji podpisów. Nowa wersja podpisu: Poprzednia wersja podpisu: 1.195.3410.0 Źródło aktualizacji: %%859 Etap aktualizacji: %%853 Ścieżka źródła: http://www.microsoft.com Typ podpisu: %%800 Typ aktualizacji: %%803 Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.11502.0 Kod błędu: 0x80240016 Opis błędu: Podczas sprawdzania aktualizacji wystąpił nieoczekiwany problem. Aby uzyskać informacje na temat instalowania aktualizacji i rozwiązywania problemów z nimi, zobacz Pomoc i obsługę techniczną. Error - 2015-04-16 21:54:24 | Computer Name = Lukasz-TOSHIBA | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 Description = Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x800f0902: Aktualizacja zabezpieczeń systemu Windows 7 dla systemów opartych na procesorach x64 (KB3046269). Error - 2015-04-16 21:54:25 | Computer Name = Lukasz-TOSHIBA | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 Description = Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x800f0902: Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2990214). Error - 2015-04-17 02:50:12 | Computer Name = Lukasz-TOSHIBA | Source = Service Control Manager | ID = 7011 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi lmhosts. Error - 2015-04-17 04:15:09 | Computer Name = Lukasz-TOSHIBA | Source = bowser | ID = 8003 Description = Error - 2015-04-17 08:39:00 | Computer Name = Lukasz-TOSHIBA | Source = bowser | ID = 8003 Description = < End of report >

**Posty:** 4765 · przez **ordynat** 04 Maj 2015, 19:36

1) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.
Pokaż raport z niego C:\AdwCleaner\AdwCleaner[S].txt

2) Zrób logi z FRST > http://forum.programosy.pl/frst-otl-zoek-vt139692.html
Przed skanem zaznacz "Additional" oraz "Shortcut"
.

**Posty:** 6 · przez **jajcash** 05 Maj 2015, 11:59

AdwCleaner dopiero za drugim razem usunął wszystko.

Oto scany:

FRST

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015 Ran by Lukasz (administrator) on LUKASZ-TOSHIBA on 05-05-2015 11:50:58 Running from C:\Users\Lukasz\Desktop Loaded Profiles: Lukasz (Available profiles: Lukasz) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Anvisoft) C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Anvisoft) C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe () C:\Program Files\Andy\HandyAndy.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\ConfigFree\NDSTray.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\ConfigFree\CFSwMgr.exe () C:\Program Files\Andy\AndyPriorityMgr.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\ConfigFree\CFIWmxSvcs64.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\ConfigFree\CFSvcs.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [521272 2010-03-22] (Conexant Systems, Inc.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [gmsd_pl_62] => [X] HKLM-x32\...\Run: [Andy] => C:\Program Files\Andy\HandyAndy.exe [907144 2015-02-03] () HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-05-02] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation) HKLM-x32\...\Run: [NSU_agent] => C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\Run: [GoogleChromeAutoLaunch_CB77F52AAA5F9DDBE9C53CBF150DA9F5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.) HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\Run: [PC Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia) HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\MountPoints2: G - G:\LGAutoRun.exe HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\MountPoints2: {b31eaff5-94e4-11e4-8f5c-00266c798f38} - E:\LGAutoRun.exe HKU\S-1-5-18\...\Run: [TOSHIBA Online Product Information] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [4581280 2010-03-03] (TOSHIBA) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-11-17] (Microsoft Corporation) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2010-04-22] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2010-04-22] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-2498732422-692747310-3384970171-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150401 SearchScopes: HKLM -> {92684CB5-D694-4195-8308-20E108E84B1C} URL = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {32C56134-84D3-415E-999E-C95A926FD788} URL = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-04] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-04] (Oracle Corporation) BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-03-02] (<TOSHIBA>) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-2498732422-692747310-3384970171-1001 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-2498732422-692747310-3384970171-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 89.231.1.206 217.172.224.160 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-04] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-04] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems) FF Plugin HKU\S-1-5-21-2498732422-692747310-3384970171-1001: anvisoft.com/AdblockPlugin -> C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\npAdblockPlugin.dll [2014-04-30] (Anvisoft) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation) FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-10-19] Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "https://www.google.pl/webhp?sourceid=chrome-instant&ion=1&espv=213&ie=UTF-8", "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1422134611&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B", "hxxp://www.google.com/" CHR Profile: C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-05-05] CHR Extension: (AdBlock) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-05] CHR Extension: (Bookmark Manager) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-05] CHR Extension: (AnviAdblock) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmiofmipcpmhgihiecmpiekcacigpgb [2015-05-05] CHR Extension: (Download Master) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcceagdollnkjlogmdckgjakjapmkdjf [2015-05-05] CHR Extension: (Google Wallet) - C:\Users\Lukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-05] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03] CHR HKLM-x32\...\Chrome\Extension: [lhmiofmipcpmhgihiecmpiekcacigpgb] - C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\chrome.crx [2014-04-30] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ASD2Svc; C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe [1187840 2014-11-24] (Anvisoft) [File not signed] S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-05-02] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-02] (BlueStack Systems, Inc.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation) R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 sibehylo; C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp [X] S2 vowegyhi; C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc) [File not signed] S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [30720 2014-10-10] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [37376 2014-10-10] (LG Electronics Inc.) R1 asd2fsm; C:\Windows\System32\DRIVERS\asd2fsm.sys [51608 2014-11-24] (Anvisoft) R1 Asdids; C:\Windows\System32\DRIVERS\asdids.sys [50584 2014-11-24] (Anvisoft) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-02] (BlueStack Systems) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation) S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2014-05-27] (LG Electronics Inc.) S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2014-05-27] (LG Electronics Inc.) S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2014-05-27] (LG Electronics Inc.) S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-05-05 11:52 - 2015-05-05 11:52 - 00000000 _____ () C:\Users\Lukasz\Downloads\9518.tmp 2015-05-05 11:50 - 2015-05-05 11:52 - 00018679 _____ () C:\Users\Lukasz\Desktop\FRST.txt 2015-05-05 11:46 - 2015-05-05 11:51 - 00000000 ____D () C:\FRST 2015-05-05 11:31 - 2015-05-05 11:31 - 02101248 _____ (Farbar) C:\Users\Lukasz\Desktop\FRST64.exe 2015-05-05 11:29 - 2015-05-05 11:47 - 00000000 ____D () C:\AdwCleaner 2015-05-05 11:28 - 2015-05-05 11:28 - 02204160 _____ () C:\Users\Lukasz\Desktop\AdwCleaner.exe 2015-05-05 03:47 - 2015-05-05 03:47 - 00002280 _____ () C:\Users\Lukasz\Desktop\Nokia Software Updater.lnk 2015-05-05 03:47 - 2015-05-05 03:47 - 00000000 ____D () C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nokia 2015-05-05 03:47 - 2015-05-05 03:47 - 00000000 ____D () C:\Users\Lukasz\AppData\Local\Nokia 2015-05-04 19:31 - 2015-05-04 19:31 - 00003146 _____ () C:\Windows\System32\Tasks\{616B0C67-0377-4674-B08B-7D2320B3B400} 2015-05-04 19:27 - 2015-05-04 19:27 - 50285192 _____ () C:\Users\Lukasz\Desktop\NokiaSoftwareUpdaterSetup_PL.exe 2015-05-04 19:26 - 2015-05-04 19:26 - 01104200 _____ (Nokia) C:\Users\Lukasz\Desktop\SetupOviPlayer.exe 2015-05-04 19:24 - 2015-05-04 19:24 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf 2015-05-04 19:24 - 2015-05-04 19:24 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf 2015-05-04 19:14 - 2015-05-04 19:24 - 00000000 __SHD () C:\Users\Lukasz\Phone Browser 2015-05-04 19:13 - 2015-05-04 02:23 - 00000000 ____N () C:\Users\Lukasz\Desktop\3oda kru.pla 2015-05-04 19:09 - 2015-04-21 00:44 - 00010872 ____N () C:\Users\Lukasz\Desktop\legalizacja.m3u 2015-05-04 18:59 - 2015-05-04 18:59 - 07082136 _____ () C:\Users\Lukasz\Desktop\Nokia_Connectivity_Cable_Driver.exe 2015-05-04 18:46 - 2015-05-04 19:26 - 00000000 ____D () C:\Users\Lukasz\AppData\Roaming\Nokia 2015-05-04 18:46 - 2015-05-04 19:24 - 00000000 ____D () C:\Users\Lukasz\AppData\Roaming\PC Suite 2015-05-04 18:46 - 2015-05-04 19:24 - 00000000 ____D () C:\ProgramData\PC Suite 2015-05-04 18:45 - 2015-05-04 18:46 - 00000000 ____D () C:\Program Files\DIFX 2015-05-04 18:45 - 2015-05-04 18:45 - 00002045 _____ () C:\Users\Public\Desktop\Nokia PC Suite.lnk 2015-05-04 18:45 - 2015-05-04 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite 2015-05-04 18:45 - 2015-05-04 18:45 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution 2015-05-04 18:45 - 2012-06-11 11:33 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys 2015-05-04 18:44 - 2015-05-05 03:47 - 00000000 ____D () C:\Program Files (x86)\Nokia 2015-05-04 18:44 - 2013-01-23 11:31 - 00057856 _____ (Nokia) C:\Windows\system32\nmwcdclsX64.dll 2015-05-04 18:42 - 2015-05-04 19:30 - 00000000 ____D () C:\ProgramData\Installations 2015-05-04 18:42 - 2015-05-04 18:42 - 67963216 _____ () C:\Users\Lukasz\Downloads\Nokia_PC_Suite_ALL.exe 2015-05-04 18:40 - 2015-05-04 18:41 - 00741672 _____ (Web software ) C:\Users\Lukasz\Desktop\Nokia-PC-Suite(12931)-dp.exe 2015-05-04 18:27 - 2015-05-04 18:27 - 00021136 _____ () C:\Users\Lukasz\Desktop\gmer.txt 2015-05-04 18:17 - 2015-05-04 18:17 - 00068934 _____ () C:\Users\Lukasz\Desktop\Extras.Txt 2015-05-04 18:14 - 2015-05-04 18:14 - 00140224 _____ () C:\Users\Lukasz\Desktop\OTL.Txt 2015-05-04 17:44 - 2015-05-04 17:44 - 00602112 _____ (OldTimer Tools) C:\Users\Lukasz\Desktop\OTL_[www.programosy.pl].exe 2015-05-04 17:43 - 2015-05-04 17:44 - 00380416 _____ () C:\Users\Lukasz\Desktop\gmer.exe 2015-05-04 17:36 - 2015-05-04 17:36 - 00619688 _____ (Duplex Secure Ltd) C:\Users\Lukasz\Desktop\SPTDinst-v187-x64.exe 2015-05-04 17:28 - 2015-05-04 17:28 - 00619688 _____ (Duplex Secure Ltd) C:\Users\Lukasz\Desktop\Niepotwierdzony 770060.crdownload 2015-05-04 05:04 - 2015-05-04 05:03 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-05-04 05:03 - 2015-05-04 05:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-04-26 15:24 - 2015-05-04 04:47 - 00000000 ____D () C:\Users\Lukasz\Desktop\hack 2015-04-20 01:14 - 2015-04-20 01:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-18 09:31 - 2015-04-18 09:31 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-18 09:31 - 2015-04-18 09:31 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-17 03:41 - 2015-04-17 03:41 - 00000000 ___RD () C:\Program Files (x86)\Skype 2015-04-17 03:41 - 2015-04-17 03:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-04-16 14:22 - 2015-04-21 14:38 - 00000000 ____D () C:\Users\Lukasz\Desktop\druk 2015-04-16 04:01 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-16 04:01 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-16 04:01 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-16 04:01 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-16 04:01 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-16 04:01 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-16 04:01 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-16 04:01 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-16 04:01 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-16 04:01 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-16 04:01 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-16 04:01 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-16 04:01 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-16 04:01 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-16 04:01 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-16 04:01 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-16 04:01 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-16 04:01 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-16 04:01 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-04-16 04:01 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-04-16 04:01 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-04-16 04:01 