Komputer coraz częściej zamula, niepokojące procesy?

[odyniec]

Witam. Od jakiegoś czasu mój komputer potrafi bardzo mocno zamulić, praktycznie nic się nie da wtedy zrobić, jakiekolwiek działanie jest opóźnione o kilka sekund. Taka zamuła potrafi trwać około minuty. Poza nimi komputer chodzi szybko i nie ma z nim problemów . Dodatkowo zauważyłem trzy "niepokojące" mnie procesy, których wcześniej wydaje mi się nie było. Są to: winlogon.exe, atieclxx.exe i taskeng.exe.
Załączam wymagane logi:
GMER
http://wklej.org/id/1348076/
OTL:
http://wklej.org/id/1348082/
Extras:
http://wklej.org/id/1348085/

Proszę o analizę i pozdrawiam

[Tres3K]

Prawoklik na proces -> Otwórz lokalizację pliku. Tam zobacz, co jest odpowiedzialne za proces. Wtedy się dowiesz, czy jest porządany, czy też nie.

[odyniec]

Przy prawo kliku na taskeng.exe przekierowuje mnie na C/Windows/system32. Przy prawo kliku na pozostałe dwa nic się nie dzieje.

[NieWiem]

Tres3K, wynocha mi stąd.

odyniec, pobierz FRST w wersji zgodnej z Twoim systemem - 32bit.
Zapisz na pulpicie, uruchom, kliknij scan.
Wygeneruje dwa logi. Obydwa proszę załączyć na forum.

[odyniec]

FRST
http://wklej.org/id/1348247/

Addition
http://wklej.org/id/1348248/

[NieWiem]

Pobierz Rogue Killer
Uruchom jako administrator (z prawokliku)
Poczekaj aż skończy się prescan, wciśnij szukaj.
Jak skończy, kliknij podsumowanie. Raport przeklej w spoilerze.

[odyniec]

Spoiler:

RogueKiller V8.8.15 [Mar 27 2014] od Adlice Software
mail : http://www.adlice.com/contact/
Dodaj opinię : http://forum.adlice.com
Strona internetowa : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

System Operacyjny : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Uruchomiono z : Tryb normalny
Użytkownik : Odyniec [Uprawnienia Administratora]
Tryb : Skanuj -- Data : 04/30/2014 20:44:12
| ARK || FAK || MBR |

¤¤¤ Szkodliwe procesy : 0 ¤¤¤

¤¤¤ Wpisy w Rejestrze : 3 ¤¤¤
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> ZNALEZIONO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> ZNALEZIONO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> ZNALEZIONO

¤¤¤ Zaplanowane zadania : 0 ¤¤¤

¤¤¤ Wpisy startowe : 0 ¤¤¤

¤¤¤ przeglądarki internetowe : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Pliki / Foldery: ¤¤¤

¤¤¤ Sterownik : [ZAŁADOWANY] ¤¤¤
[Address] EAT @explorer.exe (BluetoothAddressToString) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F7740F)
[Address] EAT @explorer.exe (BluetoothAuthenticateDevice) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F782A0)
[Address] EAT @explorer.exe (BluetoothAuthenticateDeviceEx) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F783B9)
[Address] EAT @explorer.exe (BluetoothAuthenticateMultipleDevices) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F782C8)
[Address] EAT @explorer.exe (BluetoothAuthenticationAgent) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F698BE)
[Address] EAT @explorer.exe (BluetoothDisconnectDevice) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6DD74)
[Address] EAT @explorer.exe (BluetoothDisplayDeviceProperties) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F741AB)
[Address] EAT @explorer.exe (BluetoothEnableDiscovery) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E424)
[Address] EAT @explorer.exe (BluetoothEnableIncomingConnections) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E6C4)
[Address] EAT @explorer.exe (BluetoothEnumerateInstalledServices) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6DE94)
[Address] EAT @explorer.exe (BluetoothEnumerateInstalledServicesEx) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6F7A2)
[Address] EAT @explorer.exe (BluetoothFindBrowseGroupClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CB63)
[Address] EAT @explorer.exe (BluetoothFindClassIdClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CB63)
[Address] EAT @explorer.exe (BluetoothFindDeviceClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D785)
[Address] EAT @explorer.exe (BluetoothFindFirstBrowseGroup) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6DB97)
[Address] EAT @explorer.exe (BluetoothFindFirstClassId) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D8F5)
[Address] EAT @explorer.exe (BluetoothFindFirstDevice) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E9E6)
[Address] EAT @explorer.exe (BluetoothFindFirstProfileDescriptor) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6DC7E)
[Address] EAT @explorer.exe (BluetoothFindFirstProtocolDescriptorStack) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D9D5)
[Address] EAT @explorer.exe (BluetoothFindFirstProtocolEntry) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6DACC)
[Address] EAT @explorer.exe (BluetoothFindFirstRadio) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D6E6)
[Address] EAT @explorer.exe (BluetoothFindFirstService) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F7032D)
[Address] EAT @explorer.exe (BluetoothFindFirstServiceEx) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6EDBE)
[Address] EAT @explorer.exe (BluetoothFindNextBrowseGroup) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CB98)
[Address] EAT @explorer.exe (BluetoothFindNextClassId) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C97D)
[Address] EAT @explorer.exe (BluetoothFindNextDevice) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C194)
[Address] EAT @explorer.exe (BluetoothFindNextProfileDescriptor) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CBFD)
[Address] EAT @explorer.exe (BluetoothFindNextProtocolDescriptorStack) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C9D4)
[Address] EAT @explorer.exe (BluetoothFindNextProtocolEntry) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CAA8)
[Address] EAT @explorer.exe (BluetoothFindNextRadio) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C066)
[Address] EAT @explorer.exe (BluetoothFindNextService) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D84C)
[Address] EAT @explorer.exe (BluetoothFindProfileDescriptorClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CB63)
[Address] EAT @explorer.exe (BluetoothFindProtocolDescriptorStackClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CA5B)
[Address] EAT @explorer.exe (BluetoothFindProtocolEntryClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CB63)
[Address] EAT @explorer.exe (BluetoothFindRadioClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C1CD)
[Address] EAT @explorer.exe (BluetoothFindServiceClose) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6C92F)
[Address] EAT @explorer.exe (BluetoothGetDeviceInfo) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E8F6)
[Address] EAT @explorer.exe (BluetoothGetRadioInfo) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D083)
[Address] EAT @explorer.exe (BluetoothIsConnectable) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E6E6)
[Address] EAT @explorer.exe (BluetoothIsDiscoverable) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E5F3)
[Address] EAT @explorer.exe (BluetoothIsVersionAvailable) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D4B2)
[Address] EAT @explorer.exe (BluetoothMapClassOfDeviceToImageIndex) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F7731E)
[Address] EAT @explorer.exe (BluetoothMapClassOfDeviceToString) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F76F6D)
[Address] EAT @explorer.exe (BluetoothRegisterForAuthentication) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F70114)
[Address] EAT @explorer.exe (BluetoothRegisterForAuthenticationEx) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F70137)
[Address] EAT @explorer.exe (BluetoothRemoveDevice) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F70EBD)
[Address] EAT @explorer.exe (BluetoothSdpEnumAttributes) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CCD9)
[Address] EAT @explorer.exe (BluetoothSdpGetAttributeValue) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F71530)
[Address] EAT @explorer.exe (BluetoothSdpGetContainerElementData) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F71488)
[Address] EAT @explorer.exe (BluetoothSdpGetElementData) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F71223)
[Address] EAT @explorer.exe (BluetoothSdpGetString) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F71883)
[Address] EAT @explorer.exe (BluetoothSelectDevices) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F73D76)
[Address] EAT @explorer.exe (BluetoothSelectDevicesFree) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F7253F)
[Address] EAT @explorer.exe (BluetoothSendAuthenticationResponse) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E323)
[Address] EAT @explorer.exe (BluetoothSendAuthenticationResponseEx) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6E235)
[Address] EAT @explorer.exe (BluetoothSetLocalServiceInfo) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6FB77)
[Address] EAT @explorer.exe (BluetoothSetServiceState) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F70DDB)
[Address] EAT @explorer.exe (BluetoothUnregisterAuthentication) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6CF30)
[Address] EAT @explorer.exe (BluetoothUpdateDeviceRecord) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6D7E1)
[Address] EAT @explorer.exe (BthpEnableAllServices) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F7106A)
[Address] EAT @explorer.exe (BthpFindPnpInfo) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6EEC6)
[Address] EAT @explorer.exe (BthpMapStatusToErr) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F773DF)
[Address] EAT @explorer.exe (CPlApplet) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6BB60)
[Address] EAT @explorer.exe (DllCanUnloadNow) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6B2E6)
[Address] EAT @explorer.exe (DllGetClassObject) : ieproxy.dll -> HOOKED (C:\Windows\System32\bthprops.cpl @ 0x62F6B1E8)

