Straszne lagi po starcie systemu

**Posty:** 1 · przez **vr1tlash** 17 Paź 2012, 15:10

Witam, od jakiegoś dłuższego czasu mam problem z komputerem, mianowicie po starcie systemu przez jakieś 20 minut są straszne ścinki, ale potem wszystko wraca do normy.

Niedawno miałem coś z bootem systemu, bo zostawiłem go na 20 minut i się jeszcze nie włączył WTF? Naprawiłem to poprzez przywrócenie systemu funkcją "Napraw"

OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2012-10-17 14:36:04 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Patryk\Bluebirds\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 44,29% Memory free 7,99 Gb Paging File | 5,20 Gb Available in Paging File | 65,10% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 931,41 Gb Total Space | 247,27 Gb Free Space | 26,55% Space Free | Partition Type: NTFS Drive D: | 0,38 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive E: | 100,00 Mb Total Space | 69,21 Mb Free Space | 69,21% Space Free | Partition Type: NTFS Computer Name: PATRYK-PC | User Name: Patryk | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-10-17 14:09:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Patryk\Bluebirds\Downloads\OTL.exe PRC - [2012-10-05 20:53:39 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\firefox.exe PRC - [2012-10-04 18:10:59 | 000,529,744 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2012-08-09 17:33:01 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2012-08-09 17:32:50 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012-08-04 19:25:44 | 001,353,080 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe PRC - [2012-05-25 14:19:26 | 001,540,120 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe PRC - [2012-05-25 07:36:32 | 001,618,456 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe PRC - [2012-05-24 05:23:02 | 000,985,624 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe PRC - [2012-03-29 04:42:28 | 000,470,008 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe PRC - [2012-02-26 16:42:28 | 000,632,320 | ---- | M] (FileZilla Project) -- C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe PRC - [2012-01-27 06:13:02 | 001,470,968 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe PRC - [2012-01-27 05:43:34 | 000,468,472 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe PRC - [2011-08-19 11:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2010-11-20 14:17:56 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe PRC - [2010-09-16 15:06:22 | 000,080,896 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe PRC - [2010-07-22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe PRC - [2010-05-04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2010-01-26 17:18:16 | 000,304,712 | ---- | M] (G Data Software) -- C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe PRC - [2009-10-24 03:18:54 | 000,360,224 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe PRC - [2009-04-29 11:02:01 | 000,270,336 | R--- | M] (LG Electronics) -- C:\Users\Patryk\Bluebirds\BlueBirds.exe PRC - [2009-02-10 09:01:49 | 000,116,104 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE PRC - [2008-06-23 21:28:08 | 000,208,896 | ---- | M] (UASSOFT.COM) -- C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-10-05 20:53:39 | 002,294,752 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\mozjs.dll MOD - [2012-10-04 18:10:59 | 020,317,008 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll MOD - [2012-10-04 18:10:54 | 001,099,616 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll MOD - [2012-10-04 18:10:54 | 000,902,480 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL MOD - [2012-10-04 18:10:54 | 000,190,816 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll MOD - [2012-10-04 18:10:54 | 000,123,232 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll MOD - [2011-03-15 07:13:46 | 004,254,560 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf MOD - [2010-07-22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe MOD - [2010-06-01 11:41:38 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_MouseDeviceManager.dll MOD - [2010-05-07 23:05:57 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\Data\X7H\Forms\OSD_Text\OSD_Text.dll MOD - [2010-04-03 11:37:14 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_Wheel4D.dll MOD - [2010-04-03 11:37:09 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_ZoomControl.dll MOD - [2010-04-03 11:37:07 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_ScrollbarControl.dll MOD - [2010-04-03 11:37:02 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_AnalyzeGesturesInRight.dll MOD - [2010-04-03 11:36:58 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\DLL\DLL_AnalyzeGesturesInOne.dll MOD - [2009-06-17 12:40:16 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2009-06-17 12:40:16 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2009-06-17 12:40:16 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-10-11 14:17:16 | 000,108,392 | ---- | M] (SurfRight B.V.) [Auto | Running] -- C:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler) SRV:[b]64bit:[/b] - [2011-11-10 05:11:32 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2011-08-22 07:57:20 | 000,534,832 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\Unite\EzVpnSvc.exe -- (EzVpnSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2007-02-26 17:07:41 | 000,754,304 | ---- | M] (Cenega Poland) [Auto | Stopped] -- C:\Windows\SysNative\pr2ajjac.exe -- (pr2ajjac) SRV - [2012-10-09 18:52:37 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-10-05 20:53:39 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-10-04 18:10:59 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-09-11 15:32:58 | 004,537,664 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll -- (Akamai) SRV - [2012-08-29 12:03:36 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-08-09 17:33:01 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2012-08-09 17:32:50 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012-07-03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-06-24 20:42:01 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto | Stopped] -- C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService) SRV - [2012-05-25 14:19:26 | 001,540,120 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe -- (AVKProxy) SRV - [2012-05-25 07:36:32 | 001,618,456 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe -- (GDBackupSvc) SRV - [2012-05-25 05:11:06 | 001,766,976 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe -- (GDFwSvc) SRV - [2012-05-14 12:20:22 | 000,884,608 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe -- (WO_LiveService) SRV - [2012-05-14 05:26:48 | 001,218,552 | ---- | M] (G Data Software AG) [On_Demand | Stopped] -- C:\Program Files (x86)\G Data\TotalProtection\AVKTuner\AVKTunerService.exe -- (GDTunerSvc) SRV - [2012-03-29 04:42:28 | 000,470,008 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe -- (GDScan) SRV - [2012-02-26 16:42:28 | 000,632,320 | ---- | M] (FileZilla Project) [Auto | Running] -- C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe -- (FileZilla Server) SRV - [2012-01-27 06:01:08 | 002,006,872 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlX64.exe -- (AVKWCtl) SRV - [2012-01-27 05:43:34 | 000,468,472 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe -- (AVKService) SRV - [2011-08-19 11:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2010-09-16 15:06:22 | 000,080,896 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service) SRV - [2010-05-17 18:21:00 | 003,592,432 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc) SRV - [2010-05-04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2010-01-26 17:18:16 | 000,304,712 | ---- | M] (G Data Software) [Auto | Running] -- C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe -- (TSNxGService) SRV - [2009-10-24 03:18:54 | 000,360,224 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider) SRV - [2009-08-24 22:16:12 | 000,544,768 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\DfsdkS64.exe -- (DfSdkS) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-02-10 09:01:49 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC) SRV - [2008-06-23 21:28:08 | 000,208,896 | ---- | M] (UASSOFT.COM) [Auto | Running] -- C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe -- (KMWDSERVICE) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-07-14 14:16:28 | 000,106,648 | ---- | M] (G Data Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GRD.sys -- (GRD) DRV:[b]64bit:[/b] - [2012-07-09 18:44:25 | 000,059,768 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt) DRV:[b]64bit:[/b] - [2012-07-09 18:44:03 | 000,098,760 | ---- | M] (G Data Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TS4nt.sys -- (TS4NT) DRV:[b]64bit:[/b] - [2012-07-09 18:42:54 | 000,064,376 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre) DRV:[b]64bit:[/b] - [2012-07-09 18:42:52 | 000,122,744 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt) DRV:[b]64bit:[/b] - [2012-07-09 18:42:50 | 000,054,136 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave) DRV:[b]64bit:[/b] - [2012-07-09 18:42:44 | 000,065,912 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-11-10 05:45:30 | 010,567,680 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2011-11-10 05:45:30 | 010,567,680 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-11-10 04:12:44 | 000,325,632 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-10-17 19:40:50 | 000,093,712 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2011-08-19 11:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUVC64.sys -- (LVUVC64) DRV:[b]64bit:[/b] - [2011-08-19 11:27:30 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:[b]64bit:[/b] - [2011-08-19 11:27:22 | 000,025,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvbflt64.sys -- (CompFilter64) DRV:[b]64bit:[/b] - [2011-04-14 11:01:46 | 000,020,888 | ---- | M] (Comodo, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmdatp.sys -- (ATP) DRV:[b]64bit:[/b] - [2011-03-25 00:00:00 | 000,073,552 | ---- | M] (WinAbility® Software Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Folder Guard\FGUARD64.sys -- (FGUARD64) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-23 09:34:00 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-08-30 13:58:27 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-08-21 06:59:12 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM) DRV:[b]64bit:[/b] - [2010-07-01 14:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc) DRV:[b]64bit:[/b] - [2010-06-25 17:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot) DRV:[b]64bit:[/b] - [2010-05-15 00:01:02 | 000,068,064 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvsels64.sys -- (lvsels64) DRV:[b]64bit:[/b] - [2010-05-07 18:43:30 | 000,030,304 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon) DRV:[b]64bit:[/b] - [2010-05-07 18:43:30 | 000,030,304 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64) DRV:[b]64bit:[/b] - [2010-04-27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2009-11-23 17:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid) DRV:[b]64bit:[/b] - [2009-11-23 17:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV:[b]64bit:[/b] - [2009-11-23 14:43:48 | 000,115,824 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID) DRV:[b]64bit:[/b] - [2009-08-13 22:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 16:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-03-01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2007-02-26 17:06:40 | 000,072,584 | ---- | M] (Cenega Poland) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pe3ajjac.sys -- (pe3ajjac) DRV:[b]64bit:[/b] - [2007-02-26 17:04:23 | 000,073,616 | ---- | M] (Cenega Poland) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ps6ajjac.sys -- (ps6ajjac) DRV - [2011-03-08 06:01:06 | 000,012,824 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys -- (LiveTunerPM) DRV - [2010-11-01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2004-12-30 23:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) DRV - [2002-07-17 16:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2795644 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2481033 IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\URLSearchHook: {5570f0a0-580c-4c69-808f-8b2aaa2aa93c} - No CLSID value found IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033 IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local> [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..CT2481033.browser.search.defaultthis.engineName: true FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledAddons: bedelllimited@gmail.com:1.11 FF - prefs.js..extensions.enabledAddons: personas@christopher.beard:1.6.2 FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.2.2 FF - prefs.js..extensions.enabledAddons: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.15 FF - prefs.js..extensions.enabledAddons: {b9bfaf1c-a63f-47cd-8b9a-29526ced9060}:1.4.7 FF - prefs.js..extensions.enabledAddons: battlefieldplay4free@ea.com:1.0.80.2 FF - prefs.js..extensions.enabledAddons: DeviceDetection@logitech.com:1.23.0.5 FF - prefs.js..extensions.enabledAddons: {75623d5d-4683-402a-b610-ac4bab767c86}:3.4.3 FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.20.0.66 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185 FF - prefs.js..extensions.enabledItems: IvonaFirefoxToolbar@ivona.com:1.0 FF - prefs.js..extensions.enabledItems: fassoxpcom@sensiblevision.com:1.12 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?SSPV=FFSB10&ctid=CT2481033&SearchSource=2&q=" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF - HKLM\Software\MozillaPlugins\@comodo.com/EasyvpnLvn: C:\Program Files\COMODO\Unite\npEasyVpnLVN.dll (COMODO) FF - HKLM\Software\MozillaPlugins\@comodo.com/EasyvpnRdp: C:\Program Files\COMODO\Unite\NpRdpView.dll ( ) FF - HKLM\Software\MozillaPlugins\@comodo.com/EasyvpnVnc: C:\Program Files\COMODO\Unite\NpVncView.dll ( ) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Patryk\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Patryk\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Patryk\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Patryk\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Patryk\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\components [2012-10-05 20:53:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\components [2012-10-05 20:53:39 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins [2010-10-02 18:25:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\Extensions [2010-10-02 18:25:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b} [2012-10-15 19:35:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions [2012-10-15 19:52:02 | 000,000,000 | ---D | M] (XfireXO Community Toolbar) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} [2012-10-15 19:52:02 | 000,000,000 | ---D | M] (Media Converter) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18} [2012-10-15 19:52:02 | 000,000,000 | ---D | M] (Fast Search by Surf Canyon) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\{75623d5d-4683-402a-b610-ac4bab767c86} [2012-10-15 19:52:01 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\battlefieldplay4free@ea.com [2012-10-15 19:52:01 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\DeviceDetection@logitech.com [2012-10-15 19:52:01 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\DTToolbar@toolbarnet.com [2012-10-15 19:52:02 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\engine@conduit.com [2011-05-13 13:25:40 | 000,019,661 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\bedelllimited@gmail.com.xpi [2012-07-01 19:48:51 | 000,122,761 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\elemhidehelper@adblockplus.org.xpi [2011-03-14 18:31:09 | 000,330,316 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\personas@christopher.beard.xpi [2012-09-12 15:21:02 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\testpilot@labs.mozilla.com.xpi [2012-09-17 13:33:37 | 000,012,884 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2012-08-04 20:37:38 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-13 18:33:30 | 000,698,867 | ---- | M] () (No name found) -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-06-07 18:51:22 | 000,000,947 | ---- | M] () -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\searchplugins\conduit.xml [2012-10-11 17:26:28 | 000,002,282 | ---- | M] () -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\searchplugins\surf-canyon.xml [2011-05-08 18:29:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010-07-14 08:36:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2009-10-14 19:36:14 | 000,027,648 | ---- | M] (Ivo Software Sp. z o.o.) -- C:\Program Files (x86)\mozilla firefox\components\IvonaFirefoxToolbar.dll [2010-07-14 08:36:15 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010-07-12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://search.conduit.com/?ctid=CT2481033&SearchSource=48&sspv=CHSB12 CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT2481033&sspv=CHSB12 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - homepage: http://search.conduit.com/?ctid=CT2481033&SearchSource=48&sspv=CHSB12 CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153\npSkypeChromePlugin.dll CHR - plugin: Megakey (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhhocpdgkjoocfobhdbcfeafckeoiemc\0.6.0.0_0\plugin\npms.dll CHR - plugin: Megakey (Enabled) = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhhocpdgkjoocfobhdbcfeafckeoiemc\0.6.0.0_0\plugin\npMegaPlugin.dll CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Unity Player (Enabled) = C:\Users\Patryk\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: AT_MEcko = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdglekpmmdlmdfogflhiponnndbokpk\2\ CHR - Extension: Battlefield Heroes = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.110.0\ CHR - Extension: Ashampoo PO = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jinihaffgdhejchgkogpfkdmpldnmnji\10.8.6.1_0\ CHR - Extension: Skype Click to Call = C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\ O1 HOSTS File: ([2012-04-05 21:18:34 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll (IVO Software Sp. z o.o.) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (G Data BankGuard) - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeBHO.dll (G Data Software AG) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com) O2 - BHO: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3:[b]64bit:[/b] - HKLM\..\Toolbar: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll (IVO Software Sp. z o.o.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O3 - HKLM\..\Toolbar: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKLM\..\Toolbar: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O3 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\Toolbar\WebBrowser: (Ashampoo PO Toolbar) - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] c:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe (G Data Software AG) O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe (G Data Software AG) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TSNxG4Tray] "C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGTray.exe" /system File not found O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001..\Run: [bluebirds] C:\Users\Patryk\Bluebirds\BlueBirds.exe (LG Electronics) O4 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe () O4 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..Trusted Domains: sony.com ([]* in Trusted sites) O16:[b]64bit:[/b] - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection64.cab (Wykrywanie urządzenia) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 10.7.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.145.129.234 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{398F67F3-33F6-441D-B689-1FB037C015F7}: DhcpNameServer = 83.145.129.234 8.8.8.8 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2011-06-06 18:37:33 | 000,000,000 | ---- | M] () - C:\Autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2009-04-29 11:02:01 | 000,000,055 | R--- | M] () - D:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{1fb84c64-6bc1-11df-b08b-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{1fb84c64-6bc1-11df-b08b-806e6f6e6963}\Shell\AutoRun\command - "" = D:\BlueBirds.exe -- [2009-04-29 11:02:01 | 000,270,336 | R--- | M] (LG Electronics) O33 - MountPoints2\{223e328c-b446-11df-acfc-00241d72dcfe}\Shell - "" = AutoRun O33 - MountPoints2\{223e328c-b446-11df-acfc-00241d72dcfe}\Shell\AutoRun\command - "" = J:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-10-11 16:49:40 | 000,000,000 | ---D | C] -- C:\Users\Patryk\Documents\Corel VideoStudio Pro [2012-10-11 16:48:49 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Roaming\Corel [2012-10-11 16:48:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Protexis [2012-10-11 16:48:33 | 000,000,000 | ---D | C] -- C:\Users\Patryk\AppData\Roaming\Ulead Systems [2012-10-11 15:31:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartSound Software [2012-10-11 15:31:09 | 000,000,000 | ---D | C] -- C:\ProgramData\SmartSound Software Inc [2012-10-11 15:29:31 | 000,000,000 | ---D | C] -- C:\Windows\RegisteredPackages [2012-10-11 15:23:25 | 000,000,000 | ---D | C] -- C:\ProgramData\InterVideo [2012-10-11 15:18:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Protexis [2012-10-11 15:17:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Corel [2012-10-11 15:11:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Components [2012-10-11 15:11:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel [2012-10-10 14:42:04 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012-10-10 14:42:01 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012-10-10 14:42:01 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012-10-10 14:41:44 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2012-10-10 14:41:44 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2012-10-10 14:41:43 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2012-10-10 14:41:43 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012-10-10 14:41:42 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2012-10-10 14:41:42 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2012-10-10 14:41:41 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2012-10-10 14:41:41 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2012-10-10 14:41:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2012-10-10 14:41:41 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2012-10-10 14:41:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2012-10-10 14:41:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2012-10-10 14:41:41 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2012-10-10 14:41:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2012-10-10 14:41:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2012-10-10 14:41:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2012-10-10 14:41:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2012-10-10 14:41:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2012-10-10 14:41:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-10-10 14:41:40 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2012-10-10 14:41:40 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2012-10-10 14:41:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2012-10-10 14:41:39 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2012-10-10 14:41:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2012-10-10 14:41:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2012-10-10 14:41:38 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2012-10-10 14:41:38 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2012-10-10 14:41:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2012-10-10 14:41:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2012-10-10 14:41:37 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2012-10-10 14:41:37 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2012-10-10 14:41:37 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2012-10-10 14:41:37 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2012-10-10 14:41:37 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2012-10-10 14:41:37 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2012-10-10 14:41:37 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2012-10-10 14:41:36 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2012-10-10 14:41:13 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2012-10-10 14:40:06 