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-04-16 04:01 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-04-16 04:00 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-16 04:00 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-16 04:00 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-04-16 04:00 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-16 04:00 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-04-16 04:00 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-16 04:00 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-04-16 04:00 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-04-16 04:00 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-16 04:00 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-16 04:00 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-04-16 04:00 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-16 04:00 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-04-16 04:00 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-16 04:00 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-04-16 04:00 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-04-16 04:00 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-16 04:00 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-16 04:00 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-04-16 04:00 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-04-16 04:00 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-04-16 04:00 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-16 04:00 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-16 04:00 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-16 04:00 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-16 04:00 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-16 04:00 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-16 04:00 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-16 04:00 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-04-16 04:00 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-04-16 04:00 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-04-16 04:00 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-04-16 03:57 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-04-16 03:57 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-04-16 03:57 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-04-16 03:57 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-16 03:57 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-16 03:57 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-16 03:57 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-16 03:57 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-04-16 03:57 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-16 03:57 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-16 03:57 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-16 03:57 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-16 03:57 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-16 03:57 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-16 03:57 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-16 03:57 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-04-16 03:57 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-04-16 03:57 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-16 03:57 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-16 03:57 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-16 03:57 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-16 03:56 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-16 03:56 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-16 03:56 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-16 03:56 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-16 03:56 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-04-16 03:56 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-16 03:56 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-16 03:56 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-16 03:56 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-04-16 03:56 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-16 03:56 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-16 03:56 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-16 03:56 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-04-16 03:56 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-16 03:56 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-16 03:56 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-04-16 03:56 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-16 03:56 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-16 03:56 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-04-16 03:56 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-16 03:56 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-16 03:56 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-16 03:56 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-16 03:56 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-16 03:56 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-16 03:56 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-16 03:56 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-04-16 03:56 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-04-16 03:56 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-16 03:56 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-16 03:56 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-16 03:56 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-16 03:56 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-04-16 03:56 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-04-16 03:56 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-16 03:56 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-16 03:56 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-16 03:56 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-16 03:55 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-04-16 03:55 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-16 03:55 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-11 14:15 - 2015-04-11 14:15 - 00000000 ____D () C:\Users\Lukasz\Desktop\nokia 515 2015-04-09 14:08 - 2015-04-09 14:09 - 00000838 _____ () C:\Users\Lukasz\Desktop\LGMobile Support Tool.lnk 2015-04-09 14:01 - 2015-04-09 14:12 - 00000000 ____D () C:\Users\Lukasz\Desktop\soft nowy 2015-04-08 17:19 - 2015-04-08 17:51 - 193128998 _____ () C:\Users\Lukasz\Desktop\Grubson-Holizm-2015-320kbps.rar 2015-04-05 06:35 - 2015-04-05 06:35 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-05 06:35 - 2015-04-05 06:35 - 00000000 ___SD () C:\Windows\system32\GWX ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-05-05 11:48 - 2014-09-29 23:35 - 01186986 _____ () C:\Windows\WindowsUpdate.log 2015-05-05 11:44 - 2015-04-02 11:59 - 00000000 ____D () C:\Users\Lukasz\.VirtualBox 2015-05-05 11:44 - 2015-03-05 22:01 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-05-05 11:44 - 2015-03-05 18:25 - 00001338 _____ () C:\Windows\Tasks\IZLY.job 2015-05-05 11:44 - 2014-09-30 00:03 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-05-05 11:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-05-05 11:43 - 2009-07-14 06:51 - 00037562 _____ () C:\Windows\setupact.log 2015-05-05 11:43 - 2009-07-14 06:45 - 00016304 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-05-05 11:43 - 2009-07-14 06:45 - 00016304 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-05-05 11:33 - 2014-09-30 00:02 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-05-05 11:21 - 2014-09-29 23:30 - 00049250 _____ () C:\Windows\PFRO.log 2015-05-05 03:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-05-05 03:48 - 2009-07-14 19:55 - 00740968 _____ () C:\Windows\system32\perfh015.dat 2015-05-05 03:48 - 2009-07-14 19:55 - 00156298 _____ () C:\Windows\system32\perfc015.dat 2015-05-05 03:48 - 2009-07-14 07:13 - 01670970 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-05-05 03:47 - 2014-11-14 09:41 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2015-05-05 03:47 - 2014-09-30 00:03 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-05-04 19:14 - 2014-09-29 23:45 - 00000000 ____D () C:\Users\Lukasz 2015-05-04 18:46 - 2010-04-22 11:35 - 00034868 _____ () C:\Windows\DPINST.LOG 2015-05-04 05:02 - 2010-04-22 11:21 - 00000000 ____D () C:\Program Files (x86)\Java 2015-05-04 04:47 - 2015-01-12 05:15 - 00000000 ____D () C:\ProgramData\Oracle 2015-05-02 07:22 - 2014-09-30 00:04 - 00002196 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-04-24 15:15 - 2015-03-27 13:53 - 00000164 _____ () C:\Users\Lukasz\Desktop\payback.txt 2015-04-22 11:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2015-04-22 11:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2015-04-21 17:05 - 2014-10-29 08:58 - 00000000 ____D () C:\Users\Lukasz\Desktop\audio 2015-04-21 03:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-04-20 01:21 - 2015-02-06 11:57 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-04-20 01:15 - 2015-02-06 12:04 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-04-17 04:00 - 2014-11-10 17:44 - 01643576 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2015-04-17 03:41 - 2010-04-22 11:55 - 00000000 ____D () C:\ProgramData\Skype 2015-04-17 03:37 - 2014-11-11 14:23 - 00000000 ____D () C:\Windows\system32\MRT 2015-04-17 03:17 - 2014-11-11 14:23 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-04-16 12:33 - 2014-10-24 09:41 - 00000000 ____D () C:\Users\Lukasz\Desktop\pulpit 2015-04-16 12:32 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2015-04-16 04:05 - 2009-07-14 04:34 - 00000580 _____ () C:\Windows\win.ini 2015-04-15 17:34 - 2014-09-30 00:02 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-15 17:34 - 2014-09-30 00:02 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-15 17:34 - 2014-09-30 00:02 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-04-09 14:12 - 2015-01-11 20:34 - 00000000 ____D () C:\ProgramData\LGMOBILEAX 2015-04-09 14:09 - 2015-01-11 20:34 - 00002411 _____ () C:\Windows\SysWOW64\lgAxconfig.ini ==================== Files in the root of some directories ======= 2015-01-25 18:12 - 2015-01-25 18:12 - 0001248 _____ () C:\Users\Lukasz\AppData\Roaming\IZLY 2015-03-19 11:30 - 2015-03-19 11:30 - 0000017 _____ () C:\Users\Lukasz\AppData\Local\resmon.resmoncfg 2015-04-02 11:55 - 2015-04-02 13:02 - 0740775 _____ () C:\ProgramData\AndyDrivers.zip 2014-11-05 00:59 - 2014-09-06 00:59 - 0000032 ____R () C:\ProgramData\hash.dat Files to move or delete: ==================== C:\ProgramData\hash.dat Some content of TEMP: ==================== C:\Users\Lukasz\AppData\Local\Temp\061BC01A-3055-DD5B-9AF6-E0872E10D20C.dll C:\Users\Lukasz\AppData\Local\Temp\061BC01A-3055-DD5B-9AF6-E0872E10D20C.exe C:\Users\Lukasz\AppData\Local\Temp\AFE09586-4C86-762A-7947-B0B894C49FA2.exe C:\Users\Lukasz\AppData\Local\Temp\clrvu.exe C:\Users\Lukasz\AppData\Local\Temp\ICReinstall_Nokia-PC-Suite(12931)-dp.exe C:\Users\Lukasz\AppData\Local\Temp\KUIU.EXE C:\Users\Lukasz\AppData\Local\Temp\MSNFEC8.exe C:\Users\Lukasz\AppData\Local\Temp\NEventMessages.dll C:\Users\Lukasz\AppData\Local\Temp\ose00000.exe C:\Users\Lukasz\AppData\Local\Temp\Quarantine.exe C:\Users\Lukasz\AppData\Local\Temp\SpOrder.dll C:\Users\Lukasz\AppData\Local\Temp\sqlite3.dll C:\Users\Lukasz\AppData\Local\Temp\utt7A9B.tmp.exe C:\Users\Lukasz\AppData\Local\Temp\vcredist9_x86.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-25 03:24 ==================== End Of Log ============================