¤¤¤ Gałąź rejestru (offline): ¤¤¤

¤¤¤ Infekcja : ¤¤¤

¤¤¤ Plik HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Sprawdzenie MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) SAMSUNG HD502HJ ATA Device +++++
--- User ---
[MBR] c9095b38b9dfec6ade08fb0a1e741a6e
[BSP] 3fa2e1671adbbb96084ddf91e1263860 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 34900 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 71682048 | Size: 441936 MB
User = LL1 ... OK!
User = LL2 ... OK!

Zakończono : << RKreport[0]_S_04302014_204412.txt >>

[NieWiem]

Niby nic a jednak coś mi tutaj nie pasuje.

Pobierz Malwarebytes' Anti-Rootkit i zapisz go na pulpicie.
Wypakuj i uruchom jako administrator (zaktualizuj!).
Wszystkie opcje skanu (Drivers, System, Sectors) mają być zaznaczone. Skan zajmie chwilę.
Raport będzie w folderze MBAR - załącz go. Nie usuwaj nic samemu.

[odyniec]

http://wklej.org/id/1348592/

[NieWiem]

Przepraszam za przerwę, weekend majowy mi wypadł z życiorysu kompletnie po drodze

Pobierz AdwCleaner.
Uruchom i wciśnij Scan.
Kiedy skończy wciśnij Clean i zgodź się na restart.
Wyświetlony po restarcie raport załącz.

Pobierz Junkware Removal Tool.
Uruchom i poczekaj cierpliwie.
Uwaga: na czas pracy programu należy wyłączyć programy z rezydentną ochroną (AV, AS), ponieważ "ubijają" one składniki JRT.
Po ukończeniu pojawi się raport - załącz go w odpowiedzi.

[odyniec]

AdwCleaner

Spoiler:

# AdwCleaner v3.207 - Log utworzony 05/05/2014 o 13:06:52
# Aktualizacja 05/05/2014 przez Xplode
# System operacyjny : Windows 7 Ultimate Service Pack 1 (32 bits)
# Użytkownik : Odyniec - ODYN
# Ścieżka : D:\Pobrane\AdwCleaner(1).exe
# Opcja : Usuń

***** [ Usługi ] *****


***** [ Pliki / Foldery ] *****

Plik Usunięto : C:\Users\Odyniec\daemonprocess.txt
Plik Usunięto : C:\Users\Odyniec\AppData\Roaming\LiveSupport.exe_log.txt
Plik Usunięto : C:\Users\Odyniec\AppData\Roaming\regsvr32.exe_log.txt

***** [ Skróty ] *****


***** [ Rejestr ] *****

Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseSmart_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseSmart_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\utilBrowseSmart_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\utilBrowseSmart_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Klucz Usunięto : HKLM\Software\Trymedia Systems

***** [ Przeglądarki internetowe ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v28.0 (pl)

[ Plik : C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\vriv0qfd.default\prefs.js ]


[ Plik : C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\prefs.js ]


-\\ Google Chrome v34.0.1847.131

[ Plik : C:\Users\Odyniec\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Usunięto [Extension] : cekcjpgehmohobmdiikfnopibipmgnml

*************************

AdwCleaner[R2].txt - [2025 octets] - [05/05/2014 13:05:13]
AdwCleaner[S2].txt - [1915 octets] - [05/05/2014 13:06:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1975 octets] ##########

Junkware

Spoiler:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x86
Ran by Odyniec on 2014-05-05 at 13:10:59,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F23B0393-95DF-43DC-9600-B8877506C94F}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Odyniec\AppData\Roaming\mozilla\firefox\profiles\xckjo93i.default-1390682528582\minidumps [93 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2014-05-05 at 13:13:17,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[NieWiem]

Wygląda smakowicie

Musisz wyłączyć program AV na czas trwania tego skanowania.
Pobierz ZOEK.
Uruchom jako administrator.
W oknie programu wklej następujący skrypt:

Kod: Zaznacz wszystko

process;
systemspecs;
startupall;
filescrm;
firefoxlook;
chromelook;
skipfix-iedefaults;
installedprogs;
uninstall-list;
installer-list;
autoclean;

Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.

[odyniec]

Znaczy wyłączone są wszystkie osłony i praca w tle, ale samego programu w procesach nie mogę wyłączyć. Odmowa dostępu.

[NieWiem]

Spróbuj mimo to, jeśli osłony są wyłączone to powinno pójść.

