Nis szwankuje

[Samaramabezkol]

Siemka,
ciągle walczę z blue screenami (vt134597). Zgodnie ze wskazówkami ściągnąłem Norton internet Security i zacząłem skanować. Znalazł 6 trojanów (4 nieszkodliwe - witaminki sprawdzone przez większość użytkowników). Teraz norton zaczął szwankować, nie włącza się, nie chce się zaktualizować itp. Więc zgłaszam się do Was z prośbą o sprawdzenie logów z otl czy wszystko jest ok.

Kod: Zaznacz wszystko

OTL logfile created on: 2013-01-06 18:23:16 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ruslan\Desktop\Przydatne
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 57,04% Memory free
5,99 Gb Paging File | 4,67 Gb Available in Paging File | 77,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 24,51 Gb Total Space | 1,03 Gb Free Space | 4,19% Space Free | Partition Type: NTFS
Drive D: | 40,39 Gb Total Space | 4,07 Gb Free Space | 10,09% Space Free | Partition Type: NTFS
Drive E: | 9,58 Gb Total Space | 1,05 Gb Free Space | 10,95% Space Free | Partition Type: NTFS
Drive F: | 149,04 Gb Total Space | 26,23 Gb Free Space | 17,60% Space Free | Partition Type: NTFS

Computer Name: RUSLAN-KOMPUTER | User Name: Ruslan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2013-01-06 13:12:41 | 000,212,432 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe
PRC - [2012-12-06 15:25:39 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Users\Ruslan\AppData\Local\Mozilla Firefox\firefox.exe
PRC - [2012-12-03 16:39:40 | 001,259,880 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012-12-01 05:38:02 | 001,821,032 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012-12-01 05:38:02 | 000,865,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012-11-30 22:43:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012-11-04 14:13:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ruslan\Desktop\Przydatne\OTL.exe
PRC - [2012-09-07 14:37:04 | 000,100,864 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
PRC - [2012-08-18 18:03:20 | 000,143,928 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\20.1.0.24\ccSvcHst.exe
PRC - [2012-08-06 16:11:46 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012-07-27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-06-28 09:52:12 | 004,941,768 | ---- | M] (SafeNet Inc.) -- C:\Windows\System32\hasplms.exe
PRC - [2011-02-25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010-11-20 22:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010-11-20 22:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2009-09-21 17:40:50 | 001,681,408 | R--- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
PRC - [2007-07-17 11:03:38 | 000,868,352 | ---- | M] () -- C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
PRC - [2007-05-11 08:58:58 | 000,103,344 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 3300 Series\ezprint.exe
PRC - [2007-05-11 08:58:38 | 000,205,744 | ---- | M] () -- C:\Program Files\Lexmark 3300 Series\lxccmon.exe
PRC - [2007-03-26 07:49:26 | 000,537,520 | ---- | M] ( ) -- C:\Windows\System32\lxcccoms.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012-12-06 15:25:39 | 002,397,152 | ---- | M] () -- C:\Users\Ruslan\AppData\Local\Mozilla Firefox\mozjs.dll
MOD - [2012-05-30 07:51:08 | 000,699,280 | R--- | M] () -- C:\Program Files\Norton Internet Security\Engine\20.1.0.24\wincfi39.dll
MOD - [2010-01-30 02:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-09-02 08:28:04 | 047,628,288 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\skin.dll
MOD - [2009-05-07 15:53:18 | 000,106,496 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
MOD - [2009-05-07 15:50:46 | 000,073,728 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
MOD - [2008-02-14 12:57:00 | 000,094,208 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\VMicApi.dll
MOD - [2007-07-17 11:03:38 | 000,868,352 | ---- | M] () -- C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
MOD - [2007-05-11 08:58:38 | 000,205,744 | ---- | M] () -- C:\Program Files\Lexmark 3300 Series\lxccmon.exe
MOD - [2007-02-07 16:51:20 | 000,188,416 | ---- | M] () -- C:\Program Files\Creative\Sync Manager Unicode\CTSyncRs.crl
MOD - [2005-12-13 15:51:56 | 000,122,880 | ---- | M] () -- C:\Program Files\Lexmark 3300 Series\lxccdrec.dll
MOD - [2005-06-14 17:08:28 | 000,196,608 | ---- | M] () -- C:\Program Files\Lexmark 3300 Series\iptk.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - [2012-12-20 21:34:28 | 000,541,760 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-12-12 14:20:42 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-12-03 16:39:40 | 001,259,880 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-11-30 22:43:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012-10-11 02:04:37 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-09-07 14:37:04 | 000,100,864 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
SRV - [2012-08-18 18:03:20 | 000,143,928 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Engine\20.1.0.24\ccSvcHst.exe -- (NIS)
SRV - [2012-07-27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-06-28 09:52:12 | 004,941,768 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\Windows\System32\hasplms.exe -- (hasplms)
SRV - [2012-06-09 21:46:39 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012-04-19 21:23:38 | 000,736,104 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012-01-18 21:15:14 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2010-03-25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-03-26 07:49:26 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxcccoms.exe -- (lxcc_device)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Ruslan\AppData\Local\Temp\cpuz135\cpuz135_x32.sys -- (cpuz135)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Ruslan\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2013-01-05 18:36:32 | 001,601,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130105.017\NAVEX15.SYS -- (NAVEX15)
DRV - [2013-01-05 18:36:32 | 000,092,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130105.017\NAVENG.SYS -- (NAVENG)
DRV - [2013-01-05 18:32:25 | 000,142,496 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2013-01-04 16:28:04 | 000,386,720 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130104.001\IDSvix86.sys -- (IDSVix86)
DRV - [2012-12-03 16:39:40 | 009,373,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012-11-30 00:48:34 | 000,995,488 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20121130.005\BHDrvx86.sys -- (BHDrvx86)
DRV - [2012-08-18 02:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2012-08-18 02:00:00 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012-08-10 18:26:42 | 000,585,888 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\srtsp.sys -- (SRTSP)
DRV - [2012-08-07 22:18:20 | 000,926,880 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\SymEFA.sys -- (SymEFA)
DRV - [2012-08-06 18:24:46 | 000,134,304 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\ccSetx86.sys -- (ccSet_NIS)
DRV - [2012-07-27 20:25:32 | 000,368,288 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\SymDS.sys -- (SymDS)
DRV - [2012-07-27 20:05:22 | 000,175,264 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\Ironx86.sys -- (SymIRON)
DRV - [2012-07-22 18:34:24 | 000,338,592 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\symnets.sys -- (SymNetS)
DRV - [2012-07-03 16:25:17 | 000,149,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2012-06-28 09:51:46 | 000,362,496 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2012-06-05 15:33:00 | 000,104,792 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2012-06-05 15:33:00 | 000,082,776 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2012-05-24 22:36:56 | 000,032,888 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1401000.018\srtspx.sys -- (SRTSPX)
DRV - [2012-04-15 22:32:14 | 001,068,216 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\wcmvcam.sys -- (WCMVCAM)
DRV - [2012-01-18 15:55:56 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdrvio.sys -- (pwdrvio)
DRV - [2012-01-18 15:55:54 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdspio.sys -- (pwdspio)
DRV - [2012-01-18 09:19:48 | 000,057,312 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hotcore3.sys -- (hotcore3)
DRV - [2011-08-10 15:05:24 | 000,596,424 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (hardlock)
DRV - [2011-03-18 17:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan)
DRV - [2010-11-20 22:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010-11-20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010-11-20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010-11-20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010-11-20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 22:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010-11-20 22:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010-11-20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010-11-01 05:08:46 | 000,014,416 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files\IObit\Game Booster\Driver\WinRing0.sys -- (WinRing0_1_2_0)
DRV - [2010-01-29 11:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2009-09-17 18:02:04 | 001,086,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009-09-16 07:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tap0901t.sys -- (tap0901t)
DRV - [2009-08-22 19:25:00 | 000,009,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\Program Files (x86)\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys -- (RivaTuner32)
DRV - [2009-07-14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2007-01-31 12:47:02 | 000,834,816 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVHybrid.sys -- (AVHybrid)
DRV - [2002-09-16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2001-07-13 12:56:14 | 000,014,976 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SBKUPNT.SYS -- (SBKUPNT)
DRV - [1996-04-03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: autorefresh%40plugin:1.0.2
FF - prefs.js..extensions.enabledAddons: %7Bbcba2942-0c80-4c18-9d69-8e74049b2ca4%7D:0.9.8
FF - prefs.js..extensions.enabledAddons: %7B0153E448-190B-4987-BDE1-F256CADA672F%7D:15.0.6
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..keyword.URL: "google.pl"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files\Battlelog Web Plugins\1.122.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.138.0: C:\Program Files\Battlelog Web Plugins\1.138.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ruslan\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ruslan\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: D:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-08-06 16:12:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\ [2013-01-05 18:32:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\ [2013-01-06 18:14:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Users\Ruslan\AppData\Local\Mozilla Firefox\components [2012-12-06 15:25:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Users\Ruslan\AppData\Local\Mozilla Firefox\plugins