Additional

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015 Ran by Lukasz at 2015-05-05 11:53:06 Running from C:\Users\Lukasz\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2498732422-692747310-3384970171-500 - Administrator - Disabled) Gość (S-1-5-21-2498732422-692747310-3384970171-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2498732422-692747310-3384970171-1002 - Limited - Enabled) Lukasz (S-1-5-21-2498732422-692747310-3384970171-1001 - Administrator - Enabled) => C:\Users\Lukasz ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.9 - Adobe Systems Incorporated) Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated) Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden Andy OS (HKLM-x32\...\ANDY OS) (Version: 0.43 - Andy OS, Inc) Anvi Smart Defender 2.4 (HKLM-x32\...\Anvi Smart Defender) (Version: 2.4 - Anvisoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.27 - Atheros Communications Inc.) Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros) BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.11.889 - BlueStack Systems, Inc.) BlueStacks Notification Center (HKLM-x32\...\{D4053664-2BFA-4458-80B8-700EFC309201}) (Version: 0.7.11.889 - BlueStack Systems, Inc.) CodeBlocks (HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\CodeBlocks) (Version: 13.12 - The Code::Blocks Team) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.119.0.61 - Conexant) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.8.3 - Bloodshed Software) e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 7.0.2 - Ministerstwo Finansow) e-Deklaracje Desktop (x32 Version: 7.0.2 - Ministerstwo Finansow) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.) Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2086 - Intel Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation) JDownloader (HKLM-x32\...\JDownloader) (Version: - AppWork UG (haftungsbeschränkt)) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 10.8.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.0 - ) LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.22.20141205 - LG Electronics) LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.13.2.0 - LG Electronics) MathType 6 (HKLM-x32\...\DSMT6) (Version: 6.9 - Design Science, Inc.) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Nero 9 Essentials (HKLM-x32\...\{5623b3a7-3df9-4251-95a4-d35cc785a55d}) (Version: - Nero AG) Nero BackItUp (HKLM-x32\...\{0420F95C-11FF-4E02-B967-6CC22B188F9F}) (Version: 5.2.21001 - Nero AG) Nero BackItUp and Burn (HKLM-x32\...\{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}) (Version: 1.2.0030 - Nero AG) Nero BurnRights (HKLM-x32\...\{397516AE-7DFE-4F90-84E0-BD616D559434}) (Version: 3.6.26001 - Nero AG) Nero Express (HKLM-x32\...\{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}) (Version: 9.6.16000 - Nero AG) Nero RescueAgent (HKLM-x32\...\{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}) (Version: 2.6.25002 - Nero AG) Nokia Connectivity Cable Driver (HKLM-x32\...\{D4BF151C-70A8-4CE2-906F-4173A575BAD9}) (Version: 7.1.182.0 - Nokia) Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia) Nokia PC Suite (x32 Version: 7.1.180.94 - Nokia) Hidden Nokia Software Updater (HKLM-x32\...\{7130468A-F53F-4698-8C09-A339EA3B05E6}) (Version: 3.0.655 - Nokia Corporation) NSBuilder wersja 20131017-r5 (HKLM-x32\...\{659E4E8F-C986-4B13-9781-E88AA480366B}_is1) (Version: 20131017-r5 - Aleksander Wojdyga) Oracle VM VirtualBox 4.3.20 (HKLM\...\{86401870-7AB7-4A8D-8AD6-12B27DF2E6E3}) (Version: 4.3.20 - Oracle Corporation) Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Pakiet sterowników systemu Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Program TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation) Program TOSHIBA HDD/SSD Alert (Version: 3.1.64.6 - TOSHIBA Corporation) Hidden Program TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6 - TOSHIBA Corporation) Hidden Puzzle Pirates (HKU\S-1-5-21-2498732422-692747310-3384970171-1001\...\Puzzle Pirates) (Version: - ) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated) Toshiba Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.11 - TOSHIBA CORPORATION) TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.07.64 - TOSHIBA Corporation) TOSHIBA ConfigFree (HKLM-x32\...\{607BE7BF-7C28-4ADB-A4A0-385962B901C3}) (Version: 8.0.28 - TOSHIBA Corporation) TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation) TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation) TOSHIBA Hardware Setup (HKLM-x32\...\{8E9CEA3B-EBD1-439C-A01D-830CB39613C6}) (Version: 2.00.06 - TOSHIBA Corporation) Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.01 - TOSHIBA) TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.3.64 - TOSHIBA CORPORATION) TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.4.9 - TOSHIBA CORPORATION) TOSHIBA Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 2.09.0001 - TOSHIBA) TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 x64 - TOSHIBA Corporation) TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA) TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}) (Version: 1.6.06.64 - TOSHIBA Corporation) TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA) TOSHIBA Supervisor Password (HKLM-x32\...\{073B89C3-BA88-41B5-965F-B35A88EAE838}) (Version: 2.00.03 - TOSHIBA Corporation) TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH) TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.3.64 - TOSHIBA Corporation) TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.15 - TOSHIBA Corporation) Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-0415-1000-0000000FF1CE}_Office15.PROPLUS_{CF394926-359E-48E1-AA25-E56B32FCB335}) (Version: - Microsoft) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) WinRAR 5.10 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 26-04-2015 14:03:02 Windows Update 27-04-2015 03:57:52 Kopia zapasowa systemu Windows 01-05-2015 05:11:38 Windows Update 04-05-2015 03:47:17 Kopia zapasowa systemu Windows 04-05-2015 05:01:05 Removed Java 8 Update 45 04-05-2015 17:29:20 SPTD setup V1.87 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {019FC235-EA9B-4084-9E25-2DC95DAC914C} - \AutoKMS No Task File <==== ATTENTION Task: {0833C46E-25B5-4481-9B17-7DC8B0A26234} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {1529B85D-C115-494C-92CE-E58F8A22703A} - System32\Tasks\{616B0C67-0377-4674-B08B-7D2320B3B400} => pcalua.exe -a C:\Users\Lukasz\Desktop\SetupOviPlayer.exe -d C:\Users\Lukasz\Desktop Task: {1A2B7A75-B7EB-42B3-A390-4653978CA758} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated) Task: {1FEF8AC1-5CFC-4A78-9A3C-D3E642A7F647} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-30] (Google Inc.) Task: {3394C9BA-5B4C-432F-8487-D0E6A52131EF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {3525D5BF-F90E-4BBA-ABF1-D76BE5BA9FCF} - System32\Tasks\{E2E6984E-9198-410B-846D-8819A0083E37} => C:\Users\Lukasz\Desktop\l9\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014.exe [2013-05-21] () Task: {37B674FB-61E1-4144-B2DD-4CF22036BCE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-30] (Google Inc.) Task: {3FB17BEA-3DC2-46EA-B253-3EAE2390DB8F} - System32\Tasks\{82A79E5A-A8DD-42DA-9601-D48B2EF1BB3D} => C:\Users\Lukasz\Desktop\l9\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014.exe [2013-05-21] () Task: {4ACD98A1-495C-4DCA-8D3E-98779F70C9B3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {50B78131-5A3F-4F47-9E3B-F896F477C2AE} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-02-22] (TOSHIBA CORPORATION) Task: {58B46DE0-B747-4F2E-A4E8-7A54FE0D40A4} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation) Task: {628C98AF-3AE1-4C29-AD47-A19370569881} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {6756D63E-51E3-44AA-B82B-5575952DD87F} - System32\Tasks\ASD_Main => C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe [2014-11-24] (Anvisoft) Task: {8AADE7FA-AD99-4957-812B-EA531273E785} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {93EBF3F1-8018-4048-BFD3-11E0F04B2333} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {B8356741-C62C-49C1-80A8-2744EA5184A0} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {BACDAEE5-B958-49E5-BCD1-E876474D257F} - System32\Tasks\IZLY => C:\Users\Lukasz\AppData\Roaming\IZLY.exe <==== ATTENTION Task: {F379120B-8A87-4B5D-A957-8E45C1715057} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\IZLY.job => C:\Users\Lukasz\AppData\Roaming\IZLY.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============== 2015-04-02 13:05 - 2015-02-03 15:22 - 00907144 _____ () C:\Program Files\Andy\HandyAndy.exe 2015-04-02 13:05 - 2015-02-03 14:29 - 00856968 _____ () C:\Program Files\Andy\AndyPriorityMgr.exe 2014-04-30 04:04 - 2014-04-30 04:04 - 00088080 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\libglog.dll 2014-11-20 10:17 - 2014-11-20 10:17 - 01026560 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Engine.dll 2014-04-30 04:04 - 2014-04-30 04:04 - 00038928 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\fuzzy.dll 2014-04-30 04:04 - 2014-04-30 04:04 - 00093712 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\zlibwapi.dll 2014-11-18 09:15 - 2014-11-18 09:15 - 00125952 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ExtractImpl.dll 2014-11-18 09:15 - 2014-11-18 09:15 - 00021504 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\UnpackImpl.dll 2014-11-18 09:14 - 2014-11-18 09:14 - 00252928 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\pyunpacker.dll 2014-11-18 09:14 - 2014-11-18 09:14 - 00032768 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\fsmlib.dll 2014-11-18 09:15 - 2014-11-18 09:15 - 00493568 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\http_hook.dll 2014-04-30 03:27 - 2014-04-30 03:27 - 00649744 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\sqlite3.dll 2014-11-20 10:17 - 2014-11-20 10:17 - 00300032 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\UserProfile.dll 2014-11-20 10:18 - 2014-11-20 10:18 - 00773632 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\CoreScan.dll 2014-11-18 09:15 - 2014-11-18 09:15 - 00117760 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\FileSearcher.dll 2012-06-26 13:11 - 2012-06-26 13:11 - 02302040 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtCore4.dll 2012-06-26 13:11 - 2012-06-26 13:11 - 08197208 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtGui4.dll 