OTL Extras logfile created on: 18.04.2018 11:04:56 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = F:\
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.16299.0)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
 
3,47 Gb Total Physical Memory | 1,72 Gb Available Physical Memory | 49,51% Memory free
4,78 Gb Paging File | 2,74 Gb Available in Paging File | 57,26% Paging File free
Paging file location(s): ?:\pagefile.sys
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 450,88 Gb Total Space | 384,23 Gb Free Space | 85,22% Space Free | Partition Type: NTFS
Drive D: | 13,65 Gb Total Space | 1,64 Gb Free Space | 12,05% Space Free | Partition Type: NTFS
Drive F: | 7,46 Gb Total Space | 3,84 Gb Free Space | 51,48% Space Free | Partition Type: FAT32
 
Computer Name: LAPTOP-BLJAAKE0 | User Name: Tomasz Mateusiak | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)
Directory [Scan with Trojan Remover] -- C:\Program Files (x86)\Trojan Remover\rmvtrjan.exe /d "%1" (Simply Super Software)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)
Directory [Scan with Trojan Remover] -- C:\Program Files (x86)\Trojan Remover\rmvtrjan.exe /d "%1" (Simply Super Software)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = C9 E0 D7 9F 02 9A D3 01  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 1
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 1
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 1
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0510E94F-DCAC-471E-8189-9FABDCCF35FC}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{138EAE01-13B4-4225-96C7-D626F0018E3B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{24F6A4A6-0309-443B-92BF-34B405FA33B2}" = rport=137 | protocol=17 | dir=out | app=system | 
"{372B04A7-A832-4CBC-B120-54527BE9F89B}" = lport=138 | protocol=17 | dir=in | app=system | 
"{3F9F75CC-04FD-482D-B337-A0503384618E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{42A2E851-EE8D-4A25-977A-4D35AB5A0508}" = lport=139 | protocol=6 | dir=in | app=system | 
"{47F0F204-5BA6-4E43-B0FD-211A4F92C4A1}" = lport=137 | protocol=17 | dir=in | app=system | 
"{4AA2C098-7E9E-4EBE-9BDD-514C357A6A6A}" = lport=445 | protocol=6 | dir=in | app=system | 
"{5AFCC073-D435-4769-80D8-7976664D7B29}" = rport=138 | protocol=17 | dir=out | app=system | 
"{B48AD21B-91C1-4A5C-8B61-E3525DFF5B3D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{BA75326D-46CF-448D-8A65-0D679E480583}" = rport=445 | protocol=6 | dir=out | app=system | 
"{E2595F84-9D54-4293-B718-A7DCD8334691}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0087A037-62A9-4BDB-B9B3-A3F009B2EDA3}" = dir=out | name=@{a278ab0d.marchofempires_3.1.0.11_x86__h6adky7gbf63m?ms-resource://a278ab0d.marchofempires/resources/marchofempires} | 
"{050CE098-FC6C-4B87-B53D-86E686CC1088}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{0511BBCA-F34F-41FA-87DB-6D58BC207AD8}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{07905393-B401-4303-804B-E8D6BBB4F2C5}" = dir=in | app=c:\program files (x86)\common files\mcafee\mmsshost\mmsshost.exe | 
"{0813EE1B-1DE5-4AD8-A461-B4207A0A3E51}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.12894.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{091D0C9C-232F-48F2-8FA6-A76B38325108}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd14\movie\powerdvdmovie.exe | 
"{099BAB12-39A1-4B9D-89E9-BEBD63A17ABE}" = dir=out | name=@{microsoft.bingnews_4.23.10923.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{0A2D8728-4155-4556-9252-F9C7B90D1AFD}" = dir=in | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{0AF7F025-DECC-43F3-80EB-0F194F21BCA9}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{13AC558C-78D2-486D-B202-CD5B1F85C2D5}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{14AB736C-B31D-42E0-9BF0-C3C3D38B2CE4}" = dir=in | name=@{microsoft.microsoftofficehub_17.8830.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{169BD6EC-C0E0-4477-B777-555FF8BDBE34}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.16299.371_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{16FD0441-DF0A-4A93-ACAC-1B51B7216826}" = dir=out | name=@{microsoft.lockapp_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{17D790F1-7175-4C07-8DB9-B8C12AF35FB3}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{18976386-B952-4D39-B109-8BF7B847BA87}" = dir=out | name=@{microsoft.accountscontrol_10.0.14393.187_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{18CC59DD-4F23-4C12-B9FE-A54091910A5C}" = dir=out | name=@{microsoft.lockapp_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{19520B12-8422-46BF-BCC9-F9FD7FCC6045}" = dir=out | name=autodesk sketchbook | 