[odyniec]

Poszło bez problemu.
Oto raport wynikowy:

Spoiler:

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Odyniec on 2014-05-05 at 13:41:42,67.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: D:\Pobrane\zoek(1).exe [Scan all users] [Script inserted]

==== System Restore Info ======================

2014-05-05 13:42:50 Zoek.exe System Restore Point Created Succesfully.

==== Windows Installer Info ======================

Adobe Reader XI (11.0.06) - Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68AB67CA7DA75401B744BA0000000010]C:\Windows\Installer\654cc.msi
AMD Accelerated Video Transcoding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F06BE6A807CBB101ACECD9774967A7C3]C:\Windows\Installer\2d4240.msi
AMD APP SDK Runtime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0C1FF52A6B08B8B45A15CD2565794A80]C:\Windows\Installer\2d423a.msi
AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DB8F5283487FBBF65ADC585795410870]C:\Windows\Installer\174b813.msi
AMD Drag and Drop Transcoding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\90F3B1FA192BD7F6CD1E82996A374082]C:\Windows\Installer\2d422e.msi
AMD Media Foundation Decoders [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\29D1F74FFD4F3114080B5BF8E21BF082]C:\Windows\Installer\2d4234.msi
Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\32FA0F2EF2EF2224A934556EC34CE11F]C:\Windows\Installer\2d418b.msi
Catalyst Control Center [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\42962336FAC3858CA3F858898C07917D]C:\Windows\Installer\2d4228.msi
Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B754B4DF062165CAC7807B33D7B42AC]C:\Windows\Installer\2d4191.msi
Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B4A2F9673A486849DA2DE9A54B4B1E3E]C:\Windows\Installer\174b808.msi
Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E805DFCE2A862B1964DDD1307D389DB4]C:\Windows\Installer\2d421b.msi
ccc-utility [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ECA69F379429D40D5E96D116D19028BB]C:\Windows\Installer\2d4221.msi
CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\91346C9AF239B20D1BC4FFCFE34CE977]C:\Windows\Installer\2d420f.msi
CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\605BDC6DD79207EAE06FED15589F16EB]C:\Windows\Installer\2d4215.msi
CCC Help Czech [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C1A9E4502AE3756C7E78DFD8FCC5D3B3]C:\Windows\Installer\2d4197.msi
CCC Help Danish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BEF8E422F1C5F770F65C06A21CEA46D4]C:\Windows\Installer\2d419d.msi
CCC Help Dutch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DD45F65F2BCB1221C27B9E385AFCD951]C:\Windows\Installer\2d41df.msi
CCC Help English [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\551BE1F3E69FB7BEE22F375794E0F09A]C:\Windows\Installer\2d41af.msi
CCC Help Finnish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A6DD7E1FD2EA607DEB3B39F767ACA69E]C:\Windows\Installer\2d41bb.msi
CCC Help French [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7448F710D1A2BDD05B7DACB2AFEC8268]C:\Windows\Installer\2d41c1.msi
CCC Help German [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\15DB2ED10030D277E5813F739DD56578]C:\Windows\Installer\2d41a3.msi
CCC Help Greek [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\98E22836AA11CE8F4D337FA25897E90C]C:\Windows\Installer\2d41a9.msi
CCC Help Hungarian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5D163EDE5A53D7AD43263CADDB4220B9]C:\Windows\Installer\2d41c7.msi
CCC Help Italian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B7D320B476E9D597BF135B1E6FCD4A15]C:\Windows\Installer\2d41cd.msi
CCC Help Japanese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\94C9E572F27C457DED7B771FA0C9008D]C:\Windows\Installer\2d41d3.msi
CCC Help Korean [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\239BD90C916765B7033E0C5484116D7D]C:\Windows\Installer\2d41d9.msi
CCC Help Norwegian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C1DD37782BF55B59A539E0EFCA09A0D4]C:\Windows\Installer\2d41e5.msi
CCC Help Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0241636650948BEA71EA71F2DD61A4E7]C:\Windows\Installer\2d41eb.msi
CCC Help Portuguese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FB0BBCC81CC956A1BB396510A264E06E]C:\Windows\Installer\2d41f1.msi
CCC Help Russian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\684C6F5557C827A2ADEFEC876A429C7F]C:\Windows\Installer\2d41f7.msi
CCC Help Spanish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9379400359EB19565B406E7D50D794CC]C:\Windows\Installer\2d41b5.msi
CCC Help Swedish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7964A22C77DB1BCA47F4F10D0AFB7F89]C:\Windows\Installer\2d41fd.msi
CCC Help Thai [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\39932FA5251702614EF3B15424BFF448]C:\Windows\Installer\2d4203.msi
CCC Help Turkish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\50EC3A0ABC699E2534E470F4B37B08E7]C:\Windows\Installer\2d4209.msi
D3DX10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7BD4C90EC03660F46A13E87A329932FA]C:\Windows\Installer\afe2b6.msi
Galeria fotografii [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\772AD702D6A636845B532199132DBB12]C:\Windows\Installer\afe2e8.msi
Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E]C:\Windows\Installer\17c5d5.msi
IntelR Trusted Connect Service Client [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53573E52442869A47B706EE5114B9A5D]C:\Windows\Installer\a36e6.msi
Java 7 Update 51 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF238120715FF]C:\Windows\Installer\85419.msi
Java Auto Updater [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401]C:\Windows\Installer\8541f.msi
Logitech Gaming Software 5.10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CDC23D06EB3E8754AB0192233270DCCD]C:\Windows\Installer\1dba9.msi
Microsoft .NET Framework 4.5.1 (PLK) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53B8B38C4C2C2033A9E62CFAA1958E6D]C:\Windows\Installer\1bf065b.msi
Microsoft .NET Framework 4.5.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\271D3094BCCDF293393A43ACD974EFD3]C:\Windows\Installer\1b005b3.msi
Microsoft Application Error Reporting [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400000000000F01FEC]C:\Windows\Installer\afe29d.msi
Microsoft Games for Windows - LIVE Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0ED9D238CFA898648991D4BBEDDBE3F4]C:\Windows\Installer\18c67df.msi
Microsoft Games for Windows Marketplace [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\81024F76746FC3D4EB268FBCF42ECF5D]C:\Windows\Installer\18c67d9.msi
Microsoft Office Access MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109510051400000000000F01FEC]C:\Windows\Installer\6dd51f.msi
