OTL Extras logfile created on: 02.04.2020 21:29:22 - Run 1
OTL by OldTimer - Version 3.2.70.2     Folder = B:\Program Files
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.18362.0)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
 
7,87 Gb Total Physical Memory | 5,39 Gb Available Physical Memory | 68,44% Memory free
9,12 Gb Paging File | 6,77 Gb Available in Paging File | 74,26% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 194,42 Gb Total Space | 92,60 Gb Free Space | 47,63% Space Free | Partition Type: NTFS
 
Computer Name: DESKTOP-ERJTRE0 | User Name: Przemek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Unable to open value key
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Unable to open value key
htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Unable to open value key
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Unable to open value key
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "B:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "B:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Unable to open value key
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Unable to open value key
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Unable to open value key
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Unable to open value key
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Unable to open value key
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "B:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "B:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Unable to open value key
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av]
"DataMigrated" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{18A975F9-A60C-37D8-E30B-4BEF31AD3411}]
"GUID" = {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
"DISPLAYNAME" = AVG Antivirus
"STATE" = 270336
"PRODUCTEXE" = C:\Program Files\AVG\Antivirus\wsc_proxy.exe -- (AVG Technologies CZ, s.r.o.)
"REPORTINGEXE" = C:\Program Files\AVG\Antivirus\wsc_proxy.exe -- (AVG Technologies CZ, s.r.o.)
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}]
"GUID" = {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
"DISPLAYNAME" = Windows Defender
"STATE" = 393472
"PRODUCTEXE" = windowsdefender://
"REPORTINGEXE" = %ProgramFiles%\Windows Defender\MsMpeng.exe -- (Microsoft Corporation)
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw]
"DataMigrated" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 67 D7 DB E1 23 40 D5 01  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{186E50A6-1C9F-4974-8776-025F160168DE}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 
"{497AEEFB-84B6-4031-98FD-B623F8145B20}" = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamuseragent.exe | 
"{65EB0893-2F90-4BCC-B272-7729E1EDDAC3}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 
"{78931F76-2474-48B3-BFEE-49D3552DED53}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 
"{C2DDDB94-E6CB-4028-9051-E8B7452A5E80}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | 
"{F75285E4-D695-437F-9239-952B8F172B58}" = lport=35043 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{FA87F3EF-EE75-45C7-A95F-894BE651BA91}" = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0040BB59-388C-40F7-A410-69D5A305895C}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{02E894D0-07A3-466B-B4B9-B3DF4DACA24C}" = dir=out | name=@{microsoft.windowscamera_2019.926.30.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/lenssdk/resources/appstorename} | 
"{042BD5A7-90F1-4FD1-9AA9-FDFEFBA1B74C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{0430E674-6176-44FA-B077-E1E055ACDA74}" = dir=out | name=@{microsoft.microsoftedge_44.18362.449.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{0492D603-0221-47F6-9A48-63C5F08B3107}" = dir=out | name=microsoft solitaire collection | 
"{05DB348F-ACD8-4250-AAE8-6941A68F0020}" = dir=in | name=@{microsoft.zunevideo_10.20022.11011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{0682979B-2859-44FB-B465-762A7D5E70B2}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} | 
"{07481BC2-F509-4C53-AF3E-817E2F53645F}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{0E40BEC1-1AD0-41D8-8282-CD6443F62466}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{101A8889-77A6-4098-BF61-DE4A524117A0}" = dir=in | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{11078E00-2030-443D-A2A9-D4A7917C3935}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{16EA703C-B95F-4092-B778-F863AEBA9CF8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{1805F249-F6F0-4149-BE3E-25FA0B10C1DF}" = dir=out | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{19118230-4995-46D7-A41E-D046DA719880}" = dir=out | name=@{microsoft.windows.photos_2020.19081.28230.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{1937EAEE-1622-420C-BDB8-75F7CB038445}" = dir=out | name=@{microsoft.zunevideo_10.20022.11011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{1CC5B5EA-8CBD-4740-A883-704891916CB0}" = dir=in | name=@{microsoft.windows.shellexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{1CE8D9C0-B134-4908-A525-1AFC81449F03}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} | 
"{1E79DFBF-D045-497A-8FA7-250B5BCB4AE7}" = dir=out | name=@{microsoft.windows.startmenuexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 