"{1A5A8EBB-8F21-4BE0-BAD4-3053BC39E037}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{1A78235B-535F-4C26-848A-B504AC8EF420}" = dir=out | name=@{microsoft.windowsstore_11803.1001.8.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{1BFDEDCE-28E9-4714-86BB-35896F25C682}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\ucmapi.exe | 
"{1C07D0B8-F744-4E65-A696-550706ED722E}" = dir=out | name=@{microsoft.skypeapp_12.1811.248.1000_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{1C7314D2-427F-4E1E-B106-704237BC8A46}" = dir=out | name=@{microsoft.mspaint_4.1803.21027.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | 
"{1CF3859C-2633-41EC-841E-A1F1072441E1}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{1F12CAA4-D786-475E-9179-1FB1E323EB3A}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{20386F4C-FA96-4A7E-8B00-D2A30369CD49}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.12894.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{218C090F-035B-4E35-94BB-055A76245078}" = dir=out | name=@{microsoft.windowsmaps_5.1711.10477.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{24D4BA53-CE1E-41DF-98D6-210E8D2C40C2}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{25575C3B-14F3-49E5-9C36-C848B64122D4}" = dir=in | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{257BE9C2-5652-490B-8CAF-E5B753658C18}" = dir=out | name=microsoft solitaire collection | 
"{25EE70D5-F776-4ECD-838A-DC07401C90B2}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{2976DFE4-78B6-477B-BA5A-569EDF38443A}" = dir=out | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{2994DB27-CAD7-471A-A31F-71E0848A8852}" = dir=out | name=@{microsoft.xboxidentityprovider_12.39.13003.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 
"{2C5D1803-57F1-4C7D-902D-8D955684FABF}" = dir=out | name=@{microsoft.zunemusic_10.18011.13411.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{2D794A2C-1F78-4D54-AD1C-C2980E52FDC6}" = dir=out | name=@{king.com.bubblewitch3saga_4.2.2.0_x86__kgqvnymyfvs32?ms-resource://king.com.bubblewitch3saga/resources/appname} | 
"{2EDA2E5D-D137-473F-BBA0-D8A4ABBD3E09}" = dir=out | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{2F5E042E-A04B-49A6-B85A-799CD76BFA99}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.14393.187_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{3268F645-2D54-42D1-BB08-B0BCCC0BB924}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{34AB402C-49D3-42CF-BFD7-D160C87E27D0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{3591F8A9-2BB0-42CC-A224-4093B7B1824B}" = dir=in | name=@{microsoft.windows.photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{361E428F-7949-4E98-9B43-B52CA2C350EF}" = dir=out | name=@{microsoft.accountscontrol_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{36C02D7D-86E5-411C-ADCB-F697C7E9E04F}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{371591DE-437A-401A-8B7C-0AEBCAA1DA65}" = dir=out | name=@{microsoft.oneconnect_3.1710.3044.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{3835259E-B8D5-4B81-AAF5-F3F04CB7CFAB}" = dir=out | name=windows_ie_ac_001 | 
"{3C1A4A76-E501-4ED8-AD0F-8E330FC06B24}" = dir=out | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{3CF7A28F-B2B9-4C34-83B2-516A2122A0D6}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | 
"{3D1E17CE-A382-462C-9442-DC8463CC680A}" = dir=in | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{3F051247-193A-4D59-BAE4-6752A2EC075A}" = dir=out | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{40046B06-0A88-402D-BBA1-1A6628E415C3}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd14\movie\powerdvd cinema\powerdvdcinema.exe | 
"{462FE908-339F-415E-BE00-1DE381B8A693}" = dir=in | name=@{microsoft.microsoftedge_41.16299.371.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{4718DA57-244F-4D30-9C42-A58D9D71349B}" = dir=out | name=amazon | 
"{475A714B-4A1E-483C-8F7C-C260D0FD5FBD}" = dir=out | name=xbox tcui | 
"{488E3A3C-C9BC-42CA-A728-942F9A11444B}" = dir=out | name=@{microsoft.gethelp_10.1706.10602.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | 
"{48B1BA36-C932-4099-AD9F-BEE18B1D3BD1}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{49AEA726-20D8-4AD0-BB79-3BEFE8D5AFC9}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{4A6314DC-362C-4009-BE64-38E566459775}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{4B5C4D2B-F109-4B87-9E64-D6BAAC3DEA56}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | 