[2012-09-05 20:45:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ruslan\AppData\Roaming\mozilla\Extensions
[2012-10-23 15:22:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ruslan\AppData\Roaming\mozilla\Firefox\Profiles\3bdz3xkh.default\extensions
[2012-09-18 19:20:58 | 000,036,763 | ---- | M] () (No name found) -- C:\Users\Ruslan\AppData\Roaming\mozilla\firefox\profiles\3bdz3xkh.default\extensions\autorefresh@plugin.xpi
[2012-10-11 19:22:40 | 000,247,142 | ---- | M] () (No name found) -- C:\Users\Ruslan\AppData\Roaming\mozilla\firefox\profiles\3bdz3xkh.default\extensions\{bcba2942-0c80-4c18-9d69-8e74049b2ca4}.xpi
[2012-10-13 10:18:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-09-08 12:32:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012-08-06 16:12:02 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2012-08-06 16:11:52 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll

O1 HOSTS File: ([2012-12-05 15:34:02 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\20.1.0.24\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\20.1.0.24\IPS\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\20.1.0.24\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 3300 Series\ezprint.exe (Lexmark International Inc.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [LXCCCATS] C:\Windows\System32\spool\DRIVERS\W32X86\3\LXCCtime.DLL ()
O4 - HKLM..\Run: [lxccmon.exe] C:\Program Files\Lexmark 3300 Series\lxccmon.exe ()
O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000..\Run: [CTSyncU.exe] C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe ()
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\Run: [CTSyncU.exe] C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe ()
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun File not found
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.7.0_09)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ABA6DD61-F987-4F49-8373-6C16035C6904}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DAEEED85-88B9-4177-867E-4226493AFE7C}: DhcpNameServer = 7.254.254.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013-01-06 13:10:53 | 000,000,000 | --SD | C] -- C:\Users\Ruslan\Dysk Google
[2013-01-06 13:08:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013-01-06 13:07:41 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2013-01-05 18:32:25 | 000,142,496 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2013-01-05 18:32:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2013-01-05 18:32:25 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2013-01-05 18:32:03 | 000,926,880 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\SymEFA.sys
[2013-01-05 18:32:03 | 000,585,888 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\srtsp.sys
[2013-01-05 18:32:03 | 000,368,288 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\SymDS.sys
[2013-01-05 18:32:03 | 000,338,592 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\symnets.sys
[2013-01-05 18:32:03 | 000,175,264 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\Ironx86.sys
[2013-01-05 18:32:03 | 000,134,304 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\ccSetx86.sys
[2013-01-05 18:32:03 | 000,032,888 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\srtspx.sys
[2013-01-05 18:32:03 | 000,021,400 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1401000.018\SymELAM.sys
[2013-01-05 18:31:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NIS
[2013-01-05 18:31:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NIS\1401000.018
[2013-01-05 18:31:46 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
[2013-01-05 18:31:46 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Internet Security
[2013-01-05 18:31:40 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2013-01-05 00:33:50 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
[2013-01-01 21:59:59 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Desktop\memtest86+-4.20.iso
[2013-01-01 21:02:35 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Desktop\bluescreenview
[2012-12-24 01:42:55 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Documents\My Games
[2012-12-24 01:42:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Orbit
[2012-12-20 22:39:28 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Documents\4A Games
[2012-12-20 22:38:00 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\AppData\Local\4A Games
[2012-12-10 21:41:28 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2012-12-10 20:03:55 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Desktop\Nowy folder (4)
[2012-12-10 15:57:26 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Desktop\GTA_Vice_City_-_spolszczenie[www.instalki.pl]
[2012-12-10 15:40:20 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
[2012-12-10 15:40:20 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\AppData\Roaming\InstallShield Installation Information
[2012-12-09 20:52:53 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\Documents\Any Video Converter
[2012-12-09 20:52:43 | 000,000,000 | ---D | C] -- C:\Users\Ruslan\AppData\Roaming\AnvSoft
[2012-12-09 20:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
[2012-12-09 17:10:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve
[2012-11-28 15:03:59 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Ruslan\AppData\Roaming\pcouffin.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013-01-06 18:20:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-01-06 18:17:47 | 000,021,280 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-01-06 18:17:47 | 000,021,280 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-01-06 18:17:04 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-06 18:10:04 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-01-06 18:10:03 | 000,000,380 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Ruslan.job
[2013-01-06 18:09:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-01-06 16:54:57 | 463,367,380 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-01-06 16:41:52 | 000,001,672 | ---- | M] () -- C:\Users\Ruslan\Desktop\Dysk Google.lnk
[2013-01-06 13:32:01 | 000,737,730 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-01-06 13:32:01 | 000,651,938 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-01-06 13:32:01 | 000,154,418 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-01-06 13:32:01 | 000,120,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-01-05 18:36:28 | 000,013,946 | ---- | M] () -- C:\Windows\System32\drivers\NIS\1401000.018\VT20121114.016
[2013-01-05 18:32:33 | 001,073,627 | ---- | M] () -- C:\Windows\System32\drivers\NIS\1401000.018\Cat.DB
[2013-01-05 18:32:25 | 000,142,496 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2013-01-05 18:32:25 | 000,007,446 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2013-01-05 18:32:25 | 000,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2013-01-05 18:15:50 | 000,038,197 | ---- | M] () -- C:\Users\Ruslan\Desktop\Bez tytułu.png
[2013-01-05 17:51:50 | 000,007,601 | ---- | M] () -- C:\Users\Ruslan\AppData\Local\Resmon.ResmonCfg
[2013-01-05 15:43:38 | 000,138,032 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2013-01-05 15:43:31 | 000,281,688 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2013-01-05 13:17:29 | 000,000,612 | ---- | M] () -- C:\Users\Ruslan\Desktop\SkyrimLauncher.exe — skrót.lnk
[2013-01-05 00:26:17 | 000,206,772 | ---- | M] () -- C:\Users\Ruslan\Desktop\1,5h.png
[2013-01-04 23:43:03 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Ruslan.job
[2013-01-04 22:28:40 | 000,001,087 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2013-01-04 20:18:10 | 000,281,688 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2013-01-04 18:44:02 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Ruslan.job
[2013-01-01 22:26:00 | 000,013,507 | ---- | M] () -- C:\Users\Ruslan\Desktop\MemTest.zip
[2013-01-01 21:59:51 | 000,069,043 | ---- | M] () -- C:\Users\Ruslan\Desktop\memtest86+-4.20.iso.zip
[2013-01-01 21:01:38 | 000,066,006 | ---- | M] () -- C:\Users\Ruslan\Desktop\bluescreenview.zip
[2013-01-01 01:37:44 | 000,001,002 | ---- | M] () -- C:\Users\Ruslan\Desktop\NapiProjekt.lnk
[2013-01-01 01:36:49 | 010,808,991 | ---- | M] (                                                            ) -- C:\Users\Ruslan\Desktop\NapiProjektBuild_2.1.0.2287.exe
[2012-12-24 01:40:35 | 000,001,303 | ---- | M] () -- C:\Users\Ruslan\Desktop\FC3Updater.exe — skrót.lnk
[2012-12-24 01:33:16 | 000,001,163 | ---- | M] () -- C:\Users\Ruslan\Desktop\Uplay.lnk
[2012-12-22 15:32:55 | 008,295,325 | ---- | M] () -- C:\Users\Ruslan\Desktop\Zibo - Chodz Do Mnie Teraz (www.djoles.pl).mp3
[2012-12-21 12:37:15 | 013,375,904 | ---- | M] () -- C:\Users\Ruslan\Desktop\Weekend - Ona Tanczy Dla Mnie (Cometa & Mad Matt Remix) (www.djoles.pl).mp3
[2012-12-12 14:20:15 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-12-12 14:20:15 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-12-10 16:31:23 | 000,000,861 | ---- | M] () -- C:\Users\Ruslan\Desktop\Any Video Converter.lnk
[2012-12-10 16:29:56 | 000,496,232 | ---- | M] () -- C:\Users\Ruslan\Desktop\Any-Video-Converter(13038).exe
[2012-12-10 15:57:22 | 000,699,626 | ---- | M] () -- C:\Users\Ruslan\Desktop\GTA_Vice_City_-_spolszczenie[www.instalki.pl].zip
[2012-12-09 17:19:11 | 014,671,476 | ---- | M] () -- C:\Users\Ruslan\Desktop\Muza na dyskoteki, mega hity! mega bass 2012.aac
[2012-12-09 17:10:27 | 000,000,859 | ---- | M] () -- C:\Users\Public\Desktop\Portal 2.lnk
[2012-12-08 19:01:37 | 000,001,048 | ---- | M] () -- C:\Users\Ruslan\Desktop\MSI Afterburner.lnk
[2012-12-08 18:57:42 | 023,164,100 | ---- | M] () -- C:\Users\Ruslan\Desktop\MSIAfterburnerSetup230.zip
[2012-12-08 18:54:02 | 000,579,176 | ---- | M] () -- C:\Users\Ruslan\Desktop\MSI-Afterburner(22659).exe
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013-01-06 13:10:55 | 000,001,672 | ---- | C] () -- C:\Users\Ruslan\Desktop\Dysk Google.lnk
[2013-01-06 13:07:45 | 000,001,036 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-06 13:07:44 | 000,001,032 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-01-05 18:36:58 | 000,013,946 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\VT20121114.016
[2013-01-05 18:32:28 | 001,073,627 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\Cat.DB
[2013-01-05 18:32:25 | 000,007,446 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2013-01-05 18:32:25 | 000,000,806 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2013-01-05 18:31:56 | 000,003,434 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymEFA.inf
[2013-01-05 18:31:56 | 000,002,851 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymDS.inf
[2013-01-05 18:31:56 | 000,001,440 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymNet.inf
[2013-01-05 18:31:56 | 000,001,387 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\srtspx.inf
[2013-01-05 18:31:56 | 000,001,387 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\srtsp.inf
[2013-01-05 18:31:56 | 000,000,996 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\symELAM.inf
[2013-01-05 18:31:56 | 000,000,828 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\ccSetx86.inf
[2013-01-05 18:31:56 | 000,000,737 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\Iron.inf
[2013-01-05 18:31:48 | 000,009,670 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymELAM.cat
[2013-01-05 18:31:48 | 000,008,942 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymVTcer.dat
[2013-01-05 18:31:48 | 000,007,611 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\ccSetx86.cat
[2013-01-05 18:31:48 | 000,007,601 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymNet.cat
[2013-01-05 18:31:48 | 000,007,599 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymEFA.cat
[2013-01-05 18:31:48 | 000,007,597 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\srtspx.cat