2012-06-26 13:11 - 2012-06-26 13:11 - 00345688 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtXml4.dll 2012-06-26 13:10 - 2012-06-26 13:10 - 00202328 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll 2012-06-26 13:10 - 2012-06-26 13:10 - 00027736 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll 2012-06-26 13:11 - 2012-06-26 13:11 - 00282200 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtSvg4.dll 2015-05-02 07:22 - 2015-04-28 04:07 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll 2015-05-02 07:22 - 2015-04-28 04:07 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll 2015-05-02 07:22 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2498732422-692747310-3384970171-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 89.231.1.206 - 217.172.224.160 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^Lukasz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^TRDCReminder.lnk => C:\Windows\pss\TRDCReminder.lnk.Startup MSCONFIG\startupreg: 00TCrdMain => %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: cAudioFilterAgent => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: GoogleChromeAutoLaunch_CB77F52AAA5F9DDBE9C53CBF150DA9F5 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey MSCONFIG\startupreg: NBAgent => "c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t MSCONFIG\startupreg: SmartFaceVWatcher => %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe MSCONFIG\startupreg: SmoothView => %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe MSCONFIG\startupreg: TOSHIBA Online Product Information => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe MSCONFIG\startupreg: Toshiba Registration => C:\Program Files\Toshiba\Registration\ToshibaReminder.exe MSCONFIG\startupreg: Toshiba TEMPRO => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe MSCONFIG\startupreg: ToshibaServiceStation => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60 MSCONFIG\startupreg: TosNC => %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe MSCONFIG\startupreg: TosReelTimeMonitor => %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe MSCONFIG\startupreg: TosVolRegulator => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe MSCONFIG\startupreg: TPwrMain => %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE MSCONFIG\startupreg: TWebCamera => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun ==================== FirewallRules (whitelisted) =============== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) FirewallRules: [{8396A9A5-463E-4951-BE47-56526E3AA879}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{213269F2-6A87-4DC3-B3F9-7A688BAFF181}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{8EFCD389-6DB7-4488-8C56-E8B2E7DF4AB2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{1778AFA6-6845-4BAD-AF9D-1AF3700C71D5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{AC2AFD4D-87DE-4288-8E00-57D5532858C8}] => (Allow) svchost.exe FirewallRules: [{AB02DE62-38C4-4CC0-A8CD-05F497C13D86}] => (Allow) C:\Users\Lukasz\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{BAD89019-3F9C-423D-8BEC-BE1A6BE2A161}] => (Allow) C:\Users\Lukasz\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4E935FB0-ACE6-42DA-B882-762FC170DAB1}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{BA4523E9-2066-42E1-B073-A6F436B4C86B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{FED7EF87-4B6F-44BB-8679-E76216D1BD37}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{980BF6F3-2C47-4530-AAFF-C10E780D61D7}] => (Allow) LPort=2869 FirewallRules: [{9DA362AF-B6A9-4465-8FAF-60075C1A8E5E}] => (Allow) LPort=1900 FirewallRules: [{418BA8A4-C7A8-4F3C-9369-59F8834A6555}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe FirewallRules: [TCP Query User{2D618434-E883-4279-966A-93981776EE06}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe FirewallRules: [UDP Query User{E8BD9EB5-83F3-4CE2-810E-D5A0F7B293ED}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe FirewallRules: [TCP Query User{6B76D1FE-BE7C-4DC1-90A2-EC56DC28967C}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe FirewallRules: [UDP Query User{73C73DE6-837E-4D99-8B92-0933A4F2AE05}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe FirewallRules: [{E4FD1193-80C7-44C9-9BBE-7C6016FE3F3E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{31548A6B-E37B-4A81-B249-D9C4F43C6C77}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{75C3D1CA-6E3C-41C4-AC15-BFA15B637EB0}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{2C3F2A81-FCD1-44E8-BB38-67FE0EF6990C}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{4FB9E5AC-363A-46B4-A27C-45560616C32D}] => (Allow) C:\Program Files\Microsoft Office\Office15\outlook.exe FirewallRules: [TCP Query User{5FE5C288-E6C4-4054-A491-1C77FA1ACDD9}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe FirewallRules: [UDP Query User{6D4969B8-310B-42BB-A4A5-404B6C7DD8AC}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe FirewallRules: [{5C8849EC-D547-40C4-B447-6DA87AE56B2D}] => (Block) C:\program files\andy\andy.exe FirewallRules: [{46E219B9-1EF8-41FD-BE51-9ACD72FDF145}] => (Block) C:\program files\andy\andy.exe FirewallRules: [{0EF03DCF-B4AD-452B-9E2F-055125D807D8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{C554005C-3BAD-4B09-939F-3A41EEB420BB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{5BC18D35-99F3-4654-BC6D-86BE995A2E50}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{A989DCDA-E4E0-4ABE-AFFF-8C0BA4AE7ABD}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{09715184-83E7-443A-AB11-7ADC80A14683}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: qrnfd_1_10_0_9 Description: qrnfd_1_10_0_9 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: qrnfd_1_10_0_9 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (05/05/2015 11:44:52 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/05/2015 11:36:19 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/05/2015 11:22:11 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/04/2015 07:33:51 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:51 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:48 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:48 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:31:02 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:31:02 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:30:59 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback System errors: ============= Error: (05/05/2015 11:54:02 AM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: Wywołanie ScRegSetValueExW dla Start nie powiodło się i wystąpił następujący błąd: %%5. Error: (05/05/2015 11:49:58 AM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera TOMEK-KOMPUTER. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{BF3F9798-E73A-4372-B3C2-BCDEF39BA92B}. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (05/05/2015 11:44:53 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego: qrnfd_1_10_0_9 Error: (05/05/2015 11:44:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa BlueStacks Android Service zakończyła działanie; wystąpił następujący błąd: %%1064 Error: (05/05/2015 11:44:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Go To Restart z powodu następującego błędu: %%2 Error: (05/05/2015 11:44:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Top Up Sub-heading z powodu następującego błędu: %%2 Error: (05/05/2015 11:43:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Windows Live ID Sign-in Assistant z powodu następującego błędu: %%109 Error: (05/05/2015 11:43:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Nero BackItUp Scheduler 4.0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 500 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (05/05/2015 11:43:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Ochrona oprogramowania niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (05/05/2015 11:42:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Instalator modułów systemu Windows niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Microsoft Office Sessions: ========================= Error: (05/05/2015 11:44:52 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/05/2015 11:36:19 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/05/2015 11:22:11 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: ) Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (05/04/2015 07:33:51 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:51 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:48 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:33:48 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:31:02 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:31:02 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Music_Player_Setup_2_5_11021_pl.exe Stack trace: .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback Error: (05/04/2015 07:30:59 PM) (Source: Nokia Software Installer) (EventID: 1) (User: ) Description: Nokia Software Installer 3.1.414 (NLib 0.7.487) HTTP callback error. errorcode: 24001 Serwer zwrócił nieprawidłową lub nie rozpoznaną odpowiedź. errorcode: 12152 WinHttpResult: 1 Host: nds2.fds-ncom.nokia.com Port: 80 Path: /files/support/ovi/software/nokiamusic/2_5_11021/Nokia_Multimedia_Common_Components_2_7_69.msi Stack trace: .\NHttpFileDownload.cpp(379) : CNHttpFileDownload::WorkerProc .\NHttpFileDownload.cpp(445) : CNHttpFileDownloadInfo::WaitForReady .\NHTTPRequest.cpp(56) : CNHTTPRequest::StatusCallback .\NHTTPRequest.cpp(624) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(546) : CNHTTPRequest::HandleStatusCallback .\NHTTPRequest.cpp(539) : CNHTTPRequest::HandleStatusCallback ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz Percentage of memory in use: 48% Total physical RAM: 3963.97 MB Available physical RAM: 2029.62 MB Total Pagefile: 7926.13 MB Available Pagefile: 5632.45 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (WINDOWS) (Fixed) (Total:116.21 GB) (Free:7.49 GB) NTFS Drive d: (Data) (Fixed) (Total:86.31 GB) (Free:7.39 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: 71EEEA9F) Partition 1: (Active) - (Size=400 MB) - (Type=27) Partition 2: (Not Active) - (Size=116.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=86.3 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=30 GB) - (Type=OF Extended) ==================== End Of Log ============================