Microsoft Office Excel MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109610051400000000000F01FEC]C:\Windows\Installer\6dd4e8.msi
Microsoft Office Groove MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109AB0051400000000000F01FEC]C:\Windows\Installer\6dd4f4.msi
Microsoft Office InfoPath MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109440051400000000000F01FEC]C:\Windows\Installer\6dd525.msi
Microsoft Office OneNote MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041091A0051400000000000F01FEC]C:\Windows\Installer\6dd518.msi
Microsoft Office Outlook MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A10051400000000000F01FEC]C:\Windows\Installer\6dd4fa.msi
Microsoft Office PowerPoint MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109810051400000000000F01FEC]C:\Windows\Installer\6dd4ee.msi
Microsoft Office Professional Plus 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109110000000000000000F01FEC]C:\Windows\Installer\6dd539.msi
Microsoft Office Proof (English) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400000000000F01FEC]C:\Windows\Installer\6dd50c.msi
Microsoft Office Proof (German) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10070400000000000F01FEC]C:\Windows\Installer\6dd506.msi
Microsoft Office Proof (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10051400000000000F01FEC]C:\Windows\Installer\6dd500.msi
Microsoft Office Proofing (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109C20051400000000000F01FEC]C:\Windows\Installer\6dd512.msi
Microsoft Office Publisher MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109910051400000000000F01FEC]C:\Windows\Installer\6dd52b.msi
Microsoft Office Shared MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60051400000000000F01FEC]C:\Windows\Installer\6dd4e2.msi
Microsoft Office Word MUI (Polish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109B10051400000000000F01FEC]C:\Windows\Installer\6dd531.msi
Microsoft Silverlight [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100]C:\Windows\Installer\654bf.msi
Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D034B0FAA6BD374B960AAD30DF10D8B]C:\Windows\Installer\afe2c7.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3e43b73803c7c394f8a6b2f0402e19c2]C:\Windows\Installer\775d2d.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\b25099274a207264182f8181add555d0]C:\Windows\Installer\564f4e.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\c1c4f01781cc94c4c8fb1542c0981a2a]C:\Windows\Installer\2db33a6.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D20352A90C039D93DBF6126ECE614057]C:\Windows\Installer\654a9.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E815EB96CCE9A53884E7857C57002F0]C:\Windows\Installer\13a5d6.msi
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D5E3C0FEDA1E123187686FED06E995A]C:\Windows\Installer\422bf7.msi
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\852DA6D3AE165F5318C27B0A122599E6]C:\Windows\Installer\10e1634.msi
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\438E4D7EBE39F1538BBF28DCEA260330]C:\Windows\Installer\10e162d.msi
Microsoft XNA Framework Redistributable 3.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D5ADFB912EF152F4799FA197DD40EE02]C:\Windows\Installer\2def3a5.msi
Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\07189854C86E20F4AA532C81B63F743A]C:\Windows\Installer\afe2d4.msi
Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5286A93B02AEAE34BAD26ACB20899D1A]C:\Windows\Installer\afe306.msi
Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9F3632F2C201B844E8E320CFEF872AD8]C:\Windows\Installer\afe2ed.msi
MSVCRT [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A6C64DD86500CEF47BA082BB611A1FF1]C:\Windows\Installer\afe289.msi
MSVCRT110 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8CDD41E806AE81E43B3E917301D4B5AD]C:\Windows\Installer\afe28e.msi
NVIDIA PhysX [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F173C5F32AE852F4D9D30D4B25E6A3AE]C:\Windows\Installer\2a0e5cd.msi
Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1CF5C7DD5ACDA784FA3256B8C10042F3]C:\Windows\Installer\afe2fc.msi
Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\50837ABF76F0B824E8F4AF1EA6546258]C:\Windows\Installer\afe2e3.msi
Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\156929F0615F6594092FFFDBC25D3DE0]C:\Windows\Installer\afe2cd.msi
Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7A0E7C98D9D4CCD488439A2A9BD2E7BB]C:\Windows\Installer\afe301.msi
PlayReady PC Runtime x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DAAE5ACC4F29A7B45BEE4192C466BA16]C:\Windows\Installer\2d8258b.msi
Podstawowe programy Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C73021AFAF6B528468CB5DA86A9ACC42]C:\Windows\Installer\afe2de.msi
Samsung Kies [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1038C85769625584FA5435B4210089A0]C:\Windows\Installer\d08aaa.msi
SlimDrivers [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1047545AA65D2F345942875EA4F70CA7]C:\Windows\Installer\169c8b7.msi
swMSM [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7C43C21609E58D74B9C5F017D78D7262]C:\Windows\Installer\654af.msi
Windows Live Communications Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B265D302E4C64849A0233717888EB00]C:\Windows\Installer\afe2ac.msi
Windows Live Essentials [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\29C490E5882634F4AAA94D250D12F8F3]C:\Windows\Installer\afe2f7.msi
Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F78F652845587544C8D3F3334296D7F9]C:\Windows\Installer\afe293.msi
Windows Live Installer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0F0EE0A5909EB3F44B73AA9D524272BC]C:\Windows\Installer\afe298.msi
Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E9EE0B6C821284447BEAE5B2640E0F7E]C:\Windows\Installer\afe2c2.msi
Windows Live PIMT Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8955443E42442EE47BC12C33527FBF17]C:\Windows\Installer\afe2b1.msi
Windows Live SOXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9B3296B69178B52419C6DC92803FA1FA]C:\Windows\Installer\afe2a7.msi
Windows Live SOXE Definitions [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\49CC9FF032FEE104DBDB7304D3A1B283]C:\Windows\Installer\afe2a2.msi
Windows Live UX Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93785E0FC4B2F894B9D0FFF0F25DB216]C:\Windows\Installer\afe2bb.msi
Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2A55CB64EC4B5B6438302A70B6985950]C:\Windows\Installer\afe2d9.msi
Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53910CA247731894898C419EC34173C2]C:\Windows\Installer\afe2f2.msi