"{4FA55EFB-1138-4708-9869-B66C70D6FE94}" = dir=out | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{50EC3E86-30BC-4D52-9CDE-283449EA03DC}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{53BBB80F-75B0-4330-9B82-3AFFF6BE2804}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{550862ED-A6C9-4994-BAD8-8CB2DE8E2138}" = dir=out | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{55E257E3-AB13-4C74-922E-F5BDC1AD8C99}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1712.811.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{5686D106-5119-4E27-B50D-8BC71739E1FD}" = dir=in | name=@{a278ab0d.marchofempires_3.1.0.11_x86__h6adky7gbf63m?ms-resource://a278ab0d.marchofempires/resources/marchofempires} | 
"{578815EA-0A4D-4F90-B837-E800511BB619}" = dir=out | name=@{microsoft.windows.photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{5992559D-FEE0-4E6F-8C50-B5F7C6D6050C}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{59EC150F-90FB-4AAF-870F-DD95AB6893F6}" = dir=in | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{5C4A55BA-F5CD-4306-94F7-B83EC27F6102}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{5E72DE54-E868-462C-BF63-3CE7B1A5FF93}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{5F3565B9-17AE-4756-89F6-29B3CCCEB278}" = dir=out | name=@{microsoft.microsoftedge_41.16299.371.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{62698587-F339-40F2-8C7B-63171A07C31F}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{664145A3-813F-4ACC-A012-EA16E456E159}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{676BEC6E-7AFF-4528-82F4-3ED5DDD3DE61}" = dir=out | name=minecraft for windows 10 | 
"{678F5CAF-EA3E-4672-ACEB-8E151ADC91A8}" = dir=out | name=@{microsoft.getstarted_6.7.3462.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{68A3C0AD-7103-4871-B08A-F38A8169E79E}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{6BC48AF0-12AE-407F-88CD-AAA4E90631B8}" = dir=in | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{6D558657-D75F-4668-8835-06705669AD72}" = dir=out | name=@{microsoft.windowscamera_2018.227.30.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} | 
"{6E338E06-27D8-4A5A-96E0-2996DB93C804}" = dir=out | name=@{microsoft.microsoftofficehub_17.8830.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{707E9253-42EA-4ECA-AC78-EB04DF948789}" = dir=out | name=xbox game bar | 
"{709D84BD-EA16-4486-93A9-D7E8B54DD51E}" = dir=out | name=@{microsoft.windows.holographicfirstrun_10.0.16299.125_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.holographicfirstrun/resources/pkgdisplayname} | 
"{70E9143B-3316-4785-A42A-1DADE9FAECBC}" = dir=in | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{735F380A-F53D-4990-B64C-E196737F2EF4}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{74F7714D-8B5F-4FDB-8623-9A099458FA61}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.16299.371_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{74FADB9B-18CA-447A-A16F-3151C40DFB0C}" = dir=out | name=@{microsoft.bingweather_4.23.10923.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{7AF2D2E6-E084-4F61-B6BA-89F985E8AE83}" = dir=in | name=microsoft sticky notes | 
"{7BD85D1F-5E2E-4D8E-A93E-700C61F5AF1A}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{7C0FA457-D988-4B18-A0B3-2CEF4275520C}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{7C31A7D0-C79D-4D22-890A-B91B236BEE9A}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{800EF6B1-6271-48A7-AAC8-80F6740D11ED}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd14\powerdvd14agent.exe | 
"{802839B9-EEF7-43EA-9536-0AD03A9C845B}" = dir=in | name=onenote | 
"{80801F65-708B-4EB1-8C22-EA9E56A5163D}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{813D5222-DE30-49ED-AA1D-CDDE35222DDC}" = dir=out | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{81C94AC3-1897-4DE1-B40E-0DAE42E292BB}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{81FD67B9-267D-4EA6-A412-34BF9AFC86EB}" = dir=out | name=@{microsoft.people_10.3.3472.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{832A47F6-2C24-4D78-9310-8AD629B9B47D}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 
"{83DE96E2-8EC0-467F-B95E-ED1E4F04BE48}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{85920342-7458-445F-8B90-DF4507683E19}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{869C4A0D-AEDA-4423-B1B7-7DD2F6C3F6FE}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{882EEA10-B7EF-4698-9929-9A0B514EF725}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{8B49FCEF-7C19-4625-AAA6-7EEE6F950C29}" = dir=in | app=c:\program files\cyberlink\powerdirector14\pdr10.exe | 