[2013-01-05 18:31:48 | 000,007,593 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\SymDS.cat
[2013-01-05 18:31:48 | 000,007,593 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\srtsp.cat
[2013-01-05 18:31:48 | 000,007,593 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\iron.cat
[2013-01-05 18:31:48 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1401000.018\isolate.ini
[2013-01-05 13:17:29 | 000,000,612 | ---- | C] () -- C:\Users\Ruslan\Desktop\SkyrimLauncher.exe — skrót.lnk
[2013-01-05 00:26:17 | 000,206,772 | ---- | C] () -- C:\Users\Ruslan\Desktop\1,5h.png
[2013-01-04 22:28:40 | 000,001,087 | ---- | C] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2013-01-04 18:18:39 | 463,367,380 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013-01-01 22:26:06 | 000,024,576 | ---- | C] () -- C:\Users\Ruslan\Desktop\memtest.exe
[2013-01-01 22:26:06 | 000,012,437 | ---- | C] () -- C:\Users\Ruslan\Desktop\manual.html
[2013-01-01 22:25:59 | 000,013,507 | ---- | C] () -- C:\Users\Ruslan\Desktop\MemTest.zip
[2013-01-01 21:59:50 | 000,069,043 | ---- | C] () -- C:\Users\Ruslan\Desktop\memtest86+-4.20.iso.zip
[2013-01-01 21:01:35 | 000,066,006 | ---- | C] () -- C:\Users\Ruslan\Desktop\bluescreenview.zip
[2013-01-01 01:37:44 | 000,001,002 | ---- | C] () -- C:\Users\Ruslan\Desktop\NapiProjekt.lnk
[2013-01-01 01:36:11 | 010,808,991 | ---- | C] (                                                            ) -- C:\Users\Ruslan\Desktop\NapiProjektBuild_2.1.0.2287.exe
[2012-12-24 01:40:35 | 000,001,303 | ---- | C] () -- C:\Users\Ruslan\Desktop\FC3Updater.exe — skrót.lnk
[2012-12-24 01:33:16 | 000,001,163 | ---- | C] () -- C:\Users\Ruslan\Desktop\Uplay.lnk
[2012-12-22 15:32:45 | 008,295,325 | ---- | C] () -- C:\Users\Ruslan\Desktop\Zibo - Chodz Do Mnie Teraz (www.djoles.pl).mp3
[2012-12-21 12:36:59 | 013,375,904 | ---- | C] () -- C:\Users\Ruslan\Desktop\Weekend - Ona Tanczy Dla Mnie (Cometa & Mad Matt Remix) (www.djoles.pl).mp3
[2012-12-20 23:38:04 | 000,000,380 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Ruslan.job
[2012-12-20 23:38:03 | 000,000,374 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Ruslan.job
[2012-12-20 23:38:01 | 000,000,370 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Ruslan.job
[2012-12-10 16:29:54 | 000,496,232 | ---- | C] () -- C:\Users\Ruslan\Desktop\Any-Video-Converter(13038).exe
[2012-12-10 15:57:20 | 000,699,626 | ---- | C] () -- C:\Users\Ruslan\Desktop\GTA_Vice_City_-_spolszczenie[www.instalki.pl].zip
[2012-12-09 20:59:35 | 000,038,197 | ---- | C] () -- C:\Users\Ruslan\Desktop\Bez tytułu.png
[2012-12-09 20:52:37 | 000,000,861 | ---- | C] () -- C:\Users\Ruslan\Desktop\Any Video Converter.lnk
[2012-12-09 17:10:27 | 000,000,859 | ---- | C] () -- C:\Users\Public\Desktop\Portal 2.lnk
[2012-12-09 17:07:45 | 014,671,476 | ---- | C] () -- C:\Users\Ruslan\Desktop\Muza na dyskoteki, mega hity! mega bass 2012.aac
[2012-12-08 19:01:37 | 000,001,048 | ---- | C] () -- C:\Users\Ruslan\Desktop\MSI Afterburner.lnk
[2012-12-08 18:54:10 | 023,164,100 | ---- | C] () -- C:\Users\Ruslan\Desktop\MSIAfterburnerSetup230.zip
[2012-12-08 18:54:00 | 000,579,176 | ---- | C] () -- C:\Users\Ruslan\Desktop\MSI-Afterburner(22659).exe
[2012-11-28 15:03:59 | 000,007,887 | ---- | C] () -- C:\Users\Ruslan\AppData\Roaming\pcouffin.cat
[2012-11-28 15:03:59 | 000,001,144 | ---- | C] () -- C:\Users\Ruslan\AppData\Roaming\pcouffin.inf
[2012-11-27 22:16:55 | 000,003,584 | ---- | C] () -- C:\Users\Ruslan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-11-19 21:00:00 | 003,123,272 | R--- | C] () -- C:\Windows\System32\pbsvc.exe
[2012-11-04 14:20:37 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012-11-04 14:20:37 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012-11-04 14:20:37 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012-11-04 14:20:37 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012-11-04 14:20:37 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012-10-27 00:18:17 | 000,003,072 | ---- | C] () -- C:\Windows\System32\AV34CoInst.dll
[2012-10-27 00:17:24 | 000,834,816 | ---- | C] () -- C:\Windows\System32\drivers\AVHybrid.sys
[2012-10-26 17:54:54 | 000,007,648 | ---- | C] () -- C:\Windows\System32\34CoInstaller.dll
[2012-10-26 17:54:50 | 000,007,648 | ---- | C] () -- C:\Windows\System32\drivers\34CoInstaller.dll
[2012-09-29 17:14:19 | 003,766,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-09-28 16:45:16 | 000,246,272 | ---- | C] () -- C:\Windows\System32\rtvcvfw64.dll
[2012-09-28 16:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\System32\rtvcvfw32.dll
[2012-09-02 00:01:36 | 000,028,160 | ---- | C] () -- C:\Windows\System32\ImHttpComm.dll
[2012-08-16 22:53:35 | 000,000,004 | ---- | C] () -- C:\Users\Ruslan\AppData\Roaming\steam_md5.dat
[2012-08-08 22:50:34 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012-05-28 19:31:38 | 000,000,271 | ---- | C] () -- C:\Windows\game.ini
[2012-05-26 07:15:53 | 000,014,976 | ---- | C] () -- C:\Windows\System32\drivers\SBKUPNT.SYS
[2012-05-26 07:15:53 | 000,013,312 | ---- | C] () -- C:\Windows\System32\DEVLOAD.EXE
[2012-05-26 07:15:52 | 000,000,550 | ---- | C] () -- C:\Windows\SWISV3.INI
[2012-05-26 07:15:52 | 000,000,308 | ---- | C] () -- C:\Windows\SKNIFE.INI
[2012-05-26 07:15:41 | 000,002,944 | ---- | C] () -- C:\Windows\SKLANG.INI
[2012-05-21 20:52:31 | 000,007,601 | ---- | C] () -- C:\Users\Ruslan\AppData\Local\Resmon.ResmonCfg
[2012-05-14 15:07:30 | 000,122,884 | ---- | C] () -- C:\Windows\UnGins.exe
[2012-05-02 20:49:33 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2012-04-01 15:08:44 | 000,001,026 | ---- | C] () -- C:\Windows\ARCHPR.INI
[2012-03-31 17:02:07 | 000,022,528 | ---- | C] () -- C:\Windows\System32\drivers\96EW.sys
[2012-03-31 17:01:40 | 000,057,344 | ---- | C] () -- C:\Windows\System32\Hidhlp.dll
[2012-03-31 17:01:40 | 000,049,152 | ---- | C] () -- C:\Windows\System32\iFT329D.dll
[2012-03-31 16:59:55 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATFFDrv.dll
[2012-02-21 14:57:21 | 003,663,213 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2012-02-18 22:45:13 | 000,000,856 | ---- | C] () -- C:\Users\Ruslan\.recently-used.xbel
[2012-02-07 21:50:07 | 000,000,176 | ---- | C] () -- C:\Users\Ruslan\.jupload.properties
[2012-01-30 12:27:28 | 000,138,056 | ---- | C] () -- C:\Users\Ruslan\AppData\Roaming\PnkBstrK.sys
[2012-01-30 12:27:28 | 000,138,032 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012-01-30 12:26:55 | 000,281,688 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012-01-30 12:26:53 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012-01-29 22:41:47 | 000,922,184 | ---- | C] () -- C:\Windows\System32\pwNative.exe
[2012-01-29 22:41:47 | 000,016,472 | ---- | C] () -- C:\Windows\System32\pwdrvio.sys
[2012-01-29 22:41:39 | 000,011,104 | ---- | C] () -- C:\Windows\System32\pwdspio.sys
[2012-01-18 21:34:06 | 001,224,704 | ---- | C] ( ) -- C:\Windows\System32\lxccserv.dll
[2012-01-18 21:34:06 | 000,995,328 | ---- | C] ( ) -- C:\Windows\System32\lxccusb1.dll
[2012-01-18 21:34:06 | 000,696,320 | ---- | C] ( ) -- C:\Windows\System32\lxcchbn3.dll
[2012-01-18 21:34:06 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxcccomc.dll
[2012-01-18 21:34:06 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxccpmui.dll
[2012-01-18 21:34:06 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxcclmpm.dll
[2012-01-18 21:34:06 | 000,537,520 | ---- | C] ( ) -- C:\Windows\System32\lxcccoms.exe
[2012-01-18 21:34:06 | 000,421,888 | ---- | C] ( ) -- C:\Windows\System32\lxcccomm.dll
[2012-01-18 21:34:06 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxccinpa.dll
[2012-01-18 21:34:06 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxcciesc.dll
[2012-01-18 21:34:06 | 000,385,968 | ---- | C] ( ) -- C:\Windows\System32\lxccih.exe
[2012-01-18 21:34:06 | 000,381,872 | ---- | C] ( ) -- C:\Windows\System32\lxcccfg.exe
[2012-01-18 21:34:06 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\lxcchcp.dll
[2012-01-18 21:34:06 | 000,274,432 | ---- | C] () -- C:\Windows\System32\lxccinst.dll
[2012-01-18 21:34:06 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxccprox.dll
[2012-01-18 21:34:06 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxccpplc.dll
[2012-01-18 21:16:17 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
[2012-01-13 22:58:56 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011-09-28 16:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011-02-01 20:37:01 | 000,737,730 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2011-02-01 20:37:01 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2011-02-01 20:37:01 | 000,154,418 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2011-02-01 20:37:01 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2011-08-30 05:21:25 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2012-11-07 18:19:35 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\.minecraft
[2012-12-09 20:52:43 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\AnvSoft
[2012-02-18 22:24:21 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Artisteer
[2012-03-09 19:16:32 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Bioshock
[2012-12-01 23:55:01 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\DAEMON Tools Lite
[2012-03-09 19:00:41 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\DarknessIIDemo
[2012-09-30 21:33:02 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\DMCache
[2012-09-01 21:15:06 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Dropbox
[2012-09-22 19:16:34 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\fltk.org
[2012-08-25 13:30:07 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\FreeAudioPack
[2013-01-01 00:35:24 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Gadu-Gadu 10
[2012-05-02 17:18:04 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\GameRanger
[2012-02-18 22:45:13 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\gtk-2.0
[2012-05-28 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Happy Computer
[2012-05-25 18:43:57 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\HD Tune Pro
[2012-11-04 22:28:01 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\ipla
[2012-01-31 11:55:18 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Juniper Networks
[2012-05-03 19:13:23 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Leadertech
[2012-09-14 21:01:52 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\LolClient
[2012-08-09 10:13:14 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\NapiProjekt
[2012-12-02 00:22:49 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Origin
[2012-01-21 20:41:12 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Publish Providers
[2012-08-28 11:20:07 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\PunkBuster
[2012-02-11 20:09:24 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\pymclevel
[2012-01-28 15:47:04 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Rovio
[2012-11-27 23:46:14 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Sony
[2012-01-21 23:07:23 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Sony Creative Software Inc
[2012-06-22 21:41:23 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\SplitMediaLabs
[2012-11-23 14:48:23 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Theta
[2012-04-26 10:02:17 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Thinstall
[2012-10-11 19:15:00 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\TS3Client
[2012-05-02 20:55:48 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Tunngle
[2012-11-05 23:48:05 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Ubisoft
[2013-01-06 18:25:32 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\uTorrent
[2012-11-28 15:05:44 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Vso
[2012-06-22 21:32:33 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\WebcamMax
[2012-11-28 17:33:48 | 000,000,000 | ---D | M] -- C:\Users\Ruslan\AppData\Roaming\Xilisoft