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Installed Programs ======================

5-Mode Oscar Editor
Adobe Flash Player 13 ActiveX
Adobe Flash Player 13 Plugin
Adobe Reader XI (11.0.06) - Polish
Adobe Shockwave Player 12.0
AIMP3
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
Any Video Converter 5.5.8
Assetto Corsa
Auslogics Disk Defrag
avast Free Antivirus
Battlefield 3t
Battlelog Web Plugins
BitRaider Web Client
Catalyst Control Center - Branding
Catalyst Control Center
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
Counter-Strike 1.6 NonSteam
CWK (Czasowy WyˆĄcznik Komputera)
D3DX10
Dead Space
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Deluxe Ski Jump 4
Diablo II + Diablo II - Lord of Destruction PL 1.12a
ESN Sonar
F1 2013
FanaLEDs
Fraps
Galeria fotografii
Game Booster 3
Geeks3D FurMark 1.13.0
Glary Utilities PRO 4.10
Google Chrome
Google Update Helper
GRID 2 (c) Codemasters version 1
Intel(R) Management Engine Components
IntelR Trusted Connect Service Client
ipla 2.7
iRacing.com Race Simulation
IRG Tool wersja 1.3.0
Java 7 Update 51
Java Auto Updater
K-Lite Codec Pack 10.4.0 Full
Logitech Gaming Software 5.10
Microsoft .NET Framework 4.5.1
Microsoft .NET Framework 4.5.1 (PLK)
Microsoft .NET Framework 4.5.1 (Polski)
Microsoft Application Error Reporting
Microsoft Games for Windows - LIVE Redistributable
Microsoft Games for Windows Marketplace
Microsoft Office Access MUI (Polish) 2010
Microsoft Office Excel MUI (Polish) 2010
Microsoft Office Groove MUI (Polish) 2010
Microsoft Office InfoPath MUI (Polish) 2010
Microsoft Office OneNote MUI (Polish) 2010
Microsoft Office Outlook MUI (Polish) 2010
Microsoft Office PowerPoint MUI (Polish) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Polish) 2010
Microsoft Office Proofing (Polish) 2010
Microsoft Office Publisher MUI (Polish) 2010
Microsoft Office Shared MUI (Polish) 2010
Microsoft Office Word MUI (Polish) 2010
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
Microsoft XNA Framework Redistributable 3.1
Movie Maker
Mozilla Firefox 28.0 (x86 pl)
Mozilla Maintenance Service
MSI Afterburner 3.0.0 Beta 19
MSVCRT
MSVCRT110
My Game Long Name
NapiProjekt (2.2.0.2399)
NBA 2K14
NVIDIA PhysX
OpenAL
Origin
Photo Common
Photo Gallery
PlayReady PC Runtime x86
Podstawowe programy Windows Live
Rayman Legends
Realtek Ethernet Controller Driver
Realtek Ethernet Diagnostic Utility
Realtek High Definition Audio Driver
rFactor (remove only)
rFactor2
Richard Burns Rally
RivaTuner Statistics Server 6.1.0
Samsung Kies
SAMSUNG USB Driver for Mobile Phones
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2863926) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
SlimDrivers
SopCast 3.5.0
SpeedFan (remove only)
Spelunky HD 1.0
Star Wars The Old Republic
Star Wars: The Old Republic
swMSM
Teslagrad 1.0.4
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
uTorrent
VLC media player 2.1.3
WapSter AQQ
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinRAR 5.10 beta 1 (32-bit)

==== Running Processes ======================

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\atiesrxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
D:\Program Files\iRacing\iRacingService.exe
C:\Windows\system32\PnkBstrA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\MSI Afterburner\MSIAfterburner.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
D:\Pobrane\zoek(1).exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k swprv

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Malwarebytes' Anti-Malware (portable) deleted
C:\Program Files\SopCast deleted
C:\PROGRA~2\Package Cache deleted
C:\Users\Odyniec\AppData\Local\TempDIR deleted
C:\Users\Odyniec\AppData\Local\cache deleted
C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\extensions\firefox@mega.co.nz.xpi deleted
C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\jetpack deleted
C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\extensions\jid1-qQSMEVsYTOjgYA@jetpack deleted

==== System Specs ======================

Windows: Windows 7 Ultimate Edition Service Pack 1 (Build 7601)
Memory (RAM): 3576 MB
CPU Info: Intel(R) Pentium(R) CPU G840 @ 2.80GHz
CPU Speed: 2787,9 MHz
Sound Card: Głośniki (Realtek High Definiti |
Display Adapters: AMD Radeon HD 6800 Series | AMD Radeon HD 6800 Series | AMD Radeon HD 6800 Series | AMD Radeon HD 6800 Series | AMD Radeon HD 6800 Series | AMD Radeon HD 6800 Series | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1x; Rodzajowy monitor PnP |
Screen Resolution: 1680 X 1050 - 32 bit
Network: Network Present
Network Adapters: Realtek PCIe GBE Family Controller
CD / DVD Drives: No optical drives found.
Ports: COM1 LPT Port NOT Present.
Mouse: 16 Button Wheel Mouse Present
Hard Disks: C: 34,1GB | D: 431,6GB
Hard Disks - Free: C: 1,5GB | D: 38,3GB
Manufacturer *: Award Software International, Inc.
BIOS Info: AT/AT COMPATIBLE | 10/12/11 | GBT - 42302e31
Time Zone: Środkowoeuropejski czas stand.
Motherboard *: Gigabyte Technology Co., Ltd. H61M-D2-B3
Country: Polska
Language: PLK

==== System Specs (Software) ======================

Anti-Virus: avast! Antivirus On-access scanning disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Anti-Spyware: avast! Antivirus disabled (Outdated)
Default Browser: Firefox 28.0
Internet Explorer Version: 11.0.9600.17105
Mozilla Firefox version: 28.0 (x86 pl)
Google Chrome version: 34.0.1847.131
Adobe Reader version: 11.0.06.70
Sun Java version: 1.7.0_51 (32-bit)
Flash Player version: 13.0.0.206
Shockwave Player version: 12.0r112

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-559866511-2448697629-530573241-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"MSI"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe"
"Oscar"="C:\Program Files\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe"
"Glary Memory Optimizer"="C:\Program Files\Glary Utilities 4\memdefrag.exe /autostart"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"Start WingMan Profiler"="C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSI"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe"
"Oscar"="C:\Program Files\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe"
"Glary Memory Optimizer"="C:\Program Files\Glary Utilities 4\memdefrag.exe /autostart"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BCSSync"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesAirMessage]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KiesAirMessage"
"hkey"="HKCU"
"command"="D:\\Programy\\Kies\\KiesAirMessage.exe -startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesPreload]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KiesPreload"
"hkey"="HKCU"
"command"="D:\\Programy\\Kies\\Kies.exe /preload"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesTrayAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KiesTrayAgent"
"hkey"="HKLM"
"command"="D:\\Programy\\Kies\\KiesTrayAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OfficeSyncProcess]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="OfficeSyncProcess"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE\""