"{925304BB-6D7E-4C38-8078-A5E5B292FC73}" = dir=out | name=hp jumpstart | 
"{92CA088C-C498-4DCE-BF93-619DC65E6BEE}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{92E515AC-BECF-4295-B69D-27F3BCC373FE}" = dir=out | name=onenote | 
"{93AE875E-50EB-433E-B8C4-19103EEEB9B3}" = dir=out | name=@{microsoft.microsoft3dviewer_3.1803.29012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | 
"{99324DD6-72CC-4A79-8243-2B3751685321}" = dir=in | name=print 3d | 
"{9ACA4F5B-D069-4A22-B639-047ACDEDEFD8}" = dir=out | name=@{microsoft.lockapp_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{9CACECB5-7BEB-422D-AA35-98209CFC4EFC}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.14393.187_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{9D011F47-6D36-43B3-8CD1-3DDCB02BDC04}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{9D52EE07-4041-45DF-9E1E-9070C84F3E6E}" = dir=out | name=@{microsoft.zunevideo_10.17122.16211.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{9F0F7B02-A145-410B-8DB1-C1D320DCE0EE}" = dir=out | name=print 3d | 
"{A0D289E5-37B4-4CEB-85F8-A5F58404297C}" = dir=out | name=@{microsoft.storepurchaseapp_11803.1001.8.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | 
"{A0E80C69-3179-4B33-89FF-DFDA0F51E249}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.9126.21535.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{A167EC5A-14B5-4EB4-9DC9-546DB37BEC08}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{A26FE122-EE65-4A5F-9432-C133873770BB}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{A2F6A671-178E-45BA-B6A6-0C5178E9CF41}" = dir=in | name=@{microsoft.windowsstore_11803.1001.8.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{A574F43B-2B06-4D48-AD1F-C1C7F5857ED4}" = dir=in | name=hp jumpstart | 
"{A779F3BF-4266-4D76-9428-3A46022204DC}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.9126.21535.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{A7EC5F50-2A33-4DE0-9CBA-BD2A55F07F35}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{A9B7000E-4584-4209-972A-794527D83AE6}" = dir=in | name=autodesk sketchbook | 
"{AD843720-3716-4F8D-A9CB-B0C9E7A00FB5}" = dir=in | name=minecraft for windows 10 | 
"{AE6C9D66-FE17-442B-99D2-54170244F32A}" = dir=in | name=@{microsoft.skypeapp_12.1811.248.1000_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{AF521199-06F1-468C-BEE6-F39693FC2175}" = dir=out | name=windows_ie_ac_001 | 
"{AF7E12E7-3971-41F9-BD32-AA2E5086E64C}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{B0D761CA-4B33-4558-8950-7013A049ABCE}" = dir=out | name=xbox | 
"{B4E66A8E-E414-487E-8936-E838A36FF78E}" = dir=out | name=microsoft sticky notes | 
"{B5E7F6B2-462E-4997-8483-6B15737787B3}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{BB0FE421-4C4B-40DB-BD03-C09DAEB81DE8}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{BC92D9A0-670B-4B95-8191-2DFD47F98A3F}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{BFF86CDA-9320-4F5D-931D-15625E42A1B7}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{C296920C-13A2-4B81-97F2-2F73F0CEEE6F}" = dir=in | name=@{microsoft.zunemusic_10.18011.13411.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{C2A22FD5-5BDD-44C4-81B6-243E3EE8EA37}" = dir=in | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{C4E3DD0E-24ED-4D3D-8796-7F7B9853A09F}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{C65C6BBA-F2F9-481F-9E55-F2065F1D71A3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\lync.exe | 
"{C870A10A-66EC-4827-ADAD-84B292950094}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd14\kernel\dms\clmsserverpdvd14.exe | 
"{C89929FF-3C04-404D-BAF2-0A5C26832D4B}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{CA532334-F162-4841-9F26-98F77565DB0D}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{CB67CB78-B6AF-433E-AC8B-579677EC36AA}" = dir=in | name=@{microsoft.oneconnect_3.1710.3044.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{CC9BEA21-649F-4A49-8C4D-CF510086192C}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.16299.334_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | 
"{CE28FEC6-E77A-4EA6-89FA-5AADB268120C}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{D04911F4-7B10-4783-B19D-D77B00BAA03E}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd14\powerdvd.exe | 