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Kod: Zaznacz wszystko

OTL Extras logfile created on: 2013-01-06 18:23:16 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ruslan\Desktop\Przydatne
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 57,04% Memory free
5,99 Gb Paging File | 4,67 Gb Available in Paging File | 77,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 24,51 Gb Total Space | 1,03 Gb Free Space | 4,19% Space Free | Partition Type: NTFS
Drive D: | 40,39 Gb Total Space | 4,07 Gb Free Space | 10,09% Space Free | Partition Type: NTFS
Drive E: | 9,58 Gb Total Space | 1,05 Gb Free Space | 10,95% Space Free | Partition Type: NTFS
Drive F: | 149,04 Gb Total Space | 26,23 Gb Free Space | 17,60% Space Free | Partition Type: NTFS

Computer Name: RUSLAN-KOMPUTER | User Name: Ruslan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2043330812-2825032562-3039729627-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Users\Ruslan\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- F:\Games\PS\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [CEWE-Podglad Zdjec] -- "C:\Program Files\ODBITKOMAT Fotoswiat\ODBITKOMAT Fotoswiat\CEWE-Podglad Zdjec.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Directory [ODBITKOMAT Fotoswiat] -- "C:\Program Files\ODBITKOMAT Fotoswiat\ODBITKOMAT Fotoswiat\ODBITKOMAT Fotoswiat.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== System Restore Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10028C81-673C-41A6-8624-910E9D293CE6}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{16B3840B-50EA-40E1-B4E2-4737037EEB55}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B9B5C4C-9F32-431F-9946-0B671B488F1E}" = lport=27961 | protocol=6 | dir=in | name=wolf |
"{1D05D53B-7D8B-4E59-B631-5DCDF93677C5}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{1FA1D724-DB2E-4C0C-82CD-1C683C405224}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{24D16E2E-9976-4961-86E5-08827AD8FB2B}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{38BC5A33-8B4F-45C4-9E68-2EC99F5455F5}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{4C72D07A-6FD6-4748-A259-EA5976B682A4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{50B9A697-809A-4FE9-B547-92A50749C4B2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{761A7AB1-634A-48AF-9D4F-0631DC1BE80D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7B1F2E91-5354-4D44-900A-1A902B6833D4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{80EA9379-9A57-4F32-8FAB-461E286FB412}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{899B144D-12C0-4797-BD44-AD46920265DF}" = lport=58710 | protocol=17 | dir=in | name=pando media booster |
"{98C5D63E-00AD-4AB1-89D8-FC2E9D178993}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{A14E6E12-7953-4644-A6AC-D15304E4D3BB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A1CF9AC9-A00C-45E4-A679-840905A7DE67}" = rport=27961 | protocol=6 | dir=out | name=wolf |
"{A7A215BB-1ED1-40CD-942F-67875E37922C}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{AB51F809-19DE-45EC-AB34-CDAF2A5AE873}" = lport=58710 | protocol=17 | dir=in | name=pando media booster |
"{C7E0FBEC-4D84-4D53-AEB2-518262FBC922}" = lport=58710 | protocol=6 | dir=in | name=pando media booster |
"{CB665647-6789-454B-898F-4128247B16BA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D1918E0C-2561-44A2-8D46-74F353913D66}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DD2D2FE2-31CC-4645-9757-19B1CAC2FD3D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{DEE5BBE6-D809-48FB-BEFA-3833ECC637CB}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DFC393F9-E6C3-4FAE-9EBC-B60B7FDE2F75}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F65B04F8-6DD6-4545-9234-0FB4D578544C}" = lport=10243 | protocol=6 | dir=in | app=system |
"{FD0686DC-A036-4666-9221-27331EB2D157}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{FD721662-7069-4AA7-B613-BC6E263E7B4A}" = lport=58710 | protocol=6 | dir=in | name=pando media booster |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{003B48E1-6243-4CC4-9653-51F01E52963A}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{0625ECA7-4F3E-4EA6-B407-BDB88645C780}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{0AFEB63D-5846-47AE-AEC7-E69E23EBF8C0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\metro 2033\metro2033.exe |
"{0B8DB3FA-9376-443A-A56F-E511042DF68B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{0CAF9B57-6576-4B69-B753-EA64D9DAFB2D}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{12638B46-41AB-49BA-B1E5-B17E1F2B95F6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{15A627AE-BAB7-4C57-AC94-1CF2EE4E23C6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"{1716AFE2-FA54-4B56-8BDC-377A2CE1C7FE}" = protocol=6 | dir=in | app=f:\program files\lightworks\ntcardvt.exe |
"{184293FA-7F23-4467-9CC6-40519012A5CE}" = protocol=17 | dir=in | app=f:\program files\sierra\fear\fear.exe |
"{1C521405-09DE-4A66-B120-BA2357E7D72A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{1F548B5A-0AFD-4751-A750-66283C8DF922}" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"{20D4A4B7-49AF-4C8D-98F4-1A666F8E0426}" = protocol=6 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\fc3editor.exe |
"{23C80ABC-2451-483B-9805-3DC6A140060B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2469BB60-BFD1-4C8D-AAF5-C19551FB66B1}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{247EB884-05F4-41C7-BA3F-691CF6636E47}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{2485E722-823E-4208-8C1C-71E79DAB4619}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{297DCAC2-02B0-43F0-AA4F-736385158564}" = protocol=17 | dir=in | app=f:\program files\lightworks\ntcardvt.exe |
"{2A37281B-7EDF-4B2D-A8F2-97AD664D4F47}" = protocol=6 | dir=in | app=f:\games\fifa 13 demo\game\fifa13_demo.exe |
"{2CCCF1C5-DF9C-4C1A-B51B-296E5544B4C9}" = protocol=6 | dir=out | app=system |
"{2F073D54-4914-4AED-BCA5-9E2CF0F48CDB}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxccpswx.exe |
"{31C69B69-21D1-4B9F-B3BF-65BF67B8FC0F}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{327A2EEC-1AFC-4F65-9D1F-DA5ECCD85BC4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{331CFC3D-EF5D-471E-AB2A-6F4D0E3CED2B}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{36945F26-47BD-43AB-A163-483625C52DC1}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{3E09A7D6-5A42-4F4A-8393-E9D8054DC3EE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3FACB437-EBDD-4BF3-A988-4B77CA9E9776}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{42C5F460-20FF-4B59-99FE-B6B97EACEF88}" = protocol=17 | dir=in | app=d:\program files\wolfenstein - enemy territory\et.exe |
"{44496DCC-95EB-4AE7-8639-221E4687083D}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{466CF07B-AA48-435C-BD03-7397C28681E0}" = protocol=6 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\assassinscreedrevelations.exe |
"{48A54497-BDC3-4932-84CA-C1E8ADA4B3FB}" = protocol=17 | dir=in | app=e:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"{4B12FDA1-EDBE-4349-906F-837D22499F6C}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{4B63CE38-69F7-4A17-8E45-89453FD92D58}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{4CAA3C7D-A032-45B7-9C9A-82BF99D0B6AE}" = protocol=6 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\fc3updater.exe |
"{4D90580A-2EE4-4E2E-A7A9-0974B9CA5FBE}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{4FAE36C8-DD62-4103-952F-3C97E24612DB}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{5001694A-EE21-4989-B32E-A1E635730129}" = protocol=6 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{509CE787-0FBC-4EB4-B119-E850D35303A4}" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"{51170FFE-7EA9-4B0A-ABE6-85DB03E065DE}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{51BBE84C-9213-4F33-B82B-D1AFE46ED5B7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{523428E9-F065-40BD-A282-114DA343CA3B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{540DB55E-C3AB-4C7C-B9F2-1103A6CAE4A7}" = protocol=6 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrmp.exe |
"{58DEA27B-9E6D-406B-B0A1-4A63F3C6DAE0}" = dir=in | app=c:\windows\system32\hasplms.exe |
"{59E1DC17-FDAB-48EB-8FAC-ACFF4A4F0DB5}" = protocol=17 | dir=in | app=f:\program files\call of duty black ops 2\t6zm.exe |