==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 12:44]
C:\Windows\tasks\GlaryInitialize 4.job --a------ C:\Program Files\Glary Utilities 4\Initialize.exe [2014-04-14 10:01]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-13 14:02]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-13 14:02]
C:\Windows\tasks\SlimDrivers Startup.job --a------ C:\Program Files\SlimDrivers\SlimDrivers.exe [2013-09-24 13:49]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\system32\tasks\Game_Booster_AutoUpdate" [C:\Program Files\IObit\Game Booster 3\AutoUpdate.exe]
"C:\Windows\system32\tasks\GlaryInitialize 4" [C:\Program Files\Glary Utilities 4\Initialize.exe]
"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\Windows\system32\tasks\GU4SkipUAC" [C:\Program Files\Glary Utilities 4\Integrator.exe]
"C:\Windows\system32\tasks\MSIAfterburner" [C:\Program Files\MSI Afterburner\MSIAfterburner.exe]
"C:\Windows\system32\tasks\SlimDrivers Startup" [C:\Program Files\SlimDrivers\SlimDrivers.exe]
"C:\Windows\system32\tasks\{0A8189B5-6D6B-41DC-A6AA-843C89DEC7DC}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{6DC58469-389F-41A0-AB93-0ABED6DBB4D9}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{7AC08D00-EFB3-4A46-A984-639FADB54590}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{B1523938-17E3-4DDC-B797-D8DC4B53F839}" [D:\Programy\Steam\SteamApps\common\assettocorsa\apps\python\RsrLiveTime\wsLiveTime.exe]
"C:\Windows\system32\tasks\{D32111C8-62D2-452E-BD7C-451F5F8D2A77}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{D5929B3A-ECF3-42D6-A9DA-B8DBE429E041}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{DBFBFF87-C769-4A80-9AD0-44FF2ED336E4}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [2014-03-29 16:02]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\vriv0qfd.default
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- GFACE Experience Plugin - %ProfilePath%\extensions\cryenginebrowserplugin@crytek.com
- Transferuj.pl - %ProfilePath%\extensions\trtransferfill@transferuj.pl.xpi

ProfilePath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Przelewy24 - %ProfilePath%\extensions\p24ext@przelewy24.pl.xpi
- Transferuj.pl - %ProfilePath%\extensions\trtransferfill@transferuj.pl.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\vriv0qfd.default
AC987EE8037531807C5D7E6217A23501 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
EB41064BC07017F5694CF16B4DEF6B10 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
A9191AE22A8F1287B5E2DF33E3A57253 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U51
9B10927CFD0F7AD39E40C0E34005B1AD - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.510.13
546A28FBC44B984FD92530227BF6F5C2 - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll - Shockwave for Director / Shockwave for Director
0D80C49D9A4A3E096296C67BD015F614 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery

Profilepath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582
9FD6A1990289B9290563CA069CB74EF9 - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll - Shockwave Flash
A9191AE22A8F1287B5E2DF33E3A57253 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U51
9B10927CFD0F7AD39E40C0E34005B1AD - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.510.13
E83B541C71965CFA1DEFF846CD6E9ECD - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll - Google Update
20DB44BE448CF7E4F4A73CCF77AD311C - C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll - Battlelog Game Launcher
01D93217A9EE48DD37072B671378CC9C - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll - Silverlight Plug-In
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
AC987EE8037531807C5D7E6217A23501 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
546A28FBC44B984FD92530227BF6F5C2 - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll - Shockwave for Director / Shockwave for Director
0D80C49D9A4A3E096296C67BD015F614 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery
B83062F5BFFAF797DCA67464B58970D5 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll - ESN Sonar API
28986F0A2342A033345EF9E70D395E4F - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrlui.dll - Microsoft® Silverlight


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[2014-03-26 12:25]

Google Docs - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Last updated at time on date - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
Google Search - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Photo Zoom for Facebook - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi
AdBlock - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
avast Online Security - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Illimitux - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\mamnihopcnbfnbfnnneplcohmnkkpipb
Google Wallet - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://www.bing.com/search?q={searchTerms}"
"SearchAssistant"="http://www.bing.com/search?q={searchTerms}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{02D631E4-4222-4046-9394-539A490257F3} IDG Url="http://www.idg.pl?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{9AA9DCFC-8A3B-484F-A281-791B0FC2B787} IDG Url="http://www.idg.pl?q={searchTerms}"