"{20F97E0C-C9D3-4E44-A895-596B8EF4B308}" = dir=out | name=skype | 
"{215995B5-6669-49A9-AD1D-8630F44913C5}" = dir=out | name=onenote | 
"{2347D723-942B-42D8-AABC-671A5A65BA90}" = dir=in | name=@{microsoft.zunemusic_10.20022.11011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{2B3AAA2E-0282-4BA0-A5AE-E2B91466DBE8}" = protocol=6 | dir=in | app=b:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | 
"{2B617ED3-5120-44B5-A7F7-AFB27EF4DC66}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | 
"{2C84C1D3-EEA2-408A-BA6D-020657540722}" = protocol=6 | dir=in | app=c:\program files\ccleaner\ccupdate.exe | 
"{30CB8E66-6891-498E-A8BD-A8564AA30962}" = dir=out | name=@{microsoft.mspaint_6.1907.18017.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | 
"{33BF1F8E-12E6-4E93-8ACD-DC08D1E9CCC0}" = dir=out | name=@{microsoft.messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{374E5D9F-9B81-46EE-91F7-9A33A2BA2729}" = dir=out | name=@{microsoft.storepurchaseapp_12003.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | 
"{376F7E45-7259-47C8-8BCA-35490FAC868A}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.32912.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{38966656-6884-418E-9684-6A975E33B447}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{3A11BF83-1115-4FFE-8801-B1BF25E818B9}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{3B3A1885-CED8-4108-A679-CFE1A9FE0615}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{3C26DB15-4672-4D92-8359-60DEC40BF796}" = dir=out | name=@{microsoft.bingsports_4.36.20714.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | 
"{3E4FCD38-2C2C-41A8-90F2-3B6614A166C5}" = dir=out | name=@{microsoft.microsoft3dviewer_7.1908.9012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | 
"{3E850E1E-BCD1-41EF-A5FB-D2FB0D004752}" = dir=out | name=@{microsoft.microsoftstickynotes_3.7.124.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 
"{3ED93ADD-F88C-40DF-8398-0995BF84FEB0}" = protocol=17 | dir=in | app=b:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | 
"{40230374-B6E8-4D2B-B22A-270E39586979}" = dir=in | name=skype | 
"{407ED44C-F41B-4DCA-984F-AEEA3EEAF6B8}" = dir=out | name=@{microsoft.ppiprojection_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{4136984E-9A9D-46AE-BBFA-DD40ACCFCC82}" = dir=in | name=onenote | 
"{426EA7BC-CFF9-4095-8D83-8B18416EBB52}" = dir=out | name=@{microsoft.lockapp_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{433CA757-E44D-481A-A0F9-69A1AEE972F6}" = dir=in | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{4436A539-0F6A-4779-A18E-30EA7A100819}" = dir=in | name=@{microsoft.windowsstore_12003.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{444EB960-583C-468B-BA11-CBAF5FB79C92}" = dir=out | name=@{microsoft.windowscalculator_10.1910.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | 
"{48C6198D-1DD6-48EF-AF54-756109281047}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.12624.20296.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{4950C0B2-8D30-4EF6-BB76-C6482C107DAC}" = protocol=17 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifasetup\fifaconfig.exe | 
"{4E92E6CA-2092-4078-A240-B6C7BC3BE87A}" = dir=out | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{4F00157B-DA4F-4DB2-9B5B-5FD2004E54B6}" = dir=in | name=@{microsoft.oneconnect_5.2002.431.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} | 
"{4F45C8D5-451A-4EDE-8C5E-9CFB34041FCB}" = dir=out | name=@{microsoft.windowsmaps_5.1909.2813.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{50D59FDF-1483-4D4A-89E1-2F5C599D39BA}" = protocol=6 | dir=in | app=b:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | 
"{5355C63F-54B5-44A8-B42E-072E7B2E2F1A}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{536068A3-2C46-446B-B689-BBDE0135DEDD}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{5524D9BE-842D-4D9F-B613-032116A79008}" = dir=out | name=@{microsoft.gethelp_10.1912.30071.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | 
"{555EAE03-343F-4CEC-A10E-83598A34E2EB}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{56D440D3-87ED-43D6-8DC2-1D780D45C27B}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{58353512-271C-4230-967F-55F005D58EFD}" = dir=out | name=@{microsoft.mixedreality.portal_2000.20011.1312.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mixedreality.portal/resources/pkgdisplayname} | 
"{58B9D210-72EF-4B09-8F39-B0DF0412AF2E}" = dir=out | name=print 3d | 
"{65D31027-D132-4331-9BDD-E9EE108FA59A}" = dir=in | name=@{microsoft.ppiprojection_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{695793F1-8830-4612-9E4C-C3FF91F9AF3B}" = dir=in | name=@{microsoft.windows.cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{69888915-430C-49DE-968A-E391627FC53C}" = dir=in | name=3d builder | 
"{6B047959-B996-4CB8-B7F1-4AFC342F7988}" = dir=out | name=@{microsoft.bingnews_4.36.20714.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithtagline} | 
"{6BA02752-A398-4D59-A606-0787ABFA22A1}" = protocol=17 | dir=in | app=c:\program files\ccleaner\ccupdate.exe | 
"{6DBE5BFE-E8F4-434C-B386-058F0771F508}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{6F0B72F6-60A1-435E-8BED-DA1E49688154}" = dir=in | name=@{microsoft.windows.startmenuexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 
"{6FA29A86-0876-42C0-B18C-93C9B08F28A8}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | 