Shortcut

Kod: Zaznacz wszystko: Users shortcut scan result (x64) Version: 02-05-2015 Ran by Lukasz at 2015-05-05 11:55:45 Running from C:\Users\Lukasz\Desktop Boot Mode: Normal ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrodist.exe (Adobe Systems Incorporated.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk -> C:\Windows\Installer\{AC76BA86-1033-FFFF-7760-000000000006}\_SC_Acrobat.ico () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk -> C:\Program Files (x86)\Adobe Download Assistant\Adobe Download Assistant.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk -> C:\Program Files (x86)\Adobe\Acrobat 11.0\FormsCentral\FormsCentralForAcrobat.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1045-7B44-AB0000000001}\SC_Reader.ico () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk -> C:\Program Files (x86)\e-Deklaracje\e-Deklaracje.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk -> C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk -> C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> C:\Program Files\WinRAR\CoNowego.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> C:\Program Files\WinRAR\Rar.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> C:\Program Files\WinRAR\WinRAR.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Writer.lnk -> C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.exe (Microsoft Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Co nowego.lnk -> C:\Program Files (x86)\Winamp\whatsnew.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Odinstaluj Winampa.lnk -> C:\Program Files (x86)\Winamp\UninstWA.exe (Nullsoft, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Pomoc programu Recovery Media Creator.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Recovery Media Creator\TrdcHelp.html () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA Bulletin Board.lnk -> C:\Program Files\TOSHIBA\BulletinBoard\TosBulletinBoard.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Toshiba Online Product Information.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Online Product Information\TOPI.exe (TOSHIBA) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Toshiba Recovery Media Creator.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Recovery Media Creator\TRMCLcher.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA ReelTime.lnk -> C:\Program Files\TOSHIBA\ReelTime\TosReelTime.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Toshiba TEMPRO.lnk -> C:\Program Files (x86)\Toshiba TEMPRO\Tempro.exe (Toshiba Europe GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Utilities\Service Station.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA Media Controller\Pomoc programu TOSHIBA Media Controller.lnk -> C:\Program Files\TOSHIBA\Media Controller\Help\ToshibaMediaController.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA Media Controller\TOSHIBA Media Controller Plug-in Help.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\Help\index.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA Media Controller\TOSHIBA Media Controller.lnk -> C:\Program Files\TOSHIBA\Media Controller\MediaController.exe (Toshiba Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TOSHIBA Media Controller\Umowa licencyjna.lnk -> C:\Program Files\TOSHIBA\Media Controller\Help\EULA.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Aplikacji kamery internetowej.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Dostęp.lnk -> C:\Program Files\TOSHIBA\Utilities\TACSPROP.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Face Recognition Epomoc.lnk -> C:\Program Files\TOSHIBA\SmartFaceV\Help\1045\index.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Face Recognition.lnk -> C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVSetting.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\HWSetup.lnk -> C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Narzędzie diagnostyki komputera.lnk -> C:\Program Files (x86)\Toshiba\PCDiag\PCDiag.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Pomoc dla aplikacji kamery internetowej.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Web Camera Application\Web Camera Application Help.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Pomoc programu TOSHIBA HDD SSD Alert.lnk -> C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\SSDAlert1.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Pomoc programu Zooming Utility.lnk -> C:\Program Files\TOSHIBA\SmoothView\SmoothView.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Program HDD SSD Alert.lnk -> C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSSDAlert.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Program narzędziowy Zooming Utility.lnk -> C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Service Station.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\TOSHIBA Assist.lnk -> C:\Program Files\TOSHIBA\Toshiba Assist\TInTouch.exe (TOSHIBA) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Uruchom ponownie program do symulacji klawiszy funkcyjnych.lnk -> C:\Program Files\TOSHIBA\FlashCards\TfcRst.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Ustawienia dla programu do symulacji klawiszy funkcyjnych TOSHIBA.lnk -> C:\Program Files\TOSHIBA\FlashCards\TfcConf\TfcConf.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\1.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\2.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfAddGadgets.exe (TOSHIBA CORPORATION) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\4.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfmain.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\CD&DVD Applications\Disc Creator.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\CD&DVD Applications\Pomoc programu Disc Creator.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\CD&DVD Applications\Program DVD-RAM Utility.lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\TosRamUtil.exe (TOSHIBA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\O programie QuickTime.lnk -> C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\RichText.ico () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\QuickTime Player.lnk -> C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\QTPlayer.ico () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\License (English).lnk -> C:\Program Files\Oracle\VirtualBox\License_en_US.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\Oracle VM VirtualBox.lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (CHM, English).lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (PDF, English).lnk -> C:\Program Files\Oracle\VirtualBox\doc\UserManual.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NSBuilder\NSBuilder.lnk -> C:\Program Files (x86)\NSBuilder\nsbuilder.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite\Instrukcja obsługi pakietu Nokia PC Suite.lnk -> C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PC_Suite_pol.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite\Nokia PC Suite.lnk -> C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite\Odinstaluj pakiet Nokia PC Suite.lnk -> C:\ProgramData\Installations\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}\Nokia_PC_Suite_ALL.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero ControlCenter 4.lnk -> C:\Program Files (x86)\Nero\Nero ControlCenter 4\ncc.exe (Nero AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero BackItUp & Burn\Nero BackItUp.lnk -> c:\Windows\Installer\{0420F95C-11FF-4E02-B967-6CC22B188F9F}\ScBackItUp.Exe_6DE631547FD24BC5962A4E5F07A1BE20.exe (Acresso Software Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero BackItUp & Burn\Nero Express.lnk -> c:\Windows\Installer\{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}\NeroExpress.exe_81A8FD91A6494AD5B4998149EAAC7E7C.exe (Acresso Software Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero BackItUp & Burn\Nero RescueAgent(TM).lnk -> c:\Windows\Installer\{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}\NeroRescueAgent.ex_2882597C6E684EBDA23F3CF2CA0CBC30.exe (Acresso Software Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero StartSmart Essentials.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero StartSmart\NeroStartSmart.exe (Nero AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero Toolkit\Nero BurnRights.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero BurnRights\NeroBurnRights.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero Toolkit\Nero DiscSpeed.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero DiscSpeed\DiscSpeed.exe (Nero AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero Toolkit\Nero DriveSpeed.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero DriveSpeed\DriveSpeed.exe (Nero AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero Toolkit\Nero InfoTool.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero InfoTool\InfoTool.exe (Nero AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero BurnRights [Instrukcja w jęz. angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero BurnRights\NeroBurnRights_Eng.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero ControlCenter 4 [Pomoc w jęz. angielskim].lnk -> C:\Program Files (x86)\Nero\Nero ControlCenter 4\NeroControlCenter_ENG.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero DiscSpeed [Instrukcja w języku angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero DiscSpeed\NeroDiscSpeed_Eng.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero DriveSpeed [Instrukcja w języku angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero DriveSpeed\NeroDriveSpeed_Eng.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero Express Essentials [Instrukcja w języku angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero Express\NeroExpress_ENG.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero InfoTool [Instrukcja w języku angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero InfoTool\NeroInfoTool_Eng.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Instrukcje\Nero StartSmart Essentials [Instrukcja w języku angielskim].lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero StartSmart\NeroStartSmart_ENG.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\Silverlight.Configuration.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Access 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\accicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Excel 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\xlicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Filler 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\inficon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneDrive dla firm 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\grv_icons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneNote 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\joticon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Outlook 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\outicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\PowerPoint 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pptico.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Publisher 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pubs.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Skype for Business 2015.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\lyncicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Wyślij do programu OneNote 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\joticon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Database Compare 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\dbcicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Dziennik telemetryczny dla pakietu Office 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\osmclienticon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Menedżer nagrywania programu Lync.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\lyncicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Office 2013 Upload Center.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\msouc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Preferencje językowe pakietu Office 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\misc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Spreadsheet Compare 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\sscicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Narzędzia pakietu Office 2013\Telemetryczny pulpit nawigacyjny dla pakietu Office 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\osmadminicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6\MathType Help.lnk -> C:\Program Files (x86)\MathType\MT6enu.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6\MathType.lnk -> C:\Program Files (x86)\MathType\MathType.exe (Design Science, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool\LGMobile Support Tool.lnk -> C:\ProgramData\LGMOBILEAX\LGMLauncher.exe (LG Electronics) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool\Uninstall.lnk -> C:\ProgramData\LGMOBILEAX\B2C_Client\B2CAppUninstall.exe (LG Electronics) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite\LG PC Suite.lnk -> C:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite\uninstall.lnk -> C:\Program Files (x86)\LG Electronics\LG PC Suite\uninstall.exe (LG Electronics) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Codec Tweak Tool.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic (x64).lnk -> C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe (MPC-HC Team) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC\mpc-hc.exe (MPC-HC Team) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Uninstall\Uninstall K-Lite Codec Pack.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\GraphStudioNext (x64).lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\GraphStudioNext64.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\GraphStudioNext.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\GraphStudioNext.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\MediaInfo.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\mediainfo.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\Win7DSFilterTweaker.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Help\Frequently Asked Questions.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Info\faq.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader.lnk -> C:\Program Files (x86)\JDownloader\JDownloaderD3D.exe (AppWork UG (haftungsbeschrÃ¤nkt)) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader\Uninstall JDownloader.lnk -> C:\Program Files (x86)\JDownloader\uninstall.exe (AppWork UG (haftungsbeschränkt)) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Java Mission Control.lnk -> C:\Program Files\Java\jdk1.8.0_25\bin\jmc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager\Intel® Matrix Storage Console.lnk -> C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\Shell.exe (Intel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks\Start BlueStacks.lnk -> C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe (BlueStack Systems, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++\Dev-C++.lnk -> C:\Program Files (x86)\Dev-Cpp\devcpp.exe (Bloodshed Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++\License.lnk -> C:\Program Files (x86)\Dev-Cpp\copying.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++\Uninstall Dev-C++.lnk -> C:\Program Files (x86)\Dev-Cpp\uninstall.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft\Anvi Smart Defender\Anvi Smart Defender.lnk -> C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe (Anvisoft) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft\Anvi Smart Defender\Uninstall.lnk -> C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\uninstall.exe (Anvisoft) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy\Start HandyAndy.lnk -> C:\Program Files\Andy\HandyAndy.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy\Uninstall Andy.lnk -> C:\Program Files\Andy\AndyUninstall.