==== Uninstall List x86 ======================

5-Mode Oscar Editor [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\OscarX7Mouse5Mode]
Adobe Flash Player 13 ActiveX [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX]
Adobe Flash Player 13 Plugin [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin]
Adobe Reader XI (11.0.06) - Polish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1045-7B44-AB0000000001}]
Adobe Shockwave Player 12.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Shockwave Player]
AIMP3 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AIMP3]
AMD Accelerated Video Transcoding [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8A6EB60F-BC70-101B-CACE-9D7794767A3C}]
AMD APP SDK Runtime [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A25FF1C0-80B6-4B8B-A551-DC525697A408}]
AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3825F8BD-F784-6FBB-A5CD-857559148007}]
AMD Drag and Drop Transcoding [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AF1B3F09-B291-6F7D-DCE1-2899A6730428}]
AMD Media Foundation Decoders [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F47F1D92-F4DF-4113-80B0-B58F2EB10F28}]
Any Video Converter 5.5.8 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Any Video Converter_is1]
Assetto Corsa [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 244210]
Auslogics Disk Defrag [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1]
avast Free Antivirus [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\avast]
Battlefield 3t [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{76285C16-411A-488A-BCE3-C83CB933D8CF}]
Battlelog Web Plugins [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Battlelog Web Plugins]
BitRaider Web Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\BitRaider Web Client]
Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}]
Catalyst Control Center [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{63326924-3CAF-C858-3A8F-8598C87019D7}]
Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D4B457B2-260F-C561-CA87-703BD3B724CA}]
Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}]
Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ECFD508E-68A2-91B2-46DD-1D03D783D94B}]
ccc-utility [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{73F96ACE-9249-D04D-E569-1D611D0982BB}]
CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A9C64319-932F-D02B-B14C-FFFC3EC49E77}]
CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D6CDB506-297D-AE70-0EF6-DE5185F961BE}]
CCC Help Czech [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}]
CCC Help Danish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}]
CCC Help Dutch [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}]
CCC Help English [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}]
CCC Help Finnish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}]
CCC Help French [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}]
CCC Help German [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1DE2BD51-0300-772D-5E18-F337D95D5687}]
CCC Help Greek [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{63822E89-11AA-F8EC-D433-F72A85799EC0}]
CCC Help Hungarian [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EDE361D5-35A5-DA7D-3462-C3DABD24029B}]
CCC Help Italian [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}]
CCC Help Japanese [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{275E9C49-C72F-D754-DEB7-77F10A9C00D8}]
CCC Help Korean [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C09DB932-7619-7B56-30E3-C0454811D6D7}]
CCC Help Norwegian [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}]
CCC Help Polish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{66361420-4905-AEB8-17AE-172FDD164A7E}]
CCC Help Portuguese [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}]
CCC Help Russian [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}]
CCC Help Spanish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{30049739-BE95-6591-B504-E6D7057D49CC}]
CCC Help Swedish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}]
CCC Help Thai [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5AF23993-7152-1620-E43F-1B4542FB4F84}]
CCC Help Turkish [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A0A3CE05-96CB-52E9-434E-074F3BB7807E}]
CCleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner]
Counter-Strike 1.6 NonSteam [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Counter-Strike 1.6 NonSteam v50]
CWK (Czasowy WyˆĄcznik Komputera) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CWK]
D3DX10 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E09C4DB7-630C-4F06-A631-8EA7239923AF}]
Dead Space [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6E6F22D7-8AD6-4A87-9A47-733E6E996F50}]
Deluxe Ski Jump 4 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Deluxe Ski Jump 4_is1]
Diablo II + Diablo II - Lord of Destruction PL 1.12a [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Diablo II + Diablo II - Lord of Destruction PL 1.12a]
ESN Sonar [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ESN Sonar-0.70.4]
F1 2013 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\RjEyMDEz_is1]
FanaLEDs [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\FanaLEDs]
Fraps [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fraps]
Galeria fotografii [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{207DA277-6A6D-4863-B535-129931D2BB21}]
Game Booster 3 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Game Booster_is1]
Geeks3D FurMark 1.13.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1]
Glary Utilities PRO 4.10 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Utilities 4]
Google Chrome [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
Google Update Helper [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}]
GRID 2 (c) Codemasters version 1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\R1JJRDI=_is1]
Intel(R) Management Engine Components [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}]
IntelR Trusted Connect Service Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{25E37535-8244-4A96-B707-E65E11B4A9D5}]
ipla 2.7 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ipla]
iRacing.com Race Simulation [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CBBB3C80-76F5-42B5-92A6-C4BF84796DCB}]
IRG Tool wersja 1.3.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{28A77156-5F90-4907-B503-0F0E0B847933}_is1]
Java 7 Update 51 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83217051FF}]
Java Auto Updater [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}]
K-Lite Codec Pack 10.4.0 Full [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KLiteCodecPack_is1]
Logitech Gaming Software 5.10 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{60D32CDC-E3BE-4578-BA10-29322307CDDC}]
Microsoft .NET Framework 4.5.1 (PLK) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C83B8B35-C2C4-3302-9A6E-C2AF1A59E8D6}]
Microsoft .NET Framework 4.5.1 (Polski) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045]
Microsoft .NET Framework 4.5.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4903D172-DCCB-392F-93A3-34CA9D47FE3D}]
Microsoft .NET Framework 4.5.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033]
Microsoft Games for Windows - LIVE Redistributable [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}]
Microsoft Games for Windows Marketplace [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}]
Microsoft Office Professional Plus 2010 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS]
Microsoft Silverlight [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}]
Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7299052b-02a4-4627-81f2-1818da5d550d}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9A25302D-30C0-39D9-BD6F-21E6EC160475}]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}]
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}]
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{95716cce-fc71-413f-8ad5-56c2892d4b3a}]
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3D6AD258-61EA-35F5-812C-B7A02152996E}]
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E7D4E834-93EB-351F-B8FB-82CDAE623003}]
Microsoft XNA Framework Redistributable 3.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}]
Movie Maker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2F2363F9-102C-448B-8E3E-02FCFE78A28D}]
Movie Maker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{45898170-E68C-4F02-AA35-C2186BF347A3}]
Movie Maker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}]
Mozilla Firefox 28.0 (x86 pl) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 28.0 (x86 pl)]
Mozilla Maintenance Service [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService]
MSI Afterburner 3.0.0 Beta 19 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Afterburner]
MSVCRT [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}]
MSVCRT110 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}]
My Game Long Name [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\UDK-568e2775-6e93-4013-9b41-0be15fda96e8]
NapiProjekt (2.2.0.2399) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NapiProjekt_is1]
NBA 2K14 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 255480]
NVIDIA PhysX [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}]
OpenAL [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\OpenAL]
Origin [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Origin]
Photo Common [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}]
Photo Common [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FBA73805-0F67-428B-8E4F-FAE16A452685}]
Photo Gallery [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F929651-F516-4956-90F2-FFBD2CD5D30E}]
Photo Gallery [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}]
PlayReady PC Runtime x86 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}]
Podstawowe programy Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FA12037C-B6FA-4825-86BC-D58AA6A9CC24}]
Rayman Legends [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\UmF5bWFuTGVnZW5kcw==_is1]
Realtek Ethernet Controller Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}]
Realtek Ethernet Diagnostic Utility [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}]
Realtek High Definition Audio Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}]
rFactor (remove only) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\rFactor]
rFactor2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\rFactor2]
Richard Burns Rally [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{92C7D009-A464-4948-A980-7A3E28CB2F49}]
RivaTuner Statistics Server 6.1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\RTSS]
Samsung Kies [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{758C8301-2696-4855-AF45-534B1200980A}]
Samsung Kies [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}]
SAMSUNG USB Driver for Mobile Phones [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}\25_escape]
SAMSUNG USB Driver for Mobile Phones [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}]
SlimDrivers [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A5457401-D56A-43F2-9524-78E54A7FC07A}]
SopCast 3.5.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SopCast]
SpeedFan (remove only) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SpeedFan]
Spelunky HD 1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Spelunky HD 1.0]
Star Wars The Old Republic [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\swtor_swtor]
Star Wars: The Old Republic [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}]
Steam [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Steam]
swMSM [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{612C34C7-5E90-47D8-9B5C-0F717DD82726}]
Teslagrad 1.0.4 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Teslagrad 1.0.4]
uTorrent [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
VLC media player 2.1.3 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
WapSter AQQ [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AQQ]
Windows Live Communications Platform [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{03D562B5-C4E2-4846-A920-33178788BE00}]
Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5E094C92-6288-4F43-AA9A-D452D0218F3F}]
Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite]
Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8256F87F-8554-4457-8C3D-3F3324697D9F}]
Windows Live Installer [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}]
Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}]
Windows Live PIMT Platform [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E3445598-4424-4EE2-B71C-C23325F7FB71}]
Windows Live SOXE [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6B6923B9-8719-425B-916C-CD2908F31AAF}]
Windows Live SOXE Definitions [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}]
Windows Live UX Platform [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}]
Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2AC01935-3774-4981-98C8-14E93C14372C}]
Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{46BC55A2-B4CE-46B5-8303-A2076B899505}]
WinRAR 5.10 beta 1 (32-bit) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver]

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage deleted successfully

==== Empty IE Cache ======================

C:\Users\Odyniec\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Odyniec\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Odyniec\AppData\Local\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Odyniec\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=378 folders=54 32927441 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Odyniec\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Odyniec\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on 2014-05-05 at 13:51:48,57 ======================

[NieWiem]

Musisz wyłączyć program AV na czas trwania tego skanowania.
Pobierz ZOEK.
Uruchom jako administrator.
W oknie programu wklej następujący skrypt:

Kod: Zaznacz wszystko

SopCast 3.5.0;u
{C007DADD-132A-624C-088E-59EE6CF0711F};c
process;
startupall;
filescrm;
firefoxlook;
chromelook;
autoclean;

Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.