"{D0EB62A8-7564-4BC4-AE7E-4D0ED390770C}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1712.811.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{D1378D53-8F01-4B8B-8243-6E6825893A0C}" = dir=in | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{DD94B908-D52C-4C65-ADAB-485DEEF03A41}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{E2F9DD46-33B4-4CEB-B34D-DC920E7721DF}" = dir=out | name=3d builder | 
"{E59DAE9B-F891-4E7E-9429-4F3502F47BFE}" = dir=out | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{E667990F-9ACB-47A2-A05D-FD644EC26D8C}" = dir=in | name=@{microsoft.zunevideo_10.17122.16211.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{E71F5A8A-9DE8-4823-9D95-43DC9E38644D}" = dir=in | app=c:\program files\common files\mcafee\mmsshost\mmsshost.exe | 
"{EDB7E9DA-4477-4220-BACC-09D8581C19C7}" = dir=out | name=microsoft pay | 
"{F13A060C-A920-4A2C-B856-81EF867BA758}" = dir=out | name=candy crush soda saga | 
"{F17511C8-B6CD-431F-8BF6-47018355BB2F}" = dir=in | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{F30FF09E-7003-4D93-A7FF-F25A98903389}" = dir=out | name=@{microsoft.windowscalculator_10.1803.711.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | 
"{F4F1B4DC-6D2E-469A-9F49-B0A6A8F26A02}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{F72B0166-6DB3-4016-BE5B-1280DCA8D024}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{F7F46B13-5340-4DF2-9735-365885EF20F3}" = dir=out | name=@{microsoft.accountscontrol_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{F97916DB-9823-416E-B3B4-66D9CF1BF182}" = dir=out | name=shell input application | 
"{F99331E2-FEA2-458E-AA8E-ABCC9A29AAEB}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{FE754B3F-3ECD-4C45-9995-DC0C08E162C2}" = dir=in | name=xbox | 
"{FF7D3678-1428-4449-A594-15BCA1B5091C}" = dir=out | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{FFE2E979-F03D-4CAF-865F-F8B27CC93406}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{11E71CF4-6BB7-E314-B3EE-0D4BAD949321}" = Catalyst Control Center Next Localization CHT
"{2999BC6A-8EF9-2281-33EB-10FD4822078F}" = Catalyst Control Center Next Localization BR
"{2CB12285-90BF-469F-B973-34495ABAF048}" = HP ePrint SW
"{2F58F9CB-B85F-4615-ADFB-09437D3CD469}" = Intel® PROSet/Wireless WiFi Software
"{34BE4C3B-E9B4-C362-4FFE-1A7B91D8AB3E}" = Catalyst Control Center Next Localization FR
"{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" = Malwarebytes (wersja 3.4.5.2467)
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{4348DDBB-D1F4-E8B4-BCA3-03CA6E10C782}" = Catalyst Control Center Next Localization ES
"{5BBA9BFD-9C57-38F7-2055-745C64CF740C}" = Catalyst Control Center Next Localization EL
"{5C690381-6AF5-4374-B50C-02F0390E9980}" = HP ePrint SW
"{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}" = Energy Star
"{63e915e3-b21d-462a-9583-24a7933961a6}" = Intel(R) PRO/Wireless Driver
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6EA40B6E-0EC9-B8AE-F0A2-738AE5ADED5C}" = Catalyst Control Center Next Localization KO
"{74D8A73F-E3EF-6691-4216-274658AE4349}" = Catalyst Control Center Next Localization DA
"{77AB3ADA-47D1-A1C8-C2C4-FC524D2F52DC}" = Catalyst Control Center Next Localization FI
"{77C4E164-2FBB-AD94-124E-DFA7846F091C}" = Catalyst Control Center Next Localization SV
"{7E3CDECC-B7B2-6E53-CAE3-5F8C8565C269}" = Catalyst Control Center Next Localization NL
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{97223B2C-6406-BAA1-DE99-53D0447BD7C8}" = Catalyst Control Center Next Localization RU
"{9CBC649D-0452-A63D-A523-FF8DCFE4556E}" = Catalyst Control Center Next Localization DE
"{A12670B6-84D8-AE4D-0B74-4C4EAD5E205D}" = AMD Start Now
"{A1C31BA5-5438-3A07-9EEE-A5FB2D0FDE36}" = Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.23506
"{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{A852482E-E376-B3BB-6717-8993EF74F134}" = Catalyst Control Center Next Localization IT
"{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727
"{B0B194F8-E0CE-33FE-AA11-636428A4B73D}" = Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23506
"{B310214A-F44A-762F-B2CD-C5DD7CBA5F30}" = Catalyst Control Center Next Localization CHS
"{C48F97E5-954D-7D92-5F53-768024A6E1B4}" = AMD Settings
"{CB8AA16C-EB11-B27E-CB0E-CE015C5F85E4}" = Catalyst Control Center Next Localization TH
"{CD709202-55BA-4093-C8B7-85E472690CA7}" = Catalyst Control Center Next Localization NO
"{CDF59444-633F-EFF0-ABBD-99DA67E04273}" = Catalyst Control Center Next Localization CS
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{D1E8F2D7-7794-4245-B286-87ED86C1893C}" = HP Registration Service
"{D4DD8F3F-3FC2-FC5B-2E4D-3C86C1B402FA}" = Catalyst Control Center Next Localization TR
"{D60F3E93-72D6-ADE1-E7C1-842CD828A47A}" = Catalyst Control Center Next Localization JA