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk -> C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\Links\Desktop.lnk -> C:\Users\Lukasz\Desktop () Shortcut: C:\Users\Lukasz\Links\Downloads.lnk -> C:\Users\Lukasz\Downloads () Shortcut: C:\Users\Lukasz\Links\polibuda.lnk -> C:\Users\Lukasz\Desktop\polibuda () Shortcut: C:\Users\Lukasz\Desktop\Dev-C++.lnk -> C:\Program Files (x86)\Dev-Cpp\devcpp.exe (Bloodshed Software) Shortcut: C:\Users\Lukasz\Desktop\LGMobile Support Tool.lnk -> C:\ProgramData\LGMOBILEAX\LGMLauncher.exe (LG Electronics) Shortcut: C:\Users\Lukasz\Desktop\Nokia Software Updater.lnk -> C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui.exe (Nokia) Shortcut: C:\Users\Lukasz\Desktop\Puzzle Pirates.lnk -> C:\Windows\SysWOW64\javaw.exe (No File) Shortcut: C:\Users\Lukasz\Desktop\µTorrent.lnk -> C:\Users\Lukasz\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\Lukasz\Desktop\pulpit\Anvi Smart Defender.lnk -> C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe (Anvisoft) Shortcut: C:\Users\Lukasz\Desktop\pulpit\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (No File) Shortcut: C:\Users\Lukasz\Desktop\pulpit\e-Deklaracje.lnk -> C:\Program Files (x86)\e-Deklaracje\e-Deklaracje.exe () Shortcut: C:\Users\Lukasz\Desktop\pulpit\NSBuilder.lnk -> C:\Program Files (x86)\NSBuilder\nsbuilder.exe () Shortcut: C:\Users\Lukasz\Desktop\l9\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\Apps\Skrót do B2C_Client Windows 7&8.lnk -> C:\ProgramData\LGMOBILEAX () Shortcut: C:\Users\Lukasz\Desktop\l9\UpTestEX_BY_BRIDE_2014\UpTestEX_BY_BRIDE_2014\Apps\Skrót do B2C_Client Windows XP.lnk -> C:\ProgramData\LGMOBILEAX () Shortcut: C:\Users\Lukasz\AppData\Roaming\Three Rings Design\Puzzle Pirates\Play Puzzle Pirates.lnk -> C:\Windows\System32\javaw.exe (No File) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\Lukasz\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Puzzle Pirates.lnk -> C:\Windows\SysWOW64\javaw.exe (No File) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> C:\Program Files\WinRAR\CoNowego.txt () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> C:\Program Files\WinRAR\Rar.txt () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> C:\Program Files\WinRAR\WinRAR.chm () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nokia\Nokia Software Updater\Nokia Software Updater.lnk -> C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui.exe (Nokia) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nokia\Nokia Software Updater\Uwagi na temat licencji i praw autorskich.lnk -> C:\Program Files (x86)\Nokia\Nokia Software Updater\copyright_notices_and_licenses.chm () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CB Share Config.lnk -> C:\Program Files (x86)\CodeBlocks\cb_share_config.exe () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\Code Snippets.lnk -> C:\Program Files (x86)\CodeBlocks\codesnippets.exe () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\Uninstall CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\uninstall.exe (The Code::Blocks Team) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Oracle VM VirtualBox.lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.exe () Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -> C:\Users\Lukasz\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Media Player Classic.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe (MPC-HC Team) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SmartAudio.lnk -> C:\Program Files\CONEXANT\SAII\SmartAudio.exe (Conexant Systems, Inc) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Public\Desktop\Nokia PC Suite.lnk -> C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) Shortcut: C:\Users\Public\Desktop\Start BlueStacks.lnk -> C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe (BlueStack Systems, Inc.) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp (Tryb awaryjny).lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) -> /SAFE=1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Limited Warranty.lnk -> C:\Program Files (x86)\Toshiba\Manuals\TREXLauncher.exe (TOSHIBA) -> Limited Warranty ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Manual.lnk -> C:\Program Files (x86)\Toshiba\Manuals\TREXLauncher.exe (TOSHIBA) -> Manual ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Rejestracja gwarancji firmy Toshiba.lnk -> C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe (Toshiba Europe GmbH) -> -start ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\TRDCReminder.lnk -> C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) -> MANUAL ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Narzędzia\Pomoc do programu do symulacji klawiszy funkcyjnych TOSHIBA.lnk -> C:\Windows\hh.exe (Microsoft Corporation) -> "C:\Program Files\TOSHIBA\FlashCards\Help\TFC.chm" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\3.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfmain.exe (TOSHIBA Corporation) -> /wps ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\5.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfmain.exe (TOSHIBA Corporation) -> /profile ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\6.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfmain.exe (TOSHIBA Corporation) -> /radar ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA\ConfigFree\7.lnk -> C:\Program Files (x86)\Toshiba\ConfigFree\cfmain.exe (TOSHIBA Corporation) -> /help ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\Odinstaluj QuickTime.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} /qf ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Uaktualnienie Nero online.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero Online Upgrade\NeroOnlineUpgrade.exe (Nero AG) -> ShowOffer ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 9\Nero Express Essentials.lnk -> C:\Program Files (x86)\Nero\Nero 9\Nero Express\NeroExpress.exe (Nero AG) -> /w ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Designer 2013.lnk -> C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\inficon.exe () -> /design ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6\Equation Conversion Manager.lnk -> C:\Program Files (x86)\MathType\Setup.exe (Design Science, Inc.) -> -OLEMGR ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6\MathType Server.lnk -> C:\Program Files (x86)\MathType\MathType.exe (Design Science, Inc.) -> -server ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6\Remove MathType.lnk -> C:\Program Files (x86)\MathType\Setup.exe (Design Science, Inc.) -> -R ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\DirectVobSub (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\vsfilter64.dll",DirectVobSub ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\DirectVobSub.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\vsfilter.dll",DirectVobSub ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow audio decoder (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow64\ffdshow.ax",configureAudio ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow audio decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configureAudio ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow video decoder (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow64\ffdshow.ax",configure ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow video decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configure ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Audio (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\lavaudio.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Audio.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavaudio.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Splitter (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\lavsplitter.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Splitter.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavsplitter.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Video (x64).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\lavvideo.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Video.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavvideo.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\madVR.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Filters\madVR\madHcCtrl.exe (madshi.net) -> editLocalSettingsDontWait ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\Reset to recommended settings.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe () -> /resetsettings ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation) -> -tab about ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation) -> -tab update ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy\Start Andy.lnk -> C:\Program Files\Andy\HandyAndy.exe () -> startandy ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\Apps.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.bluestacks.appmart com.bluestacks.appmart.MarketPageGrid ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\Appstore.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.amazon.venezia com.amazon.venezia.Venezia ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\BlueStacks Cloud Connect.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.bluestacks.appsyncer com.bluestacks.appsyncer.AppListActivity ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\Facebook.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.facebook.katana com.facebook.katana.LoginActivity ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\Pulse.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.alphonso.pulse com.alphonso.pulse.newsrack.NewsRackActivity ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\My Apps\Twitter.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android com.twitter.android com.twitter.android.StartActivity ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\App Stores\1Mobile Market.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android me.onemobile.android me.onemobile.android.MainPagerActivity ShortcutWithArgument: C:\ProgramData\BlueStacks\UserData\Library\App Stores\GetJar.lnk -> C:\Program Files (x86)\BlueStacks\HD-RunApp.exe (BlueStack Systems, Inc.) -> Android getjar.android.client getjar.android.client.Main ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Audio CD).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:AD ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Dysk z danymi).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:DD ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Zapisz obraz na dysku).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:ITD ShortcutWithArgument: C:\Users\Lukasz\Desktop\pulpit\Start Andy.lnk -> C:\Program Files\Andy\HandyAndy.exe () -> startandy ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nokia\Nokia Software Updater\Odinstalowanie Nokia Software Updater.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {7130468A-F53F-4698-8C09-A339EA3B05E6} ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -extoff ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto: ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Audio CD).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:AD ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Dysk z danymi).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:DD ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\SendTo\TOSHIBA Disc Creator (Zapisz obraz na dysku).lnk -> C:\Program Files (x86)\Toshiba\TOSHIBA Disc Creator\ToDisc.exe (TOSHIBA Corporation) -> /SendTo:ITD ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Andy.lnk -> C:\Program Files\Andy\HandyAndy.exe () -> startandy InternetURL: C:\Users\Lukasz\Favorites\Amazon.co.uk Homepage.url -> hxxp://www.amazon.co.uk/?tag=tochibauk-win7-ie-portal-21 InternetURL: C:\Users\Lukasz\Favorites\eBay.url -> hxxp://rover.ebay.com/rover/1/4908-44618-9400-7/4?link=shortcut1 InternetURL: C:\Users\Lukasz\Favorites\Gry WildTangent.url -> hxxp://toshiba.wildgames.com/?mc=iefav&dp=toshibaemea InternetURL: C:\Users\Lukasz\Favorites\Mój eBay.url -> hxxp://rover.ebay.com/rover/1/4908-44618-9400-7/4?link=shortcut3 InternetURL: C:\Users\Lukasz\Favorites\Oferty na eBay.url -> hxxp://rover.ebay.com/rover/1/4908-44618-9400-7/4?link=shortcut2 InternetURL: C:\Users\Lukasz\Favorites\Photo Service - by myphotobook.url -> hxxp://toshiba.myphotobook.eu/ InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Akcesoria i usługi firmy Toshiba.url -> hxxp://ce.computers.toshiba-europe.com/innovation/pl/generic/optionsandservices/ InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Partnerzy firmy Toshiba.url -> hxxp://ce.computers.toshiba-europe.com/innovation/pl/generic/partners-pl InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Pomoc techniczna firmy Toshiba.url -> hxxp://pc-support.toshiba-europe.com/ InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Pomoc techniczna Toshiba.url -> hxxp://www.toshiba-europe.com/smp InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Portal firmy Toshiba.url -> hxxp://www.toshiba.pl/ InternetURL: C:\Users\Lukasz\Favorites\Witryny firmy Toshiba w sieci Web\Wspólnota pomocy technicznej firmy Toshiba.url -> hxxp://forums.computers.toshiba-europe.com/forums/index.jspa InternetURL: C:\Users\Lukasz\Favorites\Windows Live\Galeria gadżetów Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkID=70742 InternetURL: C:\Users\Lukasz\Favorites\Windows Live\Poczta usługi Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681 InternetURL: C:\Users\Lukasz\Favorites\Windows Live\Programy usługi Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700 InternetURL: C:\Users\Lukasz\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\MSN Gospodarka.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68923 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\MSN Rozrywka.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68924 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68921 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\MSN Technologie.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55143 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\MSN Wideo.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68922 InternetURL: C:\Users\Lukasz\Favorites\MSN — witryny sieci Web\Portal MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=54729 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Centrum bezpieczeństwa Microsoft.url -> hxxp://go.microsoft.com/fwlink/?LinkID=72887 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Dodatki programu Internet Explorer.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Microsoft Office Online.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72885 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Microsoft Technet.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72886 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Microsoft w Polsce.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Oryginalne oprogramowanie firmy Microsoft.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72900 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Strona główna programu Internet Explorer.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Strona główna systemu Windows.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\Technologia RSS.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72889 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\W domu.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406 InternetURL: C:\Users\Lukasz\Favorites\Microsoft — witryny sieci Web\W pracy.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72407 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\IE Add-on site.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\IE site on Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=44661 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\Microsoft At Home.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55424 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\Microsoft At Work.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68920 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?LinkId=140813 InternetURL: C:\Users\Lukasz\Favorites\Microsoft Websites\Welcome to IE8.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68919 InternetURL: C:\Users\Lukasz\Favorites\Links for Polska\Bezpieczeństwo w trybie online.url -> hxxp://go.microsoft.com/fwlink/?LinkId=142211 InternetURL: C:\Users\Lukasz\Favorites\Links for Polska\Bezpieczny Internet.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129626 InternetURL: C:\Users\Lukasz\Favorites\Links for Polska\Kultura.pl.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129625 InternetURL: C:\Users\Lukasz\Favorites\Links for Polska\Pogodynka.pl — oficjalny serwis pogodowy IMGW.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129624 InternetURL: C:\Users\Lukasz\Favorites\Links for Polska\Polska.pl.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129622 InternetURL: C:\Users\Lukasz\Favorites\Links\Amazon.url -> hxxp://www.amazon.co.uk/?tag=tochibauk-win7-ie-portal-21 InternetURL: C:\Users\Lukasz\Favorites\Links\eBay.url -> hxxp://rover.ebay.com/rover/1/4908-44618-9400-7/4?link=shortcut1 InternetURL: C:\Users\Lukasz\Favorites\Links\Galeria obiektów Web Slice.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315 InternetURL: C:\Users\Lukasz\Favorites\Links\Gry WildTangent.url -> hxxp://toshiba.wildgames.com/?mc=iefav&dp=toshibaemea InternetURL: C:\Users\Lukasz\Favorites\Links\Sugerowane witryny.url -> https://ieonline.microsoft.com/#ieslice InternetURL: C:\Users\Lukasz\AppData\Roaming\Three Rings Design\Puzzle Pirates\Online Manual.url -> hxxp://download.threerings.net/docs/ InternetURL: C:\Users\Lukasz\AppData\Roaming\Three Rings Design\Puzzle Pirates\Puzzle Pirates Home Page.url -> hxxp://download.threerings.net ==================== End of log =============================