[odyniec]

Spoiler:

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Odyniec on 2014-05-05 at 14:32:33,19.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: D:\Pobrane\zoek(1).exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-05-05-115148.log 64664 bytes

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Running Processes ======================

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\atieclxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
D:\Program Files\iRacing\iRacingService.exe
C:\Windows\system32\PnkBstrA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\MSI Afterburner\MSIAfterburner.exe
D:\Pobrane\zoek(1).exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet

==== Deleting Services ======================


==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-559866511-2448697629-530573241-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"MSI"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe"
"Oscar"="C:\Program Files\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"Start WingMan Profiler"="C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSI"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe"
"Oscar"="C:\Program Files\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BCSSync"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesPreload]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KiesPreload"
"hkey"="HKCU"
"command"="D:\\Programy\\Kies\\Kies.exe /preload"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesTrayAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KiesTrayAgent"
"hkey"="HKLM"
"command"="D:\\Programy\\Kies\\KiesTrayAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OfficeSyncProcess]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="OfficeSyncProcess"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE\""


==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 12:44]
C:\Windows\tasks\GlaryInitialize 4.job --a------ C:\Program Files\Glary Utilities 4\Initialize.exe [2014-04-14 10:01]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-13 14:02]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-13 14:02]
C:\Windows\tasks\SlimDrivers Startup.job --a------ C:\Program Files\SlimDrivers\SlimDrivers.exe [2013-09-24 13:49]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\system32\tasks\Game_Booster_AutoUpdate" [C:\Program Files\IObit\Game Booster 3\AutoUpdate.exe]
"C:\Windows\system32\tasks\GlaryInitialize 4" [C:\Program Files\Glary Utilities 4\Initialize.exe]
"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\Windows\system32\tasks\GU4SkipUAC" [C:\Program Files\Glary Utilities 4\Integrator.exe]
"C:\Windows\system32\tasks\MSIAfterburner" [C:\Program Files\MSI Afterburner\MSIAfterburner.exe]
"C:\Windows\system32\tasks\SlimDrivers Startup" [C:\Program Files\SlimDrivers\SlimDrivers.exe]
"C:\Windows\system32\tasks\{0A8189B5-6D6B-41DC-A6AA-843C89DEC7DC}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{6DC58469-389F-41A0-AB93-0ABED6DBB4D9}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{7AC08D00-EFB3-4A46-A984-639FADB54590}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{B1523938-17E3-4DDC-B797-D8DC4B53F839}" [D:\Programy\Steam\SteamApps\common\assettocorsa\apps\python\RsrLiveTime\wsLiveTime.exe]
"C:\Windows\system32\tasks\{D32111C8-62D2-452E-BD7C-451F5F8D2A77}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{D5929B3A-ECF3-42D6-A9DA-B8DBE429E041}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\{DBFBFF87-C769-4A80-9AD0-44FF2ED336E4}" [D:\Program files\FIFA 13\Game\fifa13.exe]
"C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [2014-05-05 14:14]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\vriv0qfd.default
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- GFACE Experience Plugin - %ProfilePath%\extensions\cryenginebrowserplugin@crytek.com
- Transferuj.pl - %ProfilePath%\extensions\trtransferfill@transferuj.pl.xpi

ProfilePath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Przelewy24 - %ProfilePath%\extensions\p24ext@przelewy24.pl.xpi
- Transferuj.pl - %ProfilePath%\extensions\trtransferfill@transferuj.pl.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\vriv0qfd.default
AC987EE8037531807C5D7E6217A23501 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
EB41064BC07017F5694CF16B4DEF6B10 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
A9191AE22A8F1287B5E2DF33E3A57253 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U51
9B10927CFD0F7AD39E40C0E34005B1AD - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.510.13
546A28FBC44B984FD92530227BF6F5C2 - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll - Shockwave for Director / Shockwave for Director
0D80C49D9A4A3E096296C67BD015F614 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery

Profilepath: C:\Users\Odyniec\AppData\Roaming\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582
9FD6A1990289B9290563CA069CB74EF9 - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll - Shockwave Flash
A9191AE22A8F1287B5E2DF33E3A57253 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U51
9B10927CFD0F7AD39E40C0E34005B1AD - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.510.13
E83B541C71965CFA1DEFF846CD6E9ECD - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll - Google Update
20DB44BE448CF7E4F4A73CCF77AD311C - C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll - Battlelog Game Launcher
01D93217A9EE48DD37072B671378CC9C - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll - Silverlight Plug-In
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
AC987EE8037531807C5D7E6217A23501 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
546A28FBC44B984FD92530227BF6F5C2 - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll - Shockwave for Director / Shockwave for Director
0D80C49D9A4A3E096296C67BD015F614 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery
B83062F5BFFAF797DCA67464B58970D5 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll - ESN Sonar API
28986F0A2342A033345EF9E70D395E4F - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrlui.dll - Microsoft® Silverlight


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[2014-05-05 14:14]

Google Docs - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Last updated at time on date - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
Google Search - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Photo Zoom for Facebook - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi
AdBlock - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
avast Online Security - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Illimitux - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\mamnihopcnbfnbfnnneplcohmnkkpipb
Google Wallet - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Odyniec\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{02D631E4-4222-4046-9394-539A490257F3} IDG Url="http://www.idg.pl?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{9AA9DCFC-8A3B-484F-A281-791B0FC2B787} IDG Url="http://www.idg.pl?q={searchTerms}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SopCast deleted successfully

==== Empty IE Cache ======================

C:\Users\Odyniec\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Odyniec\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Odyniec\AppData\Local\Mozilla\Firefox\Profiles\xckjo93i.default-1390682528582\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Odyniec\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=378 folders=54 32927441 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Odyniec\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Odyniec\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 2014-05-05 at 14:42:29,96 ======================

[NieWiem]

Wygląda, że jest OK.

Na koniec pobierz i zainstaluj Malwarebytes' Anti-Malware.
Podczas instalacji odznacz opcję "free pro-version trial" czy jakoś tak.
Uaktualnij i przeprowadź skanowanie.
Załącz wynikowy raport.

[odyniec]

Czysto

Spoiler:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2014-05-05
Scan Time: 15:02:15
Logfile:
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.05.06
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Odyniec

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 242419
Time Elapsed: 4 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

[NieWiem]

Pobierz DelFix na pulpit.
Uruchom jako administrator.
Zaznacz opcje:

• Remove disinfection tools
• Create registry backup
• Purge system restore

Kliknij Run i przedstaw raport po działaniu programu.
Delfix powinien posprzątać po wszystkim.

Autor postu otrzymał pochwałę