"{D711D91A-127D-4A11-BA83-634868AD8016}" = HP ePrint SW
"{DBF2ECF5-63D8-AA74-CEDD-2F2313991ADB}" = AMD Install Manager
"{DDC725DE-EFB4-6A2C-21BD-3F2B69E44DD9}" = Catalyst Control Center Next Localization PL
"{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" = HP Touchpoint Analytics Client
"{EA274518-738D-4A48-A1CB-596173D4C6A2}" = HP ePrint SW
"{EE63D5CD-2A9D-99A4-28C3-480678FB52FC}" = Catalyst Control Center Next Localization HU
"AMD Catalyst Install Manager" = AMD Install Manager
"HP_Documentation" = HP Documentation
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VulkanRT1.0.26.0" = Vulkan Run Time Libraries 1.0.26.0
"WUCCCApp" = AMD Settings
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03ED1397-7E72-4F6E-A0F0-2994A0A13421}" = HP ePrint SW
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{0867A88D-764F-366E-9E21-130DA8B472C3}" = Dropbox 25 GB
"{099218A5-A723-43DC-8DB5-6173656A1E94}" = Dropbox Update Helper
"{099DAD2B-56C5-4919-9F82-418C2A018CAE}" = HP Wireless Button Driver
"{0C5D69BD-B518-46DB-8471-506CD27F9478}" = HP Audio Switch
"{1045AB6F-6151-3634-8C2C-EE308AA1A6A7}" = Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23506
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{15134cb0-b767-4960-a911-f2d16ae54797}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22154f09-719a-4619-bb71-5b3356999fbf}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
"{23daf363-3020-4059-b3ae-dc4ad39fed19}" = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506
"{29E20347-C62F-4657-938E-876A182B67F1}" = HP System Event Utility
"{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727
"{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}" = CyberLink Power Media Player 14
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}" = Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
"{4E91D71A-2802-ACE5-C5FB-D083E5F7A4C4}" = AMD Settings
"{51c8ad09-d9b5-478f-8dfe-6a5e040d7e7c}_is1" = Testy B 2017
"{5b1a1d22-bd59-44e0-a954-e2f18ec43a23}" = HP ePrint SW
"{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{64228DFB-7450-49B7-935C-B97342CB6659}" = HP Customer Experience Enhancements
"{6468C4A5-E47E-405F-B675-A70A70983EA6}" = HP Sure Connect
"{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}" = HP Recovery Manager
"{65AD78AD-D23D-3A1E-9305-3AE65CD522C2}" = Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23506
"{6BADCD73-E925-46F7-A295-FF2448632728}" = CyberLink PowerDirector 14
"{6BB00205-DC64-4E3D-89DD-437D72860E94}" = HP Support Solutions Framework
"{6FA09B91-5D97-45A9-95E9-50F635C98043}" = HP Support Assistant
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{8406D066-9C29-4765-BA10-8B1AE798404E}" = Intel(R) Wireless Bluetooth(R)
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}" = OEM Application Profile
"{B7AFAF92-D1C8-49A0-B34A-B5DAF9C9D5C6}" = UpdateAssistant
"{B90CB0DE-2E60-41C4-9857-466EB98192BF}" = HP JumpStart Launch
"{B9ADB0F9-459B-4E6B-A021-0F38C73FC060}" = HP ePrint SW
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{D5C69738-B486-402E-85AC-2456D98A64E4}" = Asystent aktualizacji do systemu Windows 10
"{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}" = HP JumpStart Bridge
"{ed4a5da7-ac62-4aa5-9502-7b4de55e8cb5}" = Oprogramowanie Intel® PROSet/Wireless
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727
"Mega Fakturka_is1" = Mega Fakturka
"Trojan Remover_is1" = Trojan Remover
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-2797051153-2761639709-1988287154-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"OneDriveSetup.exe" = Microsoft OneDrive
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 18.04.2018 05:22:22 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\V01.chk” w trybie odczytu lub
 zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa 
dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:22:32 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\V01.chk” w trybie odczytu lub
 zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa 
dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:22:42 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\V01.chk” w trybie odczytu lub
 zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa 
dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:22:42 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 439
Description = taskhostw (1776,R,0) WebCacheLocal: Nie można dokonać zapisu lustrzanego
 nagłówka pliku C:\Users\Tomasz Mateusiak\AppData\Local\Microsoft\Windows\WebCache\V01.chk.
 Błąd -1032.
 