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2012-10-10 14:40:05 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2012-10-05 20:53:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8 [2012-10-03 14:22:59 | 000,000,000 | ---D | C] -- C:\Users\Patryk\Desktop\LOLPBE [2012-09-26 14:22:20 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe [2012-09-22 16:37:27 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012-09-22 16:37:27 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012-09-22 16:37:26 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012-09-22 16:37:26 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012-09-22 16:37:26 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012-09-22 16:37:26 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012-09-22 16:37:26 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012-09-22 16:37:25 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012-09-22 16:37:25 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012-09-22 16:37:25 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012-09-22 16:37:24 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012-09-22 16:37:24 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012-09-22 16:37:22 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012-09-22 16:37:22 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012-09-22 16:37:22 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2012-09-21 20:03:41 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012-09-21 20:03:26 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-09-21 20:03:26 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-09-21 20:03:26 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012-09-19 12:36:14 | 000,000,000 | ---D | C] -- C:\Users\Patryk\Desktop\mw3 [2012-05-04 09:04:00 | 002,174,976 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Program Files (x86)\Common Files\atimpenc.dll [2010-11-03 12:33:35 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Users\Patryk\AppData\Roaming\MinecraftSP.exe [2010-07-15 10:23:39 | 1712,009,877 | ---- | C] (gPotato.eu ) -- C:\Program Files (x86)\Rappelz_PL_Resurrection.exe [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [1 C:\Users\Patryk\*.tmp files -> C:\Users\Patryk\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-10-17 14:46:11 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-10-17 14:13:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3663251781-1262251747-4148551615-1001UA.job [2012-10-17 14:02:33 | 000,015,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-10-17 14:02:32 | 000,015,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-10-17 13:53:42 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-10-17 13:52:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-10-17 13:52:11 | 3219,890,176 | -HS- | M] () -- C:\hiberfil.sys [2012-10-16 18:52:06 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-10-11 18:15:27 | 008,166,394 | ---- | M] () -- C:\Users\Patryk\Desktop\film.wmv [2012-10-11 14:53:57 | 000,717,771 | ---- | M] () -- C:\Users\Patryk\Desktop\Bez tytułu.png [2012-10-11 14:20:02 | 000,002,493 | ---- | M] () -- C:\Users\Patryk\Desktop\Google Chrome.lnk [2012-10-10 15:10:02 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3663251781-1262251747-4148551615-1001Core.job [2012-10-09 19:48:28 | 000,096,741 | ---- | M] () -- C:\Users\Patryk\Desktop\900140resizeBigger001_1318857453.jpg [2012-10-09 19:16:34 | 000,814,578 | ---- | M] () -- C:\Users\Patryk\Desktop\6434969980986a7f5dbc.jpg [2012-10-09 18:52:35 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012-10-09 18:52:34 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-09-26 17:29:03 | 000,369,742 | ---- | M] () -- C:\Users\Patryk\Desktop\a_rather_psychotic_looking_pinkie_pie_vector__by_flare3-d4nhvjh.png [2012-09-25 20:21:52 | 000,214,173 | ---- | M] () -- C:\Users\Patryk\Desktop\3148.jpg [2012-09-21 20:03:21 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012-09-21 20:03:20 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012-09-21 20:03:20 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012-09-21 20:03:20 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012-09-21 20:03:20 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-09-21 20:03:20 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-09-21 19:51:02 | 000,368,961 | ---- | M] () -- C:\Users\Patryk\Desktop\MinecraftSL.jar [2012-09-21 16:20:43 | 000,000,406 | ---- | M] () -- C:\Windows\tasks\One-Click Optimizer.job [2012-09-19 20:42:26 | 001,663,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-09-19 20:42:26 | 000,737,958 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-09-19 20:42:26 | 000,652,166 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-09-19 20:42:26 | 000,154,646 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-09-19 20:42:26 | 000,121,098 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-09-19 20:36:42 | 000,661,035 | ---- | M] () -- C:\Users\Patryk\Desktop\YrMas28xLBnKbED1mX.jpg [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [1 C:\Users\Patryk\*.tmp files -> C:\Users\Patryk\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-10-11 18:13:13 | 008,166,394 | ---- | C] () -- C:\Users\Patryk\Desktop\film.wmv [2012-10-11 14:53:30 | 000,717,771 | ---- | C] () -- C:\Users\Patryk\Desktop\Bez tytułu.png [2012-10-09 19:48:26 | 000,096,741 | ---- | C] () -- C:\Users\Patryk\Desktop\900140resizeBigger001_1318857453.jpg [2012-10-09 19:07:34 | 000,814,578 | ---- | C] () -- C:\Users\Patryk\Desktop\6434969980986a7f5dbc.jpg [2012-09-26 17:28:52 | 000,369,742 | ---- | C] () -- C:\Users\Patryk\Desktop\a_rather_psychotic_looking_pinkie_pie_vector__by_flare3-d4nhvjh.png [2012-09-25 20:21:52 | 000,214,173 | ---- | C] () -- C:\Users\Patryk\Desktop\3148.jpg [2012-09-21 19:50:59 | 000,368,961 | ---- | C] () -- C:\Users\Patryk\Desktop\MinecraftSL.jar [2012-09-19 20:36:38 | 000,661,035 | ---- | C] () -- C:\Users\Patryk\Desktop\YrMas28xLBnKbED1mX.jpg [2012-08-04 19:29:27 | 000,778,770 | ---- | C] () -- C:\Users\Patryk\xfire_games_20120730.zip [2012-07-14 14:04:51 | 004,503,728 | ---- | C] () -- C:\ProgramData\to_r0tsef.pad [2012-07-08 20:50:40 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe [2012-05-03 04:54:46 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2012-04-14 12:21:14 | 000,007,605 | ---- | C] () -- C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg [2012-04-05 18:10:26 | 001,638,686 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-03-19 19:16:45 | 000,000,612 | ---- | C] () -- C:\Windows\mp3wavcon.ini [2012-03-19 19:16:16 | 000,000,005 | ---- | C] () -- C:\Windows\SysWow64\SySmp3con.dat [2012-03-05 20:29:31 | 000,007,290 | ---- | C] () -- C:\Users\Patryk\.recently-used.xbel [2011-12-30 11:39:47 | 000,748,875 | ---- | C] () -- C:\Windows\SysWow64\sig.bin [2011-11-27 12:14:30 | 000,017,408 | ---- | C] () -- C:\Users\Patryk\AppData\Local\WebpageIcons.db [2011-11-10 04:36:06 | 000,204,960 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2011-11-10 04:36:06 | 000,157,152 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2011-11-09 23:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll [2011-11-09 23:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-11-07 19:37:14 | 000,000,000 | ---- | C] () -- C:\Users\Patryk\AppData\Local\{AFD28290-96E4-4844-A6D1-C96F186F537B} [2011-11-05 19:56:44 | 024,081,466 | ---- | C] () -- C:\Users\Patryk\SkypeStep Skype Ringtone Dubstep Remix.wav [2011-10-25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll [2011-10-01 19:13:42 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat [2011-10-01 09:30:43 | 000,002,241 | ---- | C] () -- C:\Users\Patryk\char.png [2011-09-21 17:45:36 | 478,155,821 | ---- | C] () -- C:\Users\Patryk\AppData\Roaming\.minecraft.rar [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-08-19 11:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll [2011-08-19 11:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2011-08-19 11:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [2011-08-08 12:55:41 | 019,600,195 | ---- | C] () -- C:\Users\Patryk\UKF Dubstep Mix - August.mp3 [2011-08-05 11:39:40 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-08-05 11:39:38 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-08-02 11:53:44 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-04-06 15:51:35 | 000,000,257 | ---- | C] () -- C:\Users\Patryk\AppData\Roaming\burnaware.ini [2011-03-28 15:36:07 | 000,001,442 | ---- | C] () -- C:\Windows\cbkpm24.ini [2011-03-19 22:11:22 | 000,000,024 | ---- | C] () -- C:\Windows\clofghls.dll [2011-03-19 22:07:40 | 000,000,020 | ---- | C] () -- C:\Windows\mafosav.INI [2011-01-31 19:52:56 | 000,093,673 | ---- | C] () -- C:\Users\Patryk\AppData\Roaming\Uninstal.exe [2010-11-05 15:18:54 | 000,000,058 | ---- | C] () -- C:\Windows\nfsc_patch.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012-10-16 19:01:30 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\.minecraft [2012-08-10 18:52:11 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\.minecraftsl [2012-06-26 20:11:31 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\.Nitrous [2012-10-15 19:51:57 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\.techniclauncher [2012-10-15 19:34:30 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Ableton [2012-06-10 19:32:22 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\AnvSoft [2012-10-15 19:51:57 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Audacity [2012-04-07 10:05:45 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Avnex [2012-08-30 19:58:09 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Awesomium [2011-08-14 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\BitTorrent [2012-10-15 19:34:30 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\bizarre creations [2011-11-19 13:22:10 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Boilsoft [2012-10-15 19:34:31 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Canon [2011-05-24 15:13:42 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Clickteam [2012-10-15 19:51:58 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\CoSoSys [2012-08-04 20:18:15 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\crminecraft [2010-08-30 17:14:12 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\DAEMON Tools Lite [2011-10-31 19:33:30 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\DarksporeData [2012-10-15 19:34:42 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Easeware [2012-10-15 19:34:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Engelmann Media [2011-03-15 14:47:23 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\EurekaLog [2012-08-17 13:12:56 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\FileZilla [2012-10-15 19:35:00 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Flock [2012-10-15 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\foobar2000 [2012-10-15 19:35:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Gadu-Gadu 10 [2012-10-15 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\gtk-2.0 [2012-10-15 19:35:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\GZero [2012-07-09 14:15:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\HDX4 GmbH [2012-03-09 16:27:43 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Hive Cluster [2012-10-15 19:35:03 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\ImTOO [2012-10-15 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\ipla [2010-09-26 18:36:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\IVONA Reader [2010-07-01 20:49:21 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Leadertech [2010-10-06 19:06:56 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\LolClient [2012-10-15 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\MAGIX [2012-10-15 19:35:24 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\minecrfat [2012-10-15 19:35:24 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\mojosoft [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Mumble [2011-04-24 13:24:22 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Need for Speed World [2010-07-28 21:26:31 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\NetMedia Providers [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Notepad++ [2012-10-15 19:35:38 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\OpenFM [2012-10-15 19:35:40 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\OpenOffice.org [2012-10-15 19:35:40 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Opera [2011-12-06 16:02:35 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Origin [2011-11-08 20:36:39 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Pamela [2011-11-10 19:08:26 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Pamela Call Recorder [2012-10-15 19:54:06 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\PhotoFiltre 7 [2010-07-28 21:26:31 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Publish Providers [2012-05-02 12:58:27 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\RotMG.Production [2011-09-10 14:59:34 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Rovio [2012-10-15 19:35:40 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Screaming Bee [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\SendSpace [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\SFBot [2012-10-15 19:35:41 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Sony [2011-04-09 12:45:18 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\SPORE [2012-10-15 19:35:41 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\StepMania 5 [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Teeworlds [2012-10-15 19:35:42 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Thinstall [2011-04-17 10:21:47 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Tific [2012-10-15 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\TS3Client [2012-10-15 19:21:15 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Ulead Systems [2011-06-03 19:43:34 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\Unity [2011-06-22 17:37:38 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\wargaming.net [2010-08-02 11:16:49 | 000,000,000 | ---D | M] -- C:\Users\Patryk\AppData\Roaming\WB Games [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2012-03-26 12:57:10 | 000,000,000 | R--D | M](C:\Users\Patryk\Desktop\?) -- C:\Users\Patryk\Desktop\‌ [2011-08-05 11:41:12 | 000,000,000 | R--D | C](C:\Users\Patryk\Desktop\?) -- C:\Users\Patryk\Desktop\‌ [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8CE646EE < End of report >

Extras

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2012-10-17 14:36:04 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Patryk\Bluebirds\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 44,29% Memory free 7,99 Gb Paging File | 5,20 Gb Available in Paging File | 65,10% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 931,41 Gb Total Space | 247,27 Gb Free Space | 26,55% Space Free | Partition Type: NTFS Drive D: | 0,38 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive E: | 100,00 Mb Total Space | 69,21 Mb Free Space | 69,21% Space Free | Partition Type: NTFS Computer Name: PATRYK-PC | User Name: Patryk | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- Reg Error: Key error. File not found .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-3663251781-1262251747-4148551615-1001\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{05638D7C-8E3B-4988-9292-4B6980C4D440}" = lport=139 | protocol=6 | dir=in | app=system | "{15D7842C-0083-46E9-B81B-0B1BB5AE15AB}" = rport=10243 | protocol=6 | dir=out | app=system | "{17E1F2F2-B6A1-489B-AF5B-3E086DD16EF8}" = lport=6975 | protocol=17 | dir=in | name=league of legends launcher | "{295EBBDE-1107-4BCC-92FC-45BFA91B8B38}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{2C892331-C1EC-4F21-B349-97F219BF603B}" = lport=2869 | protocol=6 | dir=in | app=system | "{3A77039A-CA8C-46C5-AD03-B382A661E7DA}" = lport=10243 | protocol=6 | dir=in | app=system | "{3AB38532-4B3F-4A5C-B42E-3436E40D34DF}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3F903918-29CA-4FF6-8F6A-C1EA4BB3B59C}" = lport=138 | protocol=17 | dir=in | app=system | "{432542C8-1339-419F-8983-DE93474B3C92}" = rport=137 | protocol=17 | dir=out | app=system | "{51B87D4B-2EAF-4268-A5FD-A93F0270210C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{619B642F-0CBD-4A02-A3EC-3E1DB6DEF22C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{6221E9EA-0BF9-406E-A73B-C6328CACAB51}" = rport=445 | protocol=6 | dir=out | app=system | "{663A7018-0665-492D-B2F3-7552920DE551}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{66AD0074-BAD7-42B5-8140-1B9243CBCEAB}" = rport=138 | protocol=17 | dir=out | app=system | "{68367DE7-E8B2-4A9B-B775-CC9C93B57CE4}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | "{695E92EA-5B11-4A88-A4B7-11C1F261A227}" = lport=49238 | protocol=6 | dir=in | name=akamai netsession interface | "{77ABF978-588C-475B-8FE9-07B92A7AF0CE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{7808106B-2342-4663-A078-C1029BBCB482}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{804E0C43-3C38-4A38-BDCD-68B896B99DEE}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | "{820A2860-2855-4998-B67E-2390F2D1235B}" = lport=8394 | protocol=6 | dir=in | name=league of legends launcher | "{9815D039-9F6D-4239-8DE6-E3FAE73EA4EF}" = lport=6975 | protocol=6 | dir=in | name=league of legends launcher | "{A14FB7EA-7C0F-4B3B-BD5A-C051BB9A7E30}" = lport=8394 | protocol=17 | dir=in | name=league of legends launcher | "{A793C39B-A854-482A-A53B-7147EE308BF2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{A97A7C4D-A4FF-4645-917A-22A06E73E482}" = lport=445 | protocol=6 | dir=in | app=system | "{B89F1FE1-5096-4F7E-AFA7-A9C9ADC293E2}" = rport=139 | protocol=6 | dir=out | app=system | "{E0466A24-F448-4248-A724-4B0E24E1A3FC}" = lport=137 | protocol=17 | dir=in | app=system | "{E14349DF-7D88-4F36-BA37-10F79417F6BD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{E2F6F7C9-DD50-4988-B054-F321E2378392}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{E6F6DB54-C4AF-44D3-A587-A06359D8538E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{F7D99269-A753-4922-B139-C6E8A5FEEC1F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{015D0C8F-0B15-4E0F-B88B-6129059B6533}" = protocol=17 | dir=in | app=c:\tot games\have online\bin\haveonline.exe | "{04456A06-D703-409E-80B6-E586E40E6A68}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe | "{048F9D5E-42C1-47C8-B495-495C96786733}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs2c1f.tmp\symnrt.exe | "{04A64566-DF2E-4864-84FD-B4FEEE1BE216}" = protocol=6 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "{04DF0728-2077-4DDB-A654-329D931474C5}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe | "{055765A3-F1A5-4D5C-868A-20C616A358C7}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs8e4a.tmp\symnrt.exe | "{05F8E987-020F-419D-87C3-5D6C5264D8E0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{074EAB03-259C-4EE5-A291-F8660E8A14BF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{08A53F3C-4ED9-45E3-A645-BE0AAB447BEE}" = protocol=6 | dir=in | app=c:\program files (x86)\gamespy arcade\aphex.exe | "{08DDFF7B-C468-40D2-ADCE-3B308157BC91}" = protocol=6 | dir=in | app=c:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe | "{0945400B-2B0E-47C9-A187-7AE4EF73CB04}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blpur.exe | "{09A3545C-F517-433F-B66F-DFE9E31FD5AA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\post apocalyptic mayhem\pammaingame.exe | "{0A087CC3-CC51-466E-80BA-FB8CD6AE0471}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{0B0B1CAF-8851-4326-B303-76ED0528D350}" = protocol=17 | dir=in | app=c:\program files (x86)\disney interactive studios\tron evolution\binaries\win32live\gridgame.exe | "{0C9A88B6-521F-456F-91D7-2DB05D9E6FDA}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\minink\nk.exe | "{0CD8B204-54E6-416C-AB8B-26CF94E5DA5E}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\launcher.exe | "{13DBF3C7-AF9D-4F57-B5A1-8E36253D41BF}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{196EC324-E03C-4FB5-84E9-A98159FF71E4}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\launcher.exe | "{1A303805-7597-42EE-9634-5B2F025B132A}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\darkspore\darksporebin\darkspore.exe | "{1CBE3C04-2145-4D79-BB09-E47CBC5AD7C7}" = protocol=17 | dir=in | app=c:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe | "{1DAD9533-157B-4CA8-A874-0E4F050A44FF}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{1F09D1D7-AD32-4CC2-8737-61C3CFECE7B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{1F2C9AC8-8BFD-4C64-802D-0C8E8AE08D51}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs9cf9.tmp\symnrt.exe | "{1F89A85E-1E93-403C-AF95-4C767537E5D1}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs2c1f.tmp\symnrt.exe | "{201A310A-680C-497E-8F0F-43BD9B9184CE}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{202F9159-9E8F-40B0-8C45-E660BAAEEA29}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\realm of the mad god\realm of the mad god.exe | "{2111E3EF-FA1A-42C8-92B6-07E9792EBC9A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\launcher.exe | "{219CB19D-B674-4494-A28C-8085DFFDC4A7}" = protocol=17 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "{235D3728-8DF9-4426-AC7A-D11F092C57A3}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe | "{23980C80-0626-40CB-A268-0E2D921A9EC9}" = protocol=17 | dir=in | app=c:\lolek\backgrounddownloader.exe | "{24A25C02-FA39-4649-89A5-67890FB5199B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\launchpad.exe | "{24BC717A-B810-4870-A0F6-E4561383775B}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\prtw.exe | "{25C898FF-DD7D-47EA-8D7B-1CEA5658A215}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\ezvpnsvc.exe | "{264D05F5-596D-4016-8A81-12E209DBB805}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{2856BCD2-A2B1-4CC5-B9B0-CAF80A63418A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\q.u.b.e. demo\binaries\win32\qube_demo.exe | "{29694EAB-7443-4D49-B668-1B68313359BC}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{2C9163BC-F1DA-4A3C-9524-251156D5C996}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{2CDA9FE9-16CB-4FAA-9FD7-1ECDC4FF268D}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{2F358492-5F67-4F85-BC16-FD2717C79BAE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{30D123D6-A906-48CC-811C-3BF83472B461}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe | "{3104FD36-44A1-4248-8818-D5E0A46C0820}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{31A4AFE1-8220-4509-8F5D-00C0E8CAF73F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe | "{3241C10A-B017-490E-B0D4-F0FE04AB00E8}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\minink\nk.exe | "{33C2D29B-B70F-4E64-AADF-576BD9ECBC43}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe | "{345D7527-3DCC-4828-AC50-CA952CECADC1}" = protocol=6 | dir=in | app=c:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe | "{3A840AAB-1063-4A08-BC0E-55E8F1B96FB7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe | "{3B979942-3A43-4EFD-A3C2-E921E5BCF9BD}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\need for speed the run\need for speed the run.exe | "{3CD8EDCA-0B9D-4761-B7ED-DB232F1E166A}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe | "{3DC40B86-FB4D-4AF3-A662-28D776019EE6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{3F175460-9F05-4401-940F-5603EE8F8AC1}" = protocol=6 | dir=in | app=c:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe | "{3F4422BA-1E62-4EBD-9CE6-8DA96AA57EEF}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{4140D5D5-4804-4D26-837D-FFEA70E345D9}" = protocol=6 | dir=in | app=c:\program files (x86)\disney interactive studios\split second\splitsecond.exe | "{4489C0BF-D363-44D9-9D30-CDDAC0DDC246}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blur.exe | "{46399D8E-6838-44D2-A58B-899E9F576F7D}" = protocol=6 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | "{47AE4F53-0163-4F2A-9469-2B04F43D73EE}" = protocol=6 | dir=in | app=c:\lolek\backgrounddownloader.exe | "{47F1F5DB-F5A8-41DB-94F9-5E1483A433F6}" = protocol=6 | dir=in | app=c:\tot games\have online\bin\haveonline.exe | "{4AA3E50D-184B-4384-9081-2EEB1BD037FE}" = dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe | "{50A4C33A-59E4-4DDF-8583-5A75B21B0587}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\uberlauncher.exe | "{50DD0F73-62A7-47D5-925F-5708E03E9204}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\post apocalyptic mayhem\pammaingame.exe | "{50FB56D9-11B8-4D33-B1EB-EBE0AA0D182E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\bin\pbclient.exe | "{51C59B82-8184-4C60-8491-5E301779AEB4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{5606200F-601F-4E09-9B67-E4C43835481A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{5673615E-F482-4A17-B243-D2E63E67D635}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe | "{56FFB6D6-4522-4D52-BAFC-BF7A3403E953}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe | "{57D70710-2DBF-4340-83D7-7D8F30964F61}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blacklightretribution\blacklight retribution.exe | "{58B8844C-5675-4677-8C19-994FB7A9DBF6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{5AD14B72-E159-47EA-B5B9-C5681BBB64DC}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\akamai\netsession_win.exe | "{5B012941-E322-4236-AA33-97DF777647AC}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\crdphservice.exe | "{5B34A669-C42B-4A4E-BF9B-A1434AF9131D}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe | "{5E4C314F-80F9-4CB0-91A1-2213140E030A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{614D4CBA-013F-4DAC-8C0B-191A4C2C11EF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe | "{6256531A-666B-4F92-9C34-1C32DE35266E}" = protocol=6 | dir=in | app=c:\lolek\launcher.exe | "{632CDA26-A117-4B6F-866C-150F06A117AC}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{65410DF5-BB92-4ABE-9E21-CE1D89CD0F65}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe | "{683E0F18-E242-4C01-B083-BB6AA41EFE04}" = protocol=17 | dir=in | app=c:\users\patryk\desktop\xd\serwer_widoczny\project1.exe | "{68D25021-1E9E-44E4-A5DF-777068248BEE}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\shrek forever(tm) gra\shrekforeverafter.exe | "{68FE7B96-AAFE-4E14-ACCA-3674F5991665}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe | "{69881745-C813-4C94-A396-E86BB54682C0}" = protocol=6 | dir=in | app=c:\program files (x86)\brawlbusters(en)cbt\bin\pbclient.exe | "{6E1A40BD-F6D7-4E14-8FC9-37CBFF088407}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe | "{6F3C3B64-83A9-41EB-B3C0-6611FE24F2E6}" = protocol=17 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | "{6FF9C995-E1F4-4040-9840-53991C6E9030}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7095AC68-BE07-4B52-9E13-416132DE9870}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{71C67085-88BF-42E8-8D9D-1925BF999402}" = protocol=6 | dir=in | app=c:\lolek\launcher.patch.exe | "{72E9F9D1-5DC3-449D-A99B-1555E63A2529}" = protocol=17 | dir=in | app=c:\program files (x86)\gamespy arcade\aphex.exe | "{73E891C0-7BCC-4097-9214-70AED07E573B}" = protocol=17 | dir=in | app=c:\program files (x86)\brawlbusters(en)cbt\bin\pblauncher.exe | "{74E86EBA-7DE1-40EF-A221-86ABF2C62544}" = protocol=6 | dir=in | app=c:\program files (x86)\disney interactive studios\tron evolution\binaries\win32live\gridgamelauncher.exe | "{7B83DD35-445F-4E24-8CC6-B52E86004BBF}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\shrek forever(tm) gra\shrekforeverafter.exe | "{7B9DFEE8-D533-4307-9406-E9E32FCA26EE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | "{7D5B82E6-EA07-4D17-97B8-E15B7FA7B198}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7DF687F5-6863-42B5-AE33-B86BE1781EAA}" = protocol=6 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | "{7F29676E-5902-44E2-8B51-E8CB84B8BA5B}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs9cf9.tmp\symnrt.exe | "{7FD50420-BD9E-444B-9689-D1F13E33378A}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe | "{819591F7-6893-4FA8-9F43-08C564336A50}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\bin\pbclient.exe | "{819AC7D9-ECF8-4E9B-A121-7C8B73DCDD1D}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs7ae9.tmp\symnrt.exe | "{85146E32-131F-49B7-A534-03D13B60F5F2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe | "{88AF6BBB-0357-4CE6-9480-80B973812330}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\need for speed the run\need for speed the run.exe | "{8A4B8013-8605-4FCD-A5AE-148DA5F5E793}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{8BA7F4C6-51CB-47AF-A45A-7868958F4CA3}" = protocol=17 | dir=in | app=c:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe | "{8D7B6C6D-6582-4149-B5F4-4DADBE0A246B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{8F601A03-5977-4702-8DAA-62B38C66EF9F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\bin\pblauncher.exe | "{8FBB6AB6-8798-41E6-9D65-0E745D8A7E6B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{9015BE23-B3ED-4E7F-977B-8596DA79252D}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\minink\nkapp.exe | "{906750A4-8AD5-49E4-982F-229529DDEABC}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\james cameron's avatar - the game\bin\avatar.exe | "{9165B644-009F-4ABC-BE7E-D5AE22C2DB88}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{91A7A493-60C5-4DE6-A3F5-ECAEFF98907B}" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | "{9430F119-538A-4643-B691-92AC70D78E63}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{96D4E9C5-C16A-41A6-B736-F054B8051932}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{9909EA2B-6DE6-4066-A01E-43EC47662630}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\unite.exe | "{9B29D0F9-94E5-4A1B-836E-90DA3F1F1003}" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\dirt 3\dirt3_game.exe | "{9B2F7616-A505-4442-A80B-22597EE2F4C2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\hirezbridge.exe | "{9CCC7B9D-FEE2-4664-AE3A-793CDC6F2EB6}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\james cameron's avatar - the game\bin\avatarlauncher.exe | "{9E6C519D-46EF-4A6F-BA5D-1CBAE0082DF3}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\james cameron's avatar - the game\bin\avatarlauncher.exe | "{9FED2DEF-0140-4B60-9902-684EAD917D6F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\realm of the mad god\realm of the mad god.exe | "{A09E9FFA-44A7-43FB-8B0C-E14FD4AB976C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{A0B7CA4B-6344-468F-A79E-CB0178D8F9B8}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blpur.exe | "{A3A001F8-30A6-460B-A194-4C4A34416EE5}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\crdphservice.exe | "{A4621DA2-B6AC-455E-92D3-204EB5D9E8A4}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs8e4a.tmp\symnrt.exe | "{A67A3869-C112-49BA-B8E3-0BCBC3F39225}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe | "{AD529A13-B750-4B82-A5E7-E82049F46B98}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\unitecam.exe | "{ADCAD9CA-C804-40DD-BEFC-34B6719E428C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe | "{ADCAFEDB-80B5-4188-9881-D832CC7D0EC6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{AE432A79-E876-431A-9EEB-ED602499A7EA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\launcher.exe | "{AE9A2DFA-1161-426D-B1F3-3DC7CB3C6BA9}" = protocol=17 | dir=in | app=c:\program files (x86)\xfire\xfire.exe | "{AEB7C38E-5260-49DA-9B0A-120F1AFD4889}" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\dirt 3\dirt3_game.exe | "{B072F678-F834-4133-9135-C84FD8AA75C9}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{B174CDBA-91ED-4EE5-A7DC-42C15152476A}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe | "{B1FA5BB8-6621-4095-9F8C-615093C97DFD}" = dir=in | app=c:\brickforce\bflauncher.exe | "{B83A5ECC-AB03-43B0-B6ED-75FFD456A955}" = protocol=17 | dir=in | app=c:\program files (x86)\disney interactive studios\split second\splitsecond.exe | "{B840BCAB-94C6-4050-A0BA-87ECC0010C35}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{B8D28665-DBB8-435C-A8F5-9711D5EFB21E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\uberlauncher.exe | "{BAEA7777-5BA6-4C09-B529-2E94F4AE9237}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\brawl busters\bin\pblauncher.exe | "{BC0DD4AB-AC00-458B-AF90-ACC190259BCE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{BCE2FCB8-4ECE-43E9-8E67-A68DDCB75A0D}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "{BD22D27D-E102-4173-B219-D2EC6D98CE46}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blacklightretribution\blacklight retribution.exe | "{BD5F49C9-F41D-441A-B428-CB4C719960B7}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\crdphappshare.exe | "{BDCCF8AD-ADCB-44EA-8DF7-2D60BFC56BB2}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\prtw.exe | "{C06B0359-FC13-4D27-AFE8-A7CB74C9C7B0}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "{C4ACDAA3-B4F4-4154-9034-F0FDDCF76FCF}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\crdphappshare.exe | "{C4EC1885-5809-417E-88CC-758280AA14FF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\q.u.b.e. demo\binaries\win32\qube_demo.exe | "{C638B46A-7030-4EB2-9B0D-21F9DF589FE2}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blur.exe | "{C94AE3E6-38DD-4253-9FAF-211BC9051B3D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | "{CC36DB3D-8320-4FAE-848D-A234F7C99EF9}" = protocol=17 | dir=in | app=c:\program files (x86)\disney interactive studios\tron evolution\binaries\win32live\gridgamelauncher.exe | "{CCEF9618-284B-49ED-BAF2-943758372603}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{CCFB807A-7B15-4513-90C4-5B73D6EB12A5}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe | "{CE15DCD8-B706-4E91-A03E-1684EA614598}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\minink\nkapp.exe | "{CE99AB04-2A28-4029-9083-67CDEC95B663}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe | "{CF2539B3-52D3-4818-A1D9-3782A878A1E6}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "{CF5B3110-2FCA-44BD-9A50-3F43EE106BB8}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe | "{CF65D562-9F17-4413-86A7-BFDDA3ACB11F}" = protocol=17 | dir=in | app=c:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe | "{D0B11AF9-D51E-4010-9EC9-7064B5249D1E}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\darkspore\darksporebin\darkspore.exe | "{D0BF3FD3-DCF0-426F-9C37-1B03731AEA5B}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "{D2527ED9-8848-4D01-9E45-8DC36B9F51C1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\launchpad.exe | "{D4B752CA-7892-45F7-80E4-144E3A331328}" = protocol=6 | dir=in | app=c:\users\patryk\desktop\xd\serwer_widoczny\project1.exe | "{D4FE32E9-4359-40A9-B959-9DA579D88210}" = protocol=17 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | "{D6A0973A-28C1-4BD1-8F7F-F9BBFE6BE438}" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\akamai\netsession_win.exe | "{D7278BAF-50DA-4B68-9EC0-D18CA953C758}" = protocol=17 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "{D838AC5B-0D2D-4235-B1DF-AF6A5A26D308}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe | "{DC078606-4572-498D-8994-F204A395EE66}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | "{DFA67666-D9D5-4D82-999E-995128263D15}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\unitecam.exe | "{DFBE70AF-5150-4EDA-8ECA-617D4961234D}" = protocol=17 | dir=in | app=c:\lolek\launcher.patch.exe | "{DFC4CECB-9D55-4A55-A59D-EFEB59B4F597}" = protocol=6 | dir=in | app=c:\program files (x86)\xfire\xfire.exe | "{DFF8ADED-397C-4626-A9B6-4984D05D4030}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe | "{E0568FA6-252D-4420-BE49-04DDAFAB68BC}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe | "{E08A3FC9-17D1-4C0A-A2BD-8852CF72B56C}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe | "{E361D581-7D9D-4AB2-A3DA-07E19DAAD6D9}" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | "{E3E6A277-6C38-492C-B2E3-4962F53CF3FA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | "{E7E2F252-5E0E-4111-9617-788116BD158F}" = protocol=17 | dir=in | app=c:\program files\comodo\unite\ezvpnsvc.exe | "{E9F1CE33-AC8E-4B3E-A501-714C1FAC0228}" = protocol=6 | dir=in | app=c:\program files (x86)\disney interactive studios\tron evolution\binaries\win32live\gridgame.exe | "{EAA50492-9416-4D06-B7DD-1B50109045AA}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{EB8EE92F-7069-450C-89D8-6381AB8EFD49}" = protocol=6 | dir=out | app=system | "{EBA9DE8B-2F7A-4765-A3D4-1F12723F523C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{EC3519DA-4613-4D0E-AB70-23F8FDAE2109}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\james cameron's avatar - the game\bin\avatar.exe | "{ED92DAE3-4DE1-414E-B872-FA5BC094979F}" = protocol=17 | dir=in | app=c:\program files (x86)\brawlbusters(en)cbt\bin\pbclient.exe | "{EFADA479-6B9C-48B7-B392-D68C4586AECA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{F0B7020F-8A1A-4B94-B895-F36778AFF974}" = protocol=6 | dir=in | app=c:\program files (x86)\brawlbusters(en)cbt\bin\pblauncher.exe | "{F0FA2E28-ED5E-444D-B714-456F52AC7D92}" = dir=in | app=c:\brickforce\brickforce.exe | "{F1B4DD6E-522A-4DB8-ACDC-003F775CB355}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{F2A45725-B34F-43ED-A62E-266C68A1289B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F311208B-6CCB-4E13-A8C9-D77CE407A387}" = protocol=17 | dir=in | app=c:\lolek\launcher.exe | "{F64CE63C-F481-48AC-BE68-097EE1E214D4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\hirezbridge.exe | "{F700452C-7C5B-40BA-B61F-1242E5F6FE66}" = protocol=6 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "{F79778EF-C56B-476C-8605-F7AE987015D6}" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\7zs7ae9.tmp\symnrt.exe | "{F87FE09F-FF98-404B-824E-2128722AA0A1}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{FA5D7E9D-DD45-4C44-A9F4-A9C43064916E}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{FA67F6B7-65BE-4D84-8EE7-DA0413E248AA}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe | "{FC63729C-5C39-467B-A608-C822630B639D}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{FEC02A6E-6031-4050-9D47-E5C3C8ED32E3}" = protocol=6 | dir=in | app=c:\program files\comodo\unite\unite.exe | "TCP Query User{0D25BF05-3B45-47AF-8C02-D6D5A324CFE7}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe | "TCP Query User{12E16EC5-E464-4595-AC27-A44780C55CAF}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | "TCP Query User{17B00930-92F0-47B7-AFBE-A4E1D5C7D687}C:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe | "TCP Query User{24BC4274-CA1A-4386-8440-8A6E5B4BDEBC}C:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe | "TCP Query User{3B2329E9-CB81-4D7F-A42A-425212D65B75}C:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe | "TCP Query User{4B2188F2-70C9-46D4-8D9C-2F040AE76877}C:\program files (x86)\atari\tdu2\uplauncher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\atari\tdu2\uplauncher.exe | "TCP Query User{4D751D80-3589-4DF0-8E8F-0D084E80D16C}C:\windows.old\program files (x86)\tmunitedforever\tmforever.exe" = protocol=6 | dir=in | app=c:\windows.old\program files (x86)\tmunitedforever\tmforever.exe | "TCP Query User{50D8D2B5-7AA1-4743-A30A-05A0CBE7D7CA}C:\program files (x86)\logitech\vid hd\vid.exe" = protocol=6 | dir=in | app=c:\program files (x86)\logitech\vid hd\vid.exe | "TCP Query User{51287C0E-D5CF-4308-B63D-E783B271914E}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "TCP Query User{536FFE73-7C47-467A-8B4A-C5086E360608}C:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe | "TCP Query User{53BF4717-F66B-4F1A-A15F-2F8B9438B0A5}C:\program files (x86)\atari\tdu2\testdrive2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\atari\tdu2\testdrive2.exe | "TCP Query User{577C1DD4-23E9-4A1A-BCA6-69ADB51944E4}C:\lolek\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\lolek\backgrounddownloader.exe | "TCP Query User{652743BF-60D6-4080-A5DA-28F9ACB49947}C:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe | "TCP Query User{6691ACA4-2227-419A-B854-485E33D8AE18}C:\users\patryk\appdata\local\temp\rar$ex88.192\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex88.192\serwer_widoczny\project1.exe | "TCP Query User{70C909EC-6F0F-4B1C-9E35-D6D646787BAE}C:\program files (x86)\bioware\star wars - the old republic\launcher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "TCP Query User{752BEA2F-5FCE-42D0-9BA6-82A8949FA3F3}C:\program files (x86)\trackmania united\tmunited.exe" = protocol=6 | dir=in | app=c:\program files (x86)\trackmania united\tmunited.exe | "TCP Query User{8555328C-B760-4A21-B903-6FCA4A7D5882}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | "TCP Query User{8E5C956E-EB32-4B95-A8D5-459BB5D14B0B}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{913EFCFE-20F2-4E36-92C8-87247F8A826B}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "TCP Query User{91D56F9E-62F2-4D60-8965-45B2E50C0050}C:\program files (x86)\activision\blur(tm)\blpur.exe" = protocol=6 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blpur.exe | "TCP Query User{9AF6C741-5F90-4419-B7DA-1BB05B2922B2}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe | "TCP Query User{A1DD1908-01EC-4660-8D23-E39717638A0A}C:\program files (x86)\wiedźmin 2\bin\witcher2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wiedźmin 2\bin\witcher2.exe | "TCP Query User{A51A77F7-9158-40C2-86E7-C97238F4DBEB}C:\users\patryk\desktop\xd\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\desktop\xd\serwer_widoczny\project1.exe | "TCP Query User{BE10A18E-5B52-4C37-A7C8-0B22A0F8F225}C:\program files (x86)\tmunitedforever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tmunitedforever\tmforever.exe | "TCP Query User{C8B8B643-A520-41E8-8BDE-ECAA809157E3}C:\program files (x86)\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files (x86)\xfire\xfire.exe | "TCP Query User{E0B0960E-9122-4A03-8291-909B2D38EB01}C:\users\patryk\appdata\local\temp\rar$ex00.896\serwer_widoczny\project1.exe" = protocol=6 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex00.896\serwer_widoczny\project1.exe | "UDP Query User{00CCAB04-D2CC-4AB5-87CC-B67EF34B8E95}C:\program files (x86)\activision\blur(tm)\blpur.exe" = protocol=17 | dir=in | app=c:\program files (x86)\activision\blur(tm)\blpur.exe | "UDP Query User{0ADD5DE1-A6CA-4A29-B432-E53D8059EA23}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{0B2BCCAC-3937-442C-AEA7-12615D3BE6C1}C:\program files (x86)\atari\tdu2\testdrive2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\atari\tdu2\testdrive2.exe | "UDP Query User{0FDCD379-B546-486B-9BE0-7CA6F3288269}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "UDP Query User{35642131-59F7-46EF-93D0-D697D4DA94D6}C:\program files (x86)\atari\tdu2\uplauncher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\atari\tdu2\uplauncher.exe | "UDP Query User{526834D5-8A1B-4CE0-BB9F-9D3BEFB4CA85}C:\users\patryk\desktop\xd\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\desktop\xd\serwer_widoczny\project1.exe | "UDP Query User{55035628-53EE-479E-9BB3-1FD27C52638D}C:\program files (x86)\wiedźmin 2\bin\witcher2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wiedźmin 2\bin\witcher2.exe | "UDP Query User{5573124D-1723-48C7-93C2-B9AD83553C05}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe | "UDP Query User{5FC25943-9956-49DE-9B53-689D4E9217B7}C:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\desktop\gierki\xd\pinkie\serwer_widoczny\project1.exe | "UDP Query User{6480692C-16FD-459A-B7E6-EEAEC4BC6B1E}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{7147FD7F-448B-424F-B0F1-FF2FDA4257D5}C:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\desktop\xd\pinkie\serwer_widoczny\project1.exe | "UDP Query User{730CD579-8C31-4E70-9E53-C9979D352F94}C:\program files (x86)\tmunitedforever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tmunitedforever\tmforever.exe | "UDP Query User{733714A3-64BB-4705-A28E-390D28E8FE2D}C:\lolek\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\lolek\backgrounddownloader.exe | "UDP Query User{74408409-379C-4754-B3AB-BB330F8194DC}C:\program files (x86)\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files (x86)\xfire\xfire.exe | "UDP Query User{96195B93-B10D-479D-B8B1-2E0D5B218FE0}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | "UDP Query User{965FE06B-2979-45B6-87FF-D18657D2417E}C:\users\patryk\appdata\local\temp\rar$ex88.192\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex88.192\serwer_widoczny\project1.exe | "UDP Query User{97CE4064-FB3C-4C28-BF8E-468CDE4E9D72}C:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\need for speed(tm) hot pursuit\nfs11.exe | "UDP Query User{9933DC36-8CE3-44B3-9407-FA7498C99AF8}C:\windows.old\program files (x86)\tmunitedforever\tmforever.exe" = protocol=17 | dir=in | app=c:\windows.old\program files (x86)\tmunitedforever\tmforever.exe | "UDP Query User{A2409A38-5971-42FF-9B72-9CFC31CFA90D}C:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\icreeper92\team fortress 2\hl2.exe | "UDP Query User{AB1E123F-D3F8-48BD-98DB-46AC2598049D}C:\program files (x86)\logitech\vid hd\vid.exe" = protocol=17 | dir=in | app=c:\program files (x86)\logitech\vid hd\vid.exe | "UDP Query User{AFCDB5AD-A87A-4790-B0B9-F4B4D267EF7D}C:\program files (x86)\trackmania united\tmunited.exe" = protocol=17 | dir=in | app=c:\program files (x86)\trackmania united\tmunited.exe | "UDP Query User{CA42ECBD-5E89-45FB-9A61-B78FDE3A940D}C:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex13.192\serwer_widoczny\project1.exe | "UDP Query User{DEBF7206-1E3C-4646-B65B-0C3C3C8B9AC1}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | "UDP Query User{E71A7B0A-BE59-45CB-A184-D133A3587E50}C:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea sports\fifa 11 demo\game\fifa.exe | "UDP Query User{F91442DF-C550-41B5-A0AC-6251659AC84C}C:\program files (x86)\bioware\star wars - the old republic\launcher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bioware\star wars - the old republic\launcher.exe | "UDP Query User{FC7F1A1A-7232-464C-A119-B455BE8E18D5}C:\users\patryk\appdata\local\temp\rar$ex00.896\serwer_widoczny\project1.exe" = protocol=17 | dir=in | app=c:\users\patryk\appdata\local\temp\rar$ex00.896\serwer_widoczny\project1.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0BD776F3-057D-4C11-020C-4FA9B13D04F9}" = AMD Catalyst Install Manager "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP990_series" = Canon MP990 series MP Drivers "{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects "{1444D2EE-C7AD-44A8-844F-2634B49353D1}" = Logitech Gaming Software 5.10 "{235B7B98-EAC3-4953-AE2C-EABCE1CD65C9}_is1" = GBoost "{26A24AE4-039D-4CA4-87B4-2F86417007FF}" = Java 7 Update 7 (64-bit) "{463FB535-67FB-17C9-6FD6-164BC60462F6}" = ccc-utility64 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503640E5-B2ED-3173-D109-D4D03153471A}" = AMD Drag and Drop Transcoding "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{64A3A4F4-B792-11D6-A78A-00B0D0170070}" = Java SE Development Kit 7 Update 7 (64-bit) "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant "{A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}" = Logitech GamePanel Software 3.06.109 "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{A6FE29A0-622B-2763-88AA-D1E084F77CD9}" = AMD Media Foundation Decoders "{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{D9C50188-12D5-4D3E-8F00-682346C2AA5F}" = Microsoft Xbox 360 Accessories 1.2 "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 "{F527D3F1-57DF-43B5-A570-ADED61CE8C06}" = COMODO Unite "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "DriverEasy_is1" = DriverEasy 2.6.1 "ffdshow64_is1" = ffdshow x64 v1.1.3529 [2010-08-11] "Folder Guard" = Folder Guard "HitmanPro36" = HitmanPro 3.6 "lvdrivers_12.10" = Pakiet sterowników: Logitech Webcam Software "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "TeamSpeak 3 Client" = TeamSpeak 3 Client "UDK-2053f506-3905-4387-8dbb-00b7d2176f06" = My Game Long Name "WinRAR archiver" = WinRAR 4.01 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0141D498-16DA-4221-A529-1D7A64BE8B05}" = OpenOffice.org 3.3 "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video "{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM) "{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1" = BusinessCards MX "{0EDC9BA0-016E-406a-86DA-04FC1BE00C21}" = Need for Speed™ The Run "{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration "{1111706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0 "{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi "{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main "{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM) "{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter "{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser "{1966CFDC-5011-4480-B309-7FD59B91D10F}" = LEGO® Harry Potter™: Years 1-4 DEMO "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 "{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1 "{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks v.0.6.4 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10 "{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin "{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback "{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10 "{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon "{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7 "{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10 "{28526951-55EF-4901-A0CA-B9AC966D1DD1}" = Split/Second "{2AEA17BA-FAB3-49D2-BB85-0669D14DC9BC}_is1" = Rainbow Folders "{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding "{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver "{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM) "{32A3A4F4-B792-11D6-A78A-00B0D0170070}" = Java SE Development Kit 7 Update 7 "{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM) "{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10 "{347151C4-7F16-B275-8865-CC6B64056D3F}" = Catalyst Control Center Graphics Previews Common "{359FCAA7-B544-4147-AE3B-8C8A526E2427}" = Sony Image Data Suite "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver "{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic "{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service "{3D374523-CFDE-461A-827E-2A102E2AB365}" = Star Wars Battlefront II "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT "{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX "{3FF7A41D-BDB7-4EF1-BA4D-19123FD653D3}_is1" = Aphelion Online "{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3 "{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR "{47F6627C-61DD-4191-91C3-2E4077EE7B1F}" = MAGIX Music Maker 17 Premium Download Version "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace "{4DFF1415-4C29-44A8-BFD4-2BCE249C4991}" = SpPhones "{4EB7D3E5-A0F8-4564-8F6C-22E967B596BA}" = UFO Afterlight "{4EB8C119-87E2-45AE-8797-605FD3056C42}" = MAGIX Screenshare "{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM) "{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM) "{560F47F7-EB23-44B1-AAFC-667F1CD8FE5C}" = Sp5 "{57CCB3EB-8BBC-4067-998C-9E6CCB8AA882}_is1" = Terraria wersja 1.0.1 "{589A63D3-89E1-4D9B-8DBC-6039BB27289E}" = Activision(R) "{59E04C6D-9EE0-4F70-9358-62108888C719}" = 2010 DR PEPPER EA GAMES EVERY BOTTLE/CUP WINS PROMOTION "{5A2E9EA4-0696-494A-84E2-5D0CE35BC6FD}" = MAGIX Speed burnR (MSI) "{5AC11070-A1CB-11E0-A0DC-0013D3D69929}" = Vegas Pro 10.0 "{5DF7AA5E-A1CB-11E0-A7D6-0013D3D69929}" = MSVCRT Redists "{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE "{5E7A8F05-013C-44FD-B450-5434CA581098}_is1" = MicroVolts "{6037B8AD-7D5B-4D50-9BCA-A586C44EEF34}" = Ace of Spades "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{6211B229-2D0B-4653-9338-3A2FBF2C4A9E}" = MorphVOX Pro "{62AEBBB6-8314-7902-B3DA-1690F97DFA74}" = CCC Help English "{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM) "{6663554C-2FC7-4CDC-809D-1BCD59189853}_is1" = Trine "{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10 "{6A782F9A-57EB-48C8-91CD-D017A376F372}" = Split/Second Demo "{6C3959C6-943E-44B3-BAAD-570B04B134E5}" = SpCommon "{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer "{6DD1D809-EE6F-49EE-B3A4-D406C75AEC49}" = Kodu Game Lab "{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10 "{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery "{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{75773FB3-929A-4B08-A411-04A075071E10}" = Worms Forts - Oblężenie "{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM) "{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10 "{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World "{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime "{7E19B002-4CA3-4C9F-BA92-91D101B97219}" = James Cameron's AVATAR(tm): THE GAME "{7F8B6D39-197E-4FD1-A240-3E0A4D62A0C4}" = DesignPro 5 "{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit "{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free "{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software "{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial "{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0015-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-001F-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{1D751709-BA6C-49E2-844B-4F4F20F410C9}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0415-1000-0000000FF1CE}_Office14.PROPLUSR_{0844B6E1-0A6F-4D81-8BCF-48F883F521FE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{6606F321-8216-466E-981E-B75A14C46894}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{6AF8887A-72F7-4FA0-ABE4-396172B64550}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90877318-0BD0-4BDE-BFC0-C4BB12DAC86A}_is1" = Rappelz_PL "{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends "{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM) "{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10 "{979FCA90-1FA4-482F-0001-393419DB8F1B}" = MyTube HD 4.0 "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10 "{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box "{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM) "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9CCB3527-C033-415C-88B6-27173B5E3592}" = Tron: Evolution "{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin "{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™ "{A2023936-7D17-417D-8E8C-BD0062827D7B}" = Star Wars Battlefront II PC Server "{A4A14B15-F25D-44F8-8483-291C1DF7C548}_is1" = WAV MP3 Converter v4.2 build 1259 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AB0DBC9A-422A-4888-A8E5-A32EC1779E68}_is1" = Sunrise Seven 1.1.54 "{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.1 "{AFD834CA-4579-49DF-9CF0-EA58822A7C2E}_is1" = Battlefront Extreme 2.2 "{B1AAE4BF-C98E-467E-94C7-4E1F51DD86E0}" = Darkspore™ "{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth "{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi "{B910DD1A-49B1-4068-9C08-E3C3AEC0C30A}" = Keyboard & Mouse Driver "{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}" = Pivot Stickfigure Animator "{BFC50240-10F5-4B89-8B61-BA209A1050E5}" = Alcor Micro USB Card Reader "{C01AE05C-3C8C-75B3-C9F0-1B525DD3697C}" = Catalyst Control Center InstallProxy "{C07F8D75-7A8D-400E-A8F9-A3F396B49BB1}" = SPORE™ — śmieszne i straszne części stworów "{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}" = Camtasia Studio 7 "{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM) "{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM) "{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10 "{C72AB84A-4F9E-4D80-8243-C9547773BE73}_is1" = Boilsoft Video Cutter 1.23 "{CE6217F3-6072-40E2-9157-A4695C334F8E}" = G Data TotalProtection 2013 "{D1725D54-279A-40C5-A70D-23C1785DB920}_is1" = AoA Audio Extractor "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game "{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software "{D6D62F1D-E3D6-E982-48B4-A20663B1FB7D}" = HydraVision "{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = OSCAR Editor "{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM) "{DC158DF7-6B36-4C6F-BC91-109014297994}" = FIFA 11 Demo "{DFAE9340-E8BB-4433-9A08-C8334DAFE1B9}" = Star Wars Republic Commando "{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10 "{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10 "{E415C943-37E5-473F-8BAE-043C56734124}" = Sp5TTInt "{E8C37E27-5205-4C8A-BECB-B00533045AAE}" = SHIFT 2 UNLEASHED™ "{ED8EF3C2-FA5B-4A1E-950D-5A0227161F97}" = ArcSoft PhotoStudio 6 "{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10 "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker "{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}" = Wiedźmin 2 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable "{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10 "{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM) "{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic "{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM) "{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10 "{F865B0B5-0D43-2704-0B22-35C5F721374B}" = Catalyst Control Center "{F86B5FF0-E0C0-41AA-9FD3-5E9090FED323}" = Mumble 1.2.3 "{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10 "{FD27D456-ED8A-4027-A1E4-BBF95FAF4799}" = Easy Driver Pro "{FD4B33E1-24AE-4535-AA7B-162B30FB57CD}" = Sp5Intl "{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "4Musics CDA to MP3 Converter 4.5_is1" = 4Musics CDA to MP3 Converter 4.5 "4StoryPL_is1" = 4Story 3.3 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "AGSAdventureDev312SP1_is1" = Adventure Game Studio 3.1.2 SP1 "Akamai" = Akamai NetSession Interface Service "Android SDK Tools" = Android SDK Tools "Any Video Converter_is1" = Any Video Converter 3.3.9 "AQQ" = WapSter AQQ "Arcade Classic Pack_is1" = Arcade Classic Pack 5.10 "Ashampoo WinOptimizer 9_is1" = Ashampoo WinOptimizer 9 v.9.04.31 "Ashampoo_PO Toolbar" = Ashampoo PO Toolbar "Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.12 (Unicode) "Battle Arena_is1" = Battle Arena 2.0 "BrawlBusters(EN)CBT" = BrawlBusters(EN)CBT "BrickForce" = BrickForce 1.9.87 "BurnAware Free_is1" = BurnAware Free 3.1.6 "Campcraft-ZombiCraft" = Campcraft-ZombiCraft 1.6 "Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data" = Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data "Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data" = Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data "CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program "CanonMyPrinter" = Canon Utilities My Printer "CanonSolutionMenu" = Canon Utilities Solution Menu "CDex" = CDex extraction audio "Cheat Engine 5.6_is1" = Cheat Engine 5.6 "Cheat Engine 6.0_is1" = Cheat Engine 6.0 "Chicken Invaders Trilogy_is1" = Chicken Invaders Trilogy (Polski) "Clownfish" = Clownfish for Skype "CodeStuff Starter" = CodeStuff Starter "CraftBukkit" = CraftBukkit "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "Deluxe Ski Jump 3_is1" = Deluxe Ski Jump 3 v1.3.1 Komputer ŚWIAT Extra 4/2005 Cover CD E "DvDrum 2 (Beta 4)" = DvDrum 2 (Beta 4) "Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX "Easy-PhotoPrint Pro" = Canon Utilities Easy-PhotoPrint Pro "Easy-WebPrint EX" = Canon Easy-WebPrint EX "FileZilla Server" = FileZilla Server "foobar2000" = foobar2000 v1.1.9 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "Game Booster_is1" = Game Booster 3 "GameSpy Arcade" = GameSpy Arcade "GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3 "Graffiti Studio 2.0_is1" = Graffiti Studio 2.0 "HAVE_Online_is1" = Uninstall HAVE Online "hedgewars" = Hedgewars "Icy Tower v1.4_is1" = Icy Tower v1.4 "ImTOO MP4 Video Converter" = ImTOO MP4 Video Converter "InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}" = Blur(TM) "InstallShield_{7F8B6D39-197E-4FD1-A240-3E0A4D62A0C4}" = DesignPro 5 "InstallShield_{B910DD1A-49B1-4068-9C08-E3C3AEC0C30A}" = Keyboard & Mouse Driver "InstallShield_{BFC50240-10F5-4B89-8B61-BA209A1050E5}" = Alcor Micro USB Card Reader "InstallShield_{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = Anti-Vibrate Oscar Editor "ipla" = ipla 2.2 "IVONA 2" = IVONA 2 "IVONA ControlCenter" = IVONA ControlCenter "IVONA MiniReader" = IVONA MiniReader "IVONA Reader" = IVONA Reader "Java Adapter for Mobile_is1" = Java Adapter for Mobile "KLiteCodecPack_is1" = K-Lite Codec Pack 6.3.0 (Full) "KoolMoves Demo_is1" = KoolMoves Demo 7.4.4 "LAME for Audacity_is1" = LAME v3.98.3 for Audacity "Live 8.2.6" = Live 8.2.6 "Logitech Vid" = Logitech Vid HD "LogMeIn Hamachi" = LogMeIn Hamachi "MAGIX_MSI_mm17dlx" = MAGIX Music Maker 17 Premium Download Version "Mario Forever 5.01" = Mario Forever 5.01 "MediaNavigation.CDLabelPrint" = CD-LabelPrint "Metal Assault" = Metal Assault "Microsoft DirectX SDK (March 2009)" = Microsoft DirectX SDK (March 2009) "Minecraft 1.2.0_02" = Minecraft 1.2.0_02 "Mozilla Firefox 16.0 (x86 pl)" = Mozilla Firefox 16.