"{5ABB384F-D84D-4E01-B260-0A5E99FF9F3B}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{6058EF44-F7C9-4DD7-A68C-70EBDFC7B062}" = protocol=6 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrsp.exe |
"{61AEB84C-511C-4D6C-9CA8-94D7F91E238B}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{62008747-01CB-4178-8AB7-9B24494B776F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe |
"{650EDD59-DAC9-4A68-BF24-77B2DDF23140}" = protocol=17 | dir=in | app=c:\windows\system32\lxcccoms.exe |
"{66635819-1EB9-4B55-B34E-34CC9A7F5957}" = protocol=17 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{67531913-05DE-47EE-95CD-B805788A7306}" = protocol=17 | dir=in | app=f:\program files\dragon age\bin_ship\daupdatersvc.service.exe |
"{684FB233-A91E-4942-AAC2-F49E3DFA77F4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{6B433061-6ADE-493C-AC61-95A58421CF19}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{6BD9026D-D79D-42D5-9CB6-4EF1ED57C3A7}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6D3A3EF2-6C4F-4A35-8D5A-CEC939B5A0DE}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe |
"{77431DC7-472C-4A12-B8D3-949207871F49}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{7824EF09-8DB5-421E-B875-ADE707FEAEC5}" = protocol=6 | dir=in | app=f:\program files\call of duty black ops 2\t6zm.exe |
"{796AEAB4-B212-435A-9FDB-31801A9A14D7}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7AD64D4C-A372-4E26-8ACB-709F63172B62}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7B70B2BB-9F8E-47C7-8DD0-E887F14854F9}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7CA0B65B-8BA1-426E-9F65-5FCC96251285}" = protocol=17 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\assassinscreedrevelations.exe |
"{7CBF80F9-4805-44F2-B36B-22D88DB67BF0}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{7D2C2DC6-C02A-46F1-92B3-0F1204FFF633}" = protocol=17 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\ac3sp.exe |
"{7E026DCB-604F-483E-8A7B-06398CE36633}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe |
"{867C5A06-0406-4428-A43D-3BE98BE123CF}" = protocol=17 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\farcry3.exe |
"{87D22AC9-C0D8-424D-ABA5-355A7D953282}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{88E7A9DC-8CC2-4558-BDF4-BF140E08ECD8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{89B2BD5F-3D83-4B82-A1E0-B1B512547BEB}" = protocol=6 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\farcry3.exe |
"{8B203009-25C6-46F9-A5A8-C972567487F6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{8E272A44-BBD2-49F2-8158-A5030EAD3F75}" = protocol=17 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{8FFBBD2E-6F8E-4DE2-8F70-92D271602DC3}" = protocol=6 | dir=in | app=e:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"{90D76F04-A275-4816-8360-8AC05C92E8F0}" = protocol=17 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrsp.exe |
"{91FF8848-AAC9-4ADE-BF2B-89D2F0C09D81}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{94CCC53C-2053-4483-8C42-0FAEB6A31C72}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{95F97C13-6802-497F-A8CE-8FC257B56ECB}" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"{99299EA3-C65D-403B-B71F-7C8E7A23B326}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9FBBBF37-3E86-4F6A-95BF-FA42AD677B81}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{9FF45EE5-0DEA-4C28-8179-7B26C4B65E4C}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{A02BC607-FC45-483B-84E0-2AF51589F71A}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{A220D5E0-ADB3-4890-A71B-67890187B9A4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe |
"{A25FC5A0-04F3-43DD-9F0D-3326D4DB3673}" = dir=in | app=d:\program files\cdp.pl\farming simulator 2013\farmingsimulator2013game.exe |
"{A919025D-035B-47F1-91C7-4BBFB2BF8946}" = protocol=6 | dir=in | app=f:\program files\sierra\fear\fearmp.exe |
"{AC8DCDFC-7C7F-428F-A34A-AF657F7B6785}" = protocol=6 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{ACD0D7D5-40A1-45D7-9432-06DA81568824}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{ADADEA91-D222-4DE1-A7BA-705BA244BC86}" = protocol=17 | dir=in | app=f:\program files\sierra\fear\fearmp.exe |
"{AF6C1105-D156-45A2-927A-A8C37EBDF909}" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"{B49ECD57-EB23-408B-8034-0E06741F3615}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{B6C8A5E3-FE25-407B-B8CD-9DD3FDEFA181}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{B8BFB606-30D1-4C86-A488-A474CEC6020D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"{B96EF769-79D9-4C9A-BAA0-F1111CADEE3E}" = protocol=17 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\fc3updater.exe |
"{BA993DC7-176F-4FDB-B034-1B34046E1464}" = protocol=6 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\ac3mp.exe |
"{BDB9B222-45EC-47E6-91D3-B9657E37FCE1}" = protocol=17 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{C0355EA5-E02A-4FC8-AD4F-9B78C6F31CB9}" = protocol=6 | dir=in | app=f:\games\battlefield 3\bf3.exe |
"{C04832E8-85AE-4026-86F2-08A733B95435}" = protocol=17 | dir=in | app=f:\games\battlefield 3\bf3.exe |
"{C3BC9793-5012-4FCC-820B-27C533509A2D}" = protocol=6 | dir=in | app=d:\program files\wolfenstein - enemy territory\et.exe |
"{C4B7218A-C61C-41D9-92FE-38D67AD29701}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{C93A53C9-B52D-43E9-88F0-8964ADBD4FA9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CADA96AF-4C3B-4DB1-860D-7EA4B9CF96D7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CCE34902-B6EF-4268-A718-2233FFE17514}" = protocol=17 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\ac3mp.exe |
"{CD5ECFBB-D7A2-441F-BBA9-7B08CF0C5E53}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{CDE9641C-E167-43D1-B66D-C70F7D544F8E}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxccpswx.exe |
"{CE166065-B9D2-4B1C-A967-DD39094DD1ED}" = protocol=6 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\ac3sp.exe |
"{D5565074-FA9C-4D0F-B315-DD7E84B48B91}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{DD47CFDB-CD69-4DDB-84A7-030A71A427AC}" = protocol=17 | dir=in | app=f:\games\fifa 13 demo\game\fifa13_demo.exe |
"{DD990DC6-0FDC-45A0-8672-C05998E2F680}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{DE18CAD1-02EA-4BFB-80C2-9BD739C5F5F2}" = protocol=6 | dir=in | app=f:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe |
"{DFD65E66-2863-43D5-883E-ADD883CD5C4D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{E0DF0BF6-7A67-4B61-9BA0-1E6B9B39E8C9}" = protocol=17 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrmp.exe |
"{E4155968-2E70-4872-BC8E-7CEE7E8B70F5}" = protocol=6 | dir=in | app=f:\program files\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{E65207C4-3C92-46EE-BC7B-D20B0C27F84E}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{E825B12D-B8C7-4B14-8C74-FB448165BA69}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\metro 2033\metro2033.exe |
"{F12DB142-7486-4489-973C-825AED550E5C}" = protocol=6 | dir=in | app=f:\program files\dragon age\bin_ship\daupdatersvc.service.exe |
"{F3AEF68B-0BB2-487E-875B-25FE6D193BA3}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{F5813AA1-7030-4F57-9D2B-6735AD27BFDE}" = protocol=6 | dir=in | app=f:\program files\sierra\fear\fear.exe |
"{F8956A4F-67C4-4128-BE1F-48F76AF2F03D}" = protocol=17 | dir=in | app=f:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe |
"{FE7F1CAE-1DCD-4BA4-9B53-02A0D83E5996}" = dir=in | app=d:\program files\cdp.pl\farming simulator 2013\farmingsimulator2013.exe |
"{FF3F3CE0-AFEB-454D-8ABF-C3CA1E2FA12D}" = protocol=6 | dir=in | app=c:\windows\system32\lxcccoms.exe |
"{FFDB60E5-8986-4CE3-9C6F-1900F6950138}" = protocol=17 | dir=in | app=f:\program files\ubisoft\farcry 3\bin\fc3editor.exe |
"TCP Query User{0392FB86-AC33-4AD3-A813-C7D182CABA74}F:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\gtaiv.exe |
"TCP Query User{197982A3-1B50-4596-AA90-98CA2850C2A3}F:\games\fifa 13\game\fifa13.exe" = protocol=6 | dir=in | app=f:\games\fifa 13\game\fifa13.exe |
"TCP Query User{1D91BB0C-557C-44CE-B8FC-C693382D4419}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
"TCP Query User{2396C63E-9089-4D26-8C85-7DCDC5DDF17F}F:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe" = protocol=6 | dir=in | app=f:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe |
"TCP Query User{29AFA62E-83C5-499B-9CD8-60AC4869D261}F:\program files\call of duty black ops 2\t6zm.exe" = protocol=6 | dir=in | app=f:\program files\call of duty black ops 2\t6zm.exe |
"TCP Query User{2E529164-38FB-4B13-8D35-73B40D571831}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
"TCP Query User{39C316AF-6B34-4F61-9996-CF37578E4FDE}D:\program files\ubisoft\assassin's creed revelations\acrpr.exe" = protocol=6 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrpr.exe |
"TCP Query User{435B69CE-221D-4A95-ADFB-60FEB8A4A1CE}F:\program files\call of duty black ops 2\t6sp.exe" = protocol=6 | dir=in | app=f:\program files\call of duty black ops 2\t6sp.exe |
"TCP Query User{43B10D6B-4885-4652-AB83-09A8FFAD9E51}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe" = protocol=6 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe |
"TCP Query User{6AA97D98-C624-4724-9F17-C38F89FB239E}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{6CFD5D90-B90E-469C-9499-403EB3E8D521}C:\users\ruslan\appdata\roaming\gameranger\gameranger\gameranger.exe" = protocol=6 | dir=in | app=c:\users\ruslan\appdata\roaming\gameranger\gameranger\gameranger.exe |
"TCP Query User{75753E2D-294F-43AB-8303-CEE3F02A8A64}C:\users\ruslan\appdata\local\temp\8a76.tmp\kmservice.exe" = protocol=6 | dir=in | app=c:\users\ruslan\appdata\local\temp\8a76.tmp\kmservice.exe |
"TCP Query User{76AEEE0F-1821-45A2-8DC2-2EBF548E0D3F}\\pawelek\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=\\pawelek\grand theft auto iv\gtaiv.exe |
"TCP Query User{7A714164-8445-4D03-AE61-E44093C26782}E:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=e:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"TCP Query User{7C7B5CD5-6B38-4850-A436-0284770FFAD3}F:\revops\blackops.exe" = protocol=6 | dir=in | app=f:\revops\blackops.exe |
"TCP Query User{8EF3F077-9608-4064-AEC3-1B6B3BDA4474}D:\program files\wolfenstein - enemy territory\et.exe" = protocol=6 | dir=in | app=d:\program files\wolfenstein - enemy territory\et.exe |
"TCP Query User{903F7384-AFF1-47F5-9AA2-E97FEE3EE68F}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe" = protocol=6 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe |
"TCP Query User{926D0023-2189-44BE-988E-A64A574033E0}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"TCP Query User{9664C5C9-18B3-432F-8813-87452A32A1B6}F:\program files\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=f:\program files\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"TCP Query User{989BCF44-89C3-4360-AB4D-0403C9706C01}F:\program files\valve\portal 2\portal2.exe" = protocol=6 | dir=in | app=f:\program files\valve\portal 2\portal2.exe |
"TCP Query User{9E8601C9-6C5C-40C6-B533-55D13973F979}F:\revops\blackopsmp.exe" = protocol=6 | dir=in | app=f:\revops\blackopsmp.exe |
"TCP Query User{A7035C66-6FA5-4DCC-8F8E-F5C845E60A4A}F:\program files\o22y inc\medal of honor warfighter\mohw.exe" = protocol=6 | dir=in | app=f:\program files\o22y inc\medal of honor warfighter\mohw.exe |
"TCP Query User{A9A89F33-80C2-4DFA-A05E-BCDDCCF7CDED}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.exe" = protocol=6 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.exe |
"TCP Query User{B522BDB9-7DC3-4C40-B495-AB0C46121F8F}F:\phoenix_14beta7\blackops.exe" = protocol=6 | dir=in | app=f:\phoenix_14beta7\blackops.exe |
"TCP Query User{C207B141-9F9E-4FFD-BA72-D94BB65AA5DA}F:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\gtaiv.exe |
"TCP Query User{C20A23D0-9120-4412-9F38-AC3AFDE6AA77}F:\program files\dragon age\bin_ship\eacoreserver.exe" = protocol=6 | dir=in | app=f:\program files\dragon age\bin_ship\eacoreserver.exe |
"TCP Query User{C2AEBCDA-F8CC-475D-927C-5C4855233455}D:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"TCP Query User{C4025BFB-FE52-42E6-BA55-9357F1854442}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.dat" = protocol=6 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.dat |
"TCP Query User{CA2DA2CE-C3F2-4BEC-B76A-7BC1A8402AB3}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"TCP Query User{D91444C0-A59E-443B-9BDA-ACD77CE76548}D:\program files\left 4 dead\left4dead.exe" = protocol=6 | dir=in | app=d:\program files\left 4 dead\left4dead.exe |
"TCP Query User{E39D0302-C029-4BDF-B0DF-15DF649C9C46}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{E8A5FB13-C23A-44F8-AC10-ECEC576C0C46}F:\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe" = protocol=6 | dir=in | app=f:\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe |
"TCP Query User{ECAA556C-6528-46D1-B2FA-4D99C9FAF031}F:\dishonored\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=f:\dishonored\dishonored\binaries\win32\dishonored.exe |
"TCP Query User{F3E877A3-B722-4AF6-BB8D-75763C22BEE3}F:\phoenix_14beta7\blackopsmp.exe" = protocol=6 | dir=in | app=f:\phoenix_14beta7\blackopsmp.exe |
"TCP Query User{F42C2391-1C6B-477B-A58A-6958F0CD88C9}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{FA7E3078-47C3-4BB3-B14D-32C6320A9A21}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"UDP Query User{0802E1F2-6472-4A89-8BF8-B0D45495AF7B}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"UDP Query User{0CF62B19-00F0-4192-912A-379E30E28412}F:\dishonored\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=f:\dishonored\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{0D5FFBBB-CF61-4D29-8024-83042DC55211}C:\users\ruslan\appdata\roaming\gameranger\gameranger\gameranger.exe" = protocol=17 | dir=in | app=c:\users\ruslan\appdata\roaming\gameranger\gameranger\gameranger.exe |
"UDP Query User{1266A827-4042-424B-8E89-338A5CC8352F}E:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=e:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"UDP Query User{1898161D-A686-4CBF-994D-0A28134A650B}F:\program files\call of duty black ops 2\t6sp.exe" = protocol=17 | dir=in | app=f:\program files\call of duty black ops 2\t6sp.exe |
"UDP Query User{18B59D82-4A66-4AD7-A7C0-1EDD4B58C42C}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe" = protocol=17 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe |
"UDP Query User{1CEF0CC9-AB2E-4CF6-8194-B679EE0A6F68}F:\phoenix_14beta7\blackopsmp.exe" = protocol=17 | dir=in | app=f:\phoenix_14beta7\blackopsmp.exe |
"UDP Query User{2DA3EA6B-DA78-4DE8-A54F-3A4119919BCF}F:\revops\blackopsmp.exe" = protocol=17 | dir=in | app=f:\revops\blackopsmp.exe |
"UDP Query User{3246F936-F4D3-4887-AE9A-3A5EE9774E2A}F:\program files\call of duty black ops 2\t6zm.exe" = protocol=17 | dir=in | app=f:\program files\call of duty black ops 2\t6zm.exe |
"UDP Query User{458B1808-626F-4A64-A673-FD2D6616DE58}D:\program files\left 4 dead\left4dead.exe" = protocol=17 | dir=in | app=d:\program files\left 4 dead\left4dead.exe |
"UDP Query User{4A613BC0-7466-4A0B-B228-3E861AEA02DE}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe" = protocol=17 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4sp.exe |
"UDP Query User{4B79B751-366F-482C-81D1-D9F70A14CD7F}F:\games\fifa 13\game\fifa13.exe" = protocol=17 | dir=in | app=f:\games\fifa 13\game\fifa13.exe |
"UDP Query User{5C610AC8-B492-40E3-8770-E25EF0F50202}D:\program files\wolfenstein - enemy territory\et.exe" = protocol=17 | dir=in | app=d:\program files\wolfenstein - enemy territory\et.exe |
"UDP Query User{5D19F8C1-A4B3-4CBC-A0F9-73FFEE560F3A}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
"UDP Query User{69B34A2D-5D00-4311-B756-04DC78E73D38}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.dat" = protocol=17 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.dat |
"UDP Query User{6E450F19-9808-42C2-BF21-F867A86B535C}F:\program files\valve\portal 2\portal2.exe" = protocol=17 | dir=in | app=f:\program files\valve\portal 2\portal2.exe |
"UDP Query User{76C3A239-790A-4DFD-B5AE-EF304B3DA921}F:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe" = protocol=17 | dir=in | app=f:\left 4 dead  full game mp - sp  -=aviara=-\left4dead\left4dead.exe |
"UDP Query User{7A08D461-7032-459B-A692-0386CBF5EFB5}F:\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe" = protocol=17 | dir=in | app=f:\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe |
"UDP Query User{7DB3F216-434E-441A-83C9-8101D24B3493}D:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"UDP Query User{80679721-2425-43B9-9583-E28F3F99476A}F:\program files\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=f:\program files\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"UDP Query User{8732B5D2-8684-4DFF-B14B-46B395E7C519}F:\revops\blackops.exe" = protocol=17 | dir=in | app=f:\revops\blackops.exe |