Error - 18.04.2018 05:22:52 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat” w trybie odczytu
 lub zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa
 dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:22:56 | Computer Name = LAPTOP-BLJAAKE0 | Source = Microsoft-Windows-Immersive-Shell | ID = 2484
Description = Działanie pakietu Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy+CortanaUI
 zostało zakończone, ponieważ operacja wstrzymywania pakietu trwała zbyt długo.
 
Error - 18.04.2018 05:23:00 | Computer Name = LAPTOP-BLJAAKE0 | Source = Application Hang | ID = 1002
Description = Program SearchUI.exe w wersji 10.0.16299.251 przestał współpracować
 z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
 informacji na temat tego problemu, sprawdź historię problemu w oknie Zabezpieczenia
 i konserwacja w Panelu sterowania.    Identyfikator procesu: 178    Godzina rozpoczęcia:
 01d3d6f68b890ffc    Godzina zakończenia: 4294967295    Ścieżka aplikacji: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

Identyfikator
 raportu: 772328b2-b9e7-4ad5-871f-843109d055e3    Pełna nazwa pakietu powodującego błąd:
 Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy    Identyfikator
 aplikacji względem pakietu powodującego błąd: CortanaUI  
 
Error - 18.04.2018 05:23:02 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat” w trybie odczytu
 lub zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa
 dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:23:12 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat” w trybie odczytu
 lub zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa
 dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
Error - 18.04.2018 05:23:22 | Computer Name = LAPTOP-BLJAAKE0 | Source = ESENT | ID = 490
Description = taskhostw (1776,R,0) WebCacheLocal: Próba otwarcia pliku „C:\Users\Tomasz
 Mateusiak\AppData\Local\Microsoft\Windows\WebCache\V01.log” w trybie odczytu lub
 zapisu zakończyła się niepomyślnie z błędem systemowym 5 (0x00000005): „Odmowa 
dostępu. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8).
 