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "MP Navigator EX 3.0" = Canon MP Navigator EX 3.0 "MP3 Converter Simple" = MP3 Converter Simple "NapkinRace_is1" = NapkinRace v1.02 "Niezbędnik CD_is1" = Niezbędnik CD "NoIPDUC" = No-IP DUC "NosTale(PL)_is1" = Nostale(PL) "Notepad++" = Notepad++ "Office14.PROPLUSR" = Microsoft Office Professional Plus 2010 "OJOsoft Total Video Converter_is1" = OJOsoft Total Video Converter "OpenAL" = OpenAL "Origin" = Origin "PamelaCR" = Pam Call Recorder 4.8 "PhotoZoom Pro 4" = BenVista PhotoZoom Pro 4.0.6 "PunkBusterSvc" = PunkBuster Services "QcDrv" = Camera Driver "Rejestracja użytkownika drukarki Canon MP990 series" = Rejestracja użytkownika drukarki Canon MP990 series "Robot Robuś_is1" = Robot Robuś "RPG Maker XP" = RPG Maker XP "SAAM 3.0" = SAAM 3.0 "Steam App 104700" = Super Monday Night Combat "Steam App 109410" = Brawl Busters "Steam App 17080" = Tribes: Ascend "Steam App 200210" = Realm of the Mad God "Steam App 204610" = Q.U.B.E. Demo "Steam App 209870" = Blacklight: Retribution "Steam App 24200" = DC Universe Online "Steam App 42680" = Call of Duty: Modern Warfare 3 "Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer "Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server "Steam App 440" = Team Fortress 2 "Steam App 620" = Portal 2 "Steam App 65800" = Dungeon Defenders "Steam App 91900" = Post Apocalyptic Mayhem "Steam App 99900" = Spiral Knights "StepMania" = StepMania v5.0 Preview 4 (remove only) "Super Collapse! II" = Super Collapse! II "SuperTux 0.3.1" = SuperTux 0.3.1 "SuperTux_is1" = SuperTux 0.1.3 "Test Drive Unlimited 2_is1" = Test Drive Unlimited 2 "The Games Factory 2 Demo" = The Games Factory 2 Demo "TmUnited_is1" = TrackMania United 0.2.0.8 "TmUnitedForever_is1" = TmUnitedForever Update 2010-03-15 "ToonCar" = ToonCar "Trine Demo_is1" = Trine Demo "TunnelBear" = TunnelBear 1.0.30 "Unofficial Star Wars Battlefront II v1.2 Patch_is1" = SWBFIIv1.2 "UserBar Generator_is1" = UserBar Generator 1.2 "Virtual DJ Home - Atomix Productions" = Virtual DJ Home - Atomix Productions "WAV MP3 Converter_is1" = WAV MP3 Converter 1.30 "Winamp" = Winamp "WinGimp-2.0_is1" = GIMP 2.6.11 "World of Warcraft" = World of Warcraft "Worms Reloaded_is1" = Worms Reloaded "Xfire" = Xfire (remove only) "Zombiecraft™" = Zombiecraft™ 1.2 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-3663251781-1262251747-4148551615-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes "1160e3178d6f0046" = SCTE "Akamai" = Akamai NetSession Interface "AlwaysOnPC" = AlwaysOnPC "FileZilla Client" = FileZilla Client 3.5.3 "Google Chrome" = Google Chrome "miniNK" = miniNK "PhotoFiltre 7" = PhotoFiltre 7 "UnityWebPlayer" = Unity Web Player "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-06-20 13:55:13 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: SWRepublicCommando.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x41f707e4 Nazwa modułu powodującego błąd: atiumdva.dll, wersja: 8.14.10.275, sygnatura czasowa: 0x4c75c2a7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00001535 Identyfikator procesu powodującego błąd: 0xd68 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc2f7149d6846a Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\LucasArts\Star Wars Republic Commando\GameData\System\SWRepublicCommando.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\atiumdva.dll Identyfikator raportu: 71db636b-9b66-11e0-9927-8f207a984150 Error - 2011-06-21 06:40:48 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: n-client.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4dfce918 Nazwa modułu powodującego błąd: n-client.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4dfce918 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000519a4 Identyfikator procesu powodującego błąd: 0x124c Godzina uruchomienia aplikacji powodującej błąd: 0x01cc2fffa7545a42 Ścieżka aplikacji powodującej błąd: C:\Teeworlds\n-client.exe Ścieżka modułu powodującego błąd: C:\Teeworlds\n-client.exe Identyfikator raportu: ec715cae-9bf2-11e0-b560-ec5ef2b59854 Error - 2011-06-21 06:41:30 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: n-client_hide.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4dfce918 Nazwa modułu powodującego błąd: n-client_hide.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4dfce918 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00051894 Identyfikator procesu powodującego błąd: 0x1030 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc2fffbf13f457 Ścieżka aplikacji powodującej błąd: C:\Teeworlds\n-client_hide.exe Ścieżka modułu powodującego błąd: C:\Teeworlds\n-client_hide.exe Identyfikator raportu: 05ad1504-9bf3-11e0-b560-ec5ef2b59854 Error - 2011-06-21 10:46:58 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: Microvolts.exe, wersja: 0.8.5.6, sygnatura czasowa: 0x4def61a7 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce7ba58 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0002e39e Identyfikator procesu powodującego błąd: 0x748 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc301cc8d35231 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\MicroVolts\bin\Microvolts.exe Ścieżka modułu powodującego błąd: C:\Windows\SysWOW64\ntdll.dll Identyfikator raportu: 5064b480-9c15-11e0-83f9-e3f4eee1ed50 Error - 2011-06-22 06:17:12 | Computer Name = Patryk-PC | Source = Application Hang | ID = 1002 Description = Program firefox.exe w wersji 5.0.0.4164 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: aec Godzina rozpoczęcia: 01cc30bff3ff3d9e Godzina zakończenia: 10677 Ścieżka aplikacji: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\firefox.exe Identyfikator raportu: c04393cb-9cb8-11e0-9d17-c144c0f1804a Error - 2011-06-23 10:21:26 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Nazwa modułu powodującego błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0001e7ed Identyfikator procesu powodującego błąd: 0x17ac Godzina uruchomienia aplikacji powodującej błąd: 0x01cc31b072d7ca03 Ścieżka aplikacji powodującej błąd: C:\Teeworlds\teeworlds.exe Ścieżka modułu powodującego błąd: C:\Teeworlds\teeworlds.exe Identyfikator raportu: 140f91fe-9da4-11e0-8440-80a4b5035c50 Error - 2011-06-24 05:11:57 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Nazwa modułu powodującego błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0001e7ed Identyfikator procesu powodującego błąd: 0x608 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc324db6894d3a Ścieżka aplikacji powodującej błąd: C:\Teeworlds\teeworlds.exe Ścieżka modułu powodującego błąd: C:\Teeworlds\teeworlds.exe Identyfikator raportu: 029cc469-9e42-11e0-9973-cf9c3c9f655d Error - 2011-06-24 05:51:57 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Nazwa modułu powodującego błąd: teeworlds.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x4ae5e644 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0001e7ed Identyfikator procesu powodującego błąd: 0x9a4 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc325122ce4420 Ścieżka aplikacji powodującej błąd: C:\Teeworlds\teeworlds.exe Ścieżka modułu powodującego błąd: C:\Teeworlds\teeworlds.exe Identyfikator raportu: 990b9a7f-9e47-11e0-9973-cf9c3c9f655d Error - 2011-06-25 11:38:34 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: EACoreServer.exe, wersja: 7.0.0.44, sygnatura czasowa: 0x4caebd6a Nazwa modułu powodującego błąd: EACore.dll, wersja: 3.0.0.255, sygnatura czasowa: 0x4caebe6f Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0005b9cd Identyfikator procesu powodującego błąd: 0xc2c Godzina uruchomienia aplikacji powodującej błąd: 0x01cc334defb67b57 Ścieżka aplikacji powodującej błąd: C:\PROGRA~2\ELECTR~1\EADM\EADMUI\EACoreServer.exe Ścieżka modułu powodującego błąd: C:\PROGRA~2\ELECTR~1\EADM\EADMUI\EACore.dll Identyfikator raportu: 2f46d115-9f41-11e0-9d5f-8f5ef67b5556 Error - 2011-06-25 11:39:12 | Computer Name = Patryk-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: EACoreServer.exe, wersja: 7.0.0.44, sygnatura czasowa: 0x4caebd6a Nazwa modułu powodującego błąd: EACore.dll, wersja: 3.0.0.255, sygnatura czasowa: 0x4caebe6f Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0005b10d Identyfikator procesu powodującego błąd: 0x1368 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc334def582d55 Ścieżka aplikacji powodującej błąd: C:\PROGRA~2\ELECTR~1\EADM\EADMUI\EACoreServer.exe Ścieżka modułu powodującego błąd: C:\PROGRA~2\ELECTR~1\EADM\EADMUI\EACore.dll Identyfikator raportu: 45f6a4e0-9f41-11e0-9d5f-8f5ef67b5556 [ Media Center Events ] Error - 2011-01-22 07:41:31 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 12:41:25 - Błąd podczas nawiązywania połączenia z Internetem. 12:41:25 - Nie można skontaktować się z serwerem.. Error - 2011-01-27 09:04:50 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 14:04:50 - Błąd podczas nawiązywania połączenia z Internetem. 14:04:50 - Nie można skontaktować się z serwerem.. Error - 2011-01-27 09:05:01 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 14:04:55 - Błąd podczas nawiązywania połączenia z Internetem. 14:04:55 - Nie można skontaktować się z serwerem.. Error - 2011-01-28 08:53:42 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 13:53:42 - Błąd podczas nawiązywania połączenia z Internetem. 13:53:42 - Nie można skontaktować się z serwerem.. Error - 2011-01-28 08:53:54 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 13:53:47 - Błąd podczas nawiązywania połączenia z Internetem. 13:53:47 - Nie można skontaktować się z serwerem.. Error - 2011-01-31 09:10:22 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 14:10:22 - Błąd podczas nawiązywania połączenia z Internetem. 14:10:22 - Nie można skontaktować się z serwerem.. Error - 2011-01-31 09:10:33 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 14:10:28 - Błąd podczas nawiązywania połączenia z Internetem. 14:10:28 - Nie można skontaktować się z serwerem.. Error - 2011-02-12 05:21:44 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 10:21:44 - Błąd podczas nawiązywania połączenia z Internetem. 10:21:44 - Nie można skontaktować się z serwerem.. Error - 2011-02-12 05:21:56 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 10:21:50 - Błąd podczas nawiązywania połączenia z Internetem. 10:21:50 - Nie można skontaktować się z serwerem.. Error - 2011-02-17 05:48:11 | Computer Name = Patryk-PC | Source = MCUpdate | ID = 0 Description = 10:48:07 - Błąd podczas nawiązywania połączenia z Internetem. 10:48:07 - Nie można skontaktować się z serwerem.. [ System Events ] Error - 2012-10-16 12:49:52 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-16 12:52:07 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-17 07:54:17 | Computer Name = Patryk-PC | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Hi-Rez Studios Authenticate and Update Service. Error - 2012-10-17 07:54:57 | Computer Name = Patryk-PC | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: GLogin Error - 2012-10-17 07:55:25 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-17 07:57:56 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-17 08:01:36 | Computer Name = Patryk-PC | Source = Service Control Manager | ID = 7022 Description = Usługa Windows Update zawiesiła się podczas uruchamiania. Error - 2012-10-17 08:02:34 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-17 08:06:33 | Computer Name = Patryk-PC | Source = VDS Basic Provider | ID = 33554433 Description = Error - 2012-10-17 08:24:28 | Computer Name = Patryk-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 Description = Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.137.1875.0). < End of report >

**Posty:** 18165 · przez **wojtas** 17 Paź 2012, 22:30

odinstaluj:
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Ashampoo_PO Toolbar" = Ashampoo PO Toolbar
Ask Toolbar

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKLM\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2795644
IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2481033
IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\URLSearchHook: {5570f0a0-580c-4c69-808f-8b2aaa2aa93c} - No CLSID value found
IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsh0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-3663251781-1262251747-4148551615-1001\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?SSPV=FFSB10&ctid=CT2481033&SearchSource=2&q="
[2012-10-15 19:52:01 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\DTToolbar@toolbarnet.com
[2012-10-15 19:52:02 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Patryk\AppData\Roaming\mozilla\Firefox\Profiles\p3hjaobc.default\extensions\engine@conduit.com
[2012-06-07 18:51:22 | 000,000,947 | ---- | M] () -- C:\Users\Patryk\AppData\Roaming\mozilla\firefox\profiles\p3hjaobc.default\searchplugins\conduit.xml
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [TSNxG4Tray] "C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGTray.exe" /system File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Użyj AdwCleaner i kliknij w nim Delete (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzyła się po restarcie).