"UDP Query User{8BACDD46-2C10-4327-9C99-9931727C5466}F:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\gtaiv.exe |
"UDP Query User{93B871AC-9C9B-4542-A173-8A0765C267A8}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{95E30DCB-5CD7-4A7D-96C1-ECF1DD8EBFEE}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"UDP Query User{997BBB73-127D-4058-8303-807345D73F76}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{A01CA7D3-5DC9-42D5-A997-27479D05A3C3}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{A063E115-A15A-49CC-96F5-5BE18B7F9BB6}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
"UDP Query User{A677849E-DE53-466D-B82B-7C2BB87AD5AB}F:\program files\dragon age\bin_ship\eacoreserver.exe" = protocol=17 | dir=in | app=f:\program files\dragon age\bin_ship\eacoreserver.exe |
"UDP Query User{A6F48743-2D1F-4980-8C3B-C67E586F876A}F:\program files\o22y inc\medal of honor warfighter\mohw.exe" = protocol=17 | dir=in | app=f:\program files\o22y inc\medal of honor warfighter\mohw.exe |
"UDP Query User{C5D23156-AD5E-4096-9330-1685FBAEEBDA}F:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.exe" = protocol=17 | dir=in | app=f:\games\call.of.duty.modern.warfare.2.mp.edition.polish.o22y\iw4mp.exe |
"UDP Query User{D479E78B-C680-47D9-AE62-BBC37CA0CC3E}\\pawelek\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=\\pawelek\grand theft auto iv\gtaiv.exe |
"UDP Query User{D59AE864-6DEF-4095-A3D3-B963BB4EC105}D:\program files\ubisoft\assassin's creed revelations\acrpr.exe" = protocol=17 | dir=in | app=d:\program files\ubisoft\assassin's creed revelations\acrpr.exe |
"UDP Query User{DD805902-24D6-4205-930F-0E76195876F1}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"UDP Query User{E008EF75-4C6B-4E86-B252-1AB53D8518C6}F:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=f:\program files\rockstar games\grand theft auto iv\gtaiv.exe |
"UDP Query User{F96AB3C4-9A9B-496E-8B1C-7A6EFBDA0725}F:\phoenix_14beta7\blackops.exe" = protocol=17 | dir=in | app=f:\phoenix_14beta7\blackops.exe |
"UDP Query User{FD583773-B47C-483E-93C7-9864AA9707DF}C:\users\ruslan\appdata\local\temp\8a76.tmp\kmservice.exe" = protocol=17 | dir=in | app=c:\users\ruslan\appdata\local\temp\8a76.tmp\kmservice.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1" = MSI Kombustor 2.3.0
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D8166BF-A19A-4421-A745-63290F96F8EA}_is1" = Call.of.Duty.Modern.Warfare.2.MP.Edition.POLiSH.O22y wersja 1.5
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F414901-5ED4-11E1-86F3-F04DA23A5C58}" = Vegas Pro 11.0
"{0F733E11-408E-11E1-B5FE-F04DA23A5C58}" = MSVCRT Redists
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{14ECAABB-C8B9-4A09-92F7-CDF1A45B6DDE}" = Google Drive
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1B2DBF55-05D4-4072-87D8-689141E262BD}" = Creative ZEN
"{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1" = Euro Truck Simulator 2
"{1E11EE30-C0D4-46BC-9142-27EB4C37BE35}" = Angry Birds
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{26A24AE4-039D-4CA4-87B4-2F83216017F0}" = Java(TM) 6 Update 17
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2B653229-9854-4989-B780-D978F5F13EAB}" = FEAR
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{34A153FE-6926-4C14-B48A-B71E68C672A8}_is1" = MiniTool Partition Wizard Home Edition 7.1
"{36DBC95E-A143-40A3-8BA6-2E788119BE99}" = MainConcept MCE Encoder
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F499657-766A-4A5F-AEE9-A1F8D295A4CE}" = FIFA 13 Demo
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{47D6F3E4-D158-4E47-84C4-0D6452DB2488}_is1" = Call of Duty Black Ops 2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8303}" = Grand Theft Auto IV
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{5DE1B7CF-7429-40CA-987F-6BEE09B63787}" = Prime95
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7CEB3ACD-5B4F-497A-819C-60D4737EC553}" = Industry Giant II
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v4.1
"{97A39919-9FEA-48B7-AB2B-4F99212D1E98}" = HDD Regenerator
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed (R) III
"{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}" = FIFA 13
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A35001F0-F1E4-11DD-A38B-005056C00008}" = Paragon Partition Manager™ 11 Professional Demo
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Polish
"{ACC78BCD-6B12-4C73-8D98-5B96A4A6D73A}" = XSplit
"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BE4BA698-8533-4F77-9559-C7F3F78C0B05}" = Assassin's Creed Brotherhood
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{D08A5DFE-F0C2-74FC-DD56-A3B371E9344D}" = EA Shared Game Component: Activation
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D4850ED2-4D98-4032-80AC-AAB4C4B9A0FD}" = Rails Across America
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1100000-0008-0000-0001-074957833700}" = ABBYY FineReader 11
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{F47E5EF3-F7CB-4459-9E5D-119511EBDD78}_is1" = Minecraft AA wersja 1.1
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Afterburner" = MSI Afterburner 2.3.0
"AIDA64 Extreme Edition_is1" = AIDA64 Extreme Edition wersja 2.30.1900
"Any Video Converter_is1" = Any Video Converter 3.5.7
"Artisteer 3" = Artisteer 3
"Battlelog Web Plugins" = Battlelog Web Plugins
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.ea.Activation.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Shared Game Component: Activation
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.61.3
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.21
"CWK" = CWK (Czasowy Wyłącznik Komputera)
"Dxtory2.0_is1" = Dxtory version 2.0.118
"EA Installer.218457048" = EA Installer
"ESN Sonar-0.70.4" = ESN Sonar
"Fraps" = Fraps (remove only)
"Freemake Audio Converter_is1" = Freemake Audio Converter wersja 1.1.0
"Freemake Video Converter_is1" = Freemake Video Converter wersja 3.1.2
"FT329D" = USB Steering Wheel
"Gadu-Gadu 10" = Gadu-Gadu 10
"Game Booster_is1" = Game Booster 3
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"GOM Player" = GOM Player
"HD Tune Pro_is1" = HD Tune Pro 5.00
"HD Tune_is1" = HD Tune 2.55
"Heroes III Armageddon's Blade" = Heroes III Armageddon's Blade
"Heroes III The Restoration of Erathia" = Heroes III The Restoration of Erathia
"Heroes III The Shadow of Death" = Heroes III The Shadow of Death
"InstallShield_{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń
"InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 Demo
"InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E5141379-B2D9-4BBC-BB2A-5805541571DD}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch
"ipla" = ipla 2.4
"kED_is1" = kED 2.1.4.0
"KLiteCodecPack_is1" = K-Lite Codec Pack 9.0.8 (Full)
"Knights and Merchants TPR" = Knights and Merchants TPR
"Left 4 Dead" = Left 4 Dead
"Lexmark 3300 Series" = Lexmark 3300 Series
"Łatka polonizacyjna GTA IV v1.0" = Łatka polonizacyjna GTA IV v1.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Mozilla Firefox 17.0.1 (x86 pl)" = Mozilla Firefox 17.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NapiProjekt_is1" = NapiProjekt (2.1.0.2287)
"Need For Speed - Porsche 2000" = Need For Speed - Porsche 2000
"NIS" = Norton Internet Security
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OCCT" = OCCT 4.3.2
"ODBITKOMAT Fotoswiat" = ODBITKOMAT Fotoswiat
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"Origin" = Origin
"PITy 2011_is1" = PITy 2011
"Postal 2_is1" = Portal 2
"PunkBusterSvc" = PunkBuster Services
"RADVideo" = RAD Video Tools
"RealPlayer 15.0" = RealPlayer
"Restorator 2009_is1" = Restorator 2009
"SpeedFan" = SpeedFan (remove only)
"Steam App 22600" = Worms Reloaded
"Steam App 43110" = Metro 2033
"SysInfo" = Creative System Information
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Tunngle beta_is1" = Tunngle beta
"UltraISO_is1" = UltraISO Premium V9.52
"Uplay" = Uplay
"USB FORCE RACER" = USB FORCE RACER
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.3
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 4.00 (32-bitowy)
"WNLT" = Web Optimizer
"Wolfenstein - Enemy Territory" = Wolfenstein - Enemy Territory
"Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate
"ZENcast Organizer" = ZENcast Organizer