[ System Events ]
Error - 18.04.2018 02:04:45 | Computer Name = LAPTOP-BLJAAKE0 | Source = Service Control Manager | ID = 7034
Description = Usługa Cyberlink RichVideo64 Service(CRVS) niespodziewanie zakończyła
 pracę. Wystąpiło to razy: 1.
 
Error - 18.04.2018 02:04:45 | Computer Name = LAPTOP-BLJAAKE0 | Source = Service Control Manager | ID = 7031
Description = Usługa HP JumpStart Bridge niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność 
korekcyjna: Uruchom usługę ponownie.
 
Error - 18.04.2018 02:04:45 | Computer Name = LAPTOP-BLJAAKE0 | Source = Service Control Manager | ID = 7034
Description = Usługa HPWMISVC niespodziewanie zakończyła pracę. Wystąpiło to razy:
 1.
 
Error - 18.04.2018 02:04:45 | Computer Name = LAPTOP-BLJAAKE0 | Source = Service Control Manager | ID = 7034
Description = Usługa HP Touchpoint Analytics niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 18.04.2018 02:05:02 | Computer Name = LAPTOP-BLJAAKE0 | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10003
Description = Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.

Ścieżka
 modułu: C:\WINDOWS\System32\IWMSSvc.dll  
 
Error - 18.04.2018 02:05:05 | Computer Name = LAPTOP-BLJAAKE0 | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10003
Description = Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.

Ścieżka
 modułu: C:\WINDOWS\System32\IWMSSvc.dll  
 
Error - 18.04.2018 02:05:05 | Computer Name = LAPTOP-BLJAAKE0 | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10003
Description = Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.

Ścieżka
 modułu: C:\WINDOWS\System32\IWMSSvc.dll  
 
Error - 18.04.2018 02:07:08 | Computer Name = LAPTOP-BLJAAKE0 | Source = DCOM | ID = 10016
Description = 
 
Error - 18.04.2018 02:07:08 | Computer Name = LAPTOP-BLJAAKE0 | Source = DCOM | ID = 10016
Description = 
 
Error - 18.04.2018 02:08:00 | Computer Name = LAPTOP-BLJAAKE0 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Usługa Google Update (gupdate) z powodu
 następującego błędu:   %%2
 
 
< End of report >