**Posty:** 4765 · przez **ordynat** 05 Maj 2015, 12:31

Otwórz Notatnik i wklej w nim:

Task: C:\Windows\Tasks\IZLY.job => C:\Users\Lukasz\AppData\Roaming\IZLY.exe <==== ATTENTION
Task: {BACDAEE5-B958-49E5-BCD1-E876474D257F} - System32\Tasks\IZLY => C:\Users\Lukasz\AppData\Roaming\IZLY.exe <==== ATTENTION
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
C:\Users\Lukasz\Desktop\Nokia-PC-Suite(12931)-dp.exe
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Andy OS" /f
C:\Users\Lukasz\AppData\Roaming\IZLY
S2 sibehylo; C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\jnsa8187.tmp [X]
S2 vowegyhi; C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38\nspE6E0.tmp [X]
C:\Users\Lukasz\AppData\Roaming\40F7675A-1425576142-DF11-B50E-00266C798F38
CHR StartupUrls: Default -> "https://www.google.pl/webhp?sourceid=chrome-instant&ion=1&espv=213&ie=UTF-8", "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1422134611&from=cor&uid=TOSHIBAXMK2565GSX_70PNB4X0BXX70PNB4X0B", "hxxp://www.google.com/"
Toolbar: HKU\S-1-5-21-2498732422-692747310-3384970171-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [gmsd_pl_62] => [X]
HKLM-x32\...\Run: [Andy] => C:\Program Files\Andy\HandyAndy.exe [907144 2015-02-03] ()
C:\Program Files\Andy\HandyAndy.exe
C:\Program Files\Andy
ShortcutWithArgument: C:\Users\Lukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Andy.lnk -> C:\Program Files\Andy\HandyAndy.exe () -> startandy
ShortcutWithArgument: C:\Users\Lukasz\Desktop\pulpit\Start Andy.lnk -> C:\Program Files\Andy\HandyAndy.exe () -> startandy
C:\Users\Lukasz\Desktop\pulpit\Start Andy.lnk
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.

----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.