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2043330812-2825032562-3039729627-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"GameRanger" = GameRanger
"Google Chrome" = Google Chrome
"Juniper_Setup_Client" = Juniper Networks Setup Client
"Winamp Detect" = Detektor Winampa

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2043330812-2825032562-3039729627-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"GameRanger" = GameRanger
"Google Chrome" = Google Chrome
"Juniper_Setup_Client" = Juniper Networks Setup Client
"Winamp Detect" = Detektor Winampa

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2013-01-05 06:43:50 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 06:46:24 | Computer Name = Ruslan-Komputer | Source = .NET Runtime | ID = 1022
Description =

Error - 2013-01-05 07:14:55 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 07:56:07 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 08:14:21 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 12:18:44 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 12:56:10 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-05 13:11:37 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-06 08:03:36 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-06 11:56:47 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

Error - 2013-01-06 13:11:29 | Computer Name = Ruslan-Komputer | Source = WinMgmt | ID = 10
Description =

[ Media Center Events ]
Error - 2012-10-26 12:59:17 | Computer Name = Ruslan-Komputer | Source = MCUpdate | ID = 0
Description = 18:59:17 - Błąd podczas nawiązywania połączenia z Internetem.  18:59:17
-     Nie można skontaktować się z serwerem.. 

Error - 2012-11-20 03:10:18 | Computer Name = Ruslan-Komputer | Source = MCUpdate | ID = 0
Description = 08:10:17 - Błąd podczas nawiązywania połączenia z Internetem.  08:10:17
-     Nie można skontaktować się z serwerem.. 

[ System Events ]
Error - 2013-01-06 11:58:05 | Computer Name = Ruslan-Komputer | Source = BROWSER | ID = 8017
Description =

Error - 2013-01-06 11:58:05 | Computer Name = Ruslan-Komputer | Source = Service Control Manager | ID = 7024
Description = Usługa Przeglądarka komputera zakończyła działanie; wystąpił specyficzny
dla niej błąd %%2184.

Error - 2013-01-06 11:58:05 | Computer Name = Ruslan-Komputer | Source = Service Control Manager | ID = 7023
Description = Usługa Serwer zakończyła działanie; wystąpił następujący błąd:   %%1062

Error - 2013-01-06 13:10:09 | Computer Name = Ruslan-Komputer | Source = hasplms | ID = 458755
Description = ERROR: Sentinel LDK License Manager failed to start in a promptly
manner!

Error - 2013-01-06 13:10:12 | Computer Name = Ruslan-Komputer | Source = hasplms | ID = 458755
Description = ERROR: Sentinel LDK License Manager failed to start in a promptly
manner!

Error - 2013-01-06 13:10:13 | Computer Name = Ruslan-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi WebcamMax, WDM Video Capture z powodu następującego
błędu:   %%1058

Error - 2013-01-06 13:10:14 | Computer Name = Ruslan-Komputer | Source = hasplms | ID = 458755
Description = ERROR: Sentinel LDK License Manager failed to start in a promptly
manner!

Error - 2013-01-06 13:10:21 | Computer Name = Ruslan-Komputer | Source = Service Control Manager | ID = 7026
Description = Nie można załadować następujących sterowników startu rozruchowego
lub systemowego:   cdrom

Error - 2013-01-06 13:10:21 | Computer Name = Ruslan-Komputer | Source = Microsoft-Windows-WHEA-Logger | ID = 18
Description = Wystąpił krytyczny błąd sprzętowy.    Zgłoszone przez składnik: rdzeń
procesora  Źródło błędu: 3  Typ błędu: 10  Identyfikator procesora: 0    Widok szczegółów
tego wpisu zawiera dodatkowe informacje.

Error - 2013-01-06 13:28:28 | Computer Name = Ruslan-Komputer | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.


< End of report >


[wojtas]

Nic nie widzę

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2043330812-2825032562-3039729627-1004..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun File not found

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

więcej nic nie ma