"{705A1F87-403C-4AD4-8E21-92FD680E3969}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.18362.449_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} | 
"{7513A04E-860F-434B-AA45-2D78C631DBB8}" = dir=in | name=print 3d | 
"{77CE3F97-F18F-42EF-B2F4-447785D2390F}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.12624.20296.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{7AAA334B-BF8E-4094-B903-64E9B7079C47}" = dir=out | name=xbox one smartglass | 
"{7CADF4D2-4443-476F-BDE5-5BA7062A1E00}" = dir=out | name=@{microsoft.lockapp_10.0.18362.449_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{7DA20DC4-B3F4-407E-AF33-4F5537D29162}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1907.3152.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{7EB98246-4AB4-42E2-B6EC-B230316B0A92}" = dir=in | name=@{microsoft.microsoftedge_44.18362.449.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{7F09CCD8-9BAC-42F7-AD5B-121286AE986D}" = dir=out | name=microsoft pay | 
"{820A1088-8A9D-4FE5-8CF2-234C2AAA318B}" = dir=out | name=3d builder | 
"{87880704-CFF2-4373-9706-473985F7F270}" = dir=in | name=xbox game bar | 
"{88C06559-640D-4B85-8312-D14E6A8831EA}" = dir=out | name=@{microsoft.windows.cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{8CA9E2A9-CD7A-41FA-BB31-F9911C688C11}" = dir=out | name=@{microsoft.yourphone_1.20022.82.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 
"{8D0974F1-3D2A-417F-B7C8-8849945777D0}" = dir=out | name=@{microsoft.zunemusic_10.20022.11011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{964CAD88-F784-47E4-BDFB-37746D158822}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{966D4ACA-4F82-46A4-80D8-9014024186C8}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{993F1F21-7057-4B6C-BEBD-58C038FEBEC7}" = dir=out | name=windows_ie_ac_001 | 
"{99401F3B-5B0C-4196-9B33-447F6082F22C}" = dir=out | name=@{microsoft.xboxidentityprovider_12.58.1001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 
"{9CADECB3-E659-4930-8B08-4FE0B4BD6C19}" = protocol=17 | dir=in | app=b:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{9E093C25-39EB-4B32-AD39-D0BD53A02E7F}" = dir=in | name=@{microsoft.windows.photos_2020.19081.28230.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{9EA66AF7-9131-44A5-9B47-31B498C35115}" = protocol=17 | dir=in | app=b:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | 
"{A1390AAA-3AC6-412F-AB73-DD72FFEA4CC2}" = dir=out | name=windows_ie_ac_001 | 
"{A67F1401-8CC4-48CB-BA9C-23490F6F1A79}" = dir=out | name=@{microsoft.oneconnect_5.2002.431.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} | 
"{A940FCE7-CF29-4B24-AC95-6FA20224E951}" = dir=out | name=@{microsoft.accountscontrol_10.0.14393.447_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{A9FA00E5-B075-4739-95AC-5D7FFD566AC5}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{AB95705C-100F-4FE8-BBE4-492E6BF5E5C8}" = dir=out | name=@{microsoft.bingfinance_4.36.20714.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | 
"{ABB80F80-DFE2-4213-A16A-4B983D40759D}" = dir=in | name=@{microsoft.microsoftstickynotes_3.7.124.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 
"{AC79DCA7-A9E6-4AF2-A310-548497927C65}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.14393.447_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{AEE157BF-AE0F-46DE-BFD3-9435BC17AF27}" = protocol=6 | dir=in | app=b:\games\world_of_tanks\win32\worldoftanks.exe | 
"{AF31DA33-4ECA-4892-AABA-5C0DF50F326C}" = dir=out | name=@{microsoft.accountscontrol_10.0.18362.449_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{AF4F7FC3-0F15-471F-8B70-1C070220CF11}" = dir=in | name=@{microsoft.xboxapp_48.62.6002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 
"{B3429FFD-6BCC-435F-8FED-6F212B58EFE7}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{B378804C-44FE-43AB-9CBB-1C7A8B2B4D60}" = dir=out | name=@{microsoft.xboxapp_48.62.6002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 
"{B77C75F7-D52C-4AE7-92E6-9DF7D4A0C3EA}" = protocol=17 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifasetup\fifaconfig.exe | 
"{B81DFC93-FF48-44EB-8306-143C5AB27C68}" = dir=out | name=hp smart | 
"{BCDFCC3E-CAC4-4D1F-94F4-70377FE1BA47}" = protocol=17 | dir=in | app=b:\games\world_of_tanks\win32\worldoftanks.exe | 
"{BEEDEDDB-9631-474D-9F8B-37718C20A56C}" = dir=in | name=@{microsoft.yourphone_1.20022.82.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 
"{BF150327-F02C-466E-8910-1ACA335720CA}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{C41C8745-200C-433D-95FC-39AD6004638D}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{C4582B5A-ABD4-4603-8B08-60BE3138A04F}" = dir=out | name=@{microsoft.win32webviewhost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 
"{C594BE5A-5195-4A73-93D3-A95C2964A000}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{C5B73BA5-9778-494B-B1AA-C2CA3B187DC2}" = dir=in | name=microsoft solitaire collection | 
"{C5D2D997-04F0-4B06-82D1-8FB671130C0E}" = protocol=6 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifasetup\fifaconfig.exe | 
"{C67B4227-6F43-4CEB-84B7-52E31810057D}" = dir=out | name=@{microsoft.bingweather_4.36.20714.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{C6E2218D-1BA3-4546-93C4-C2198938D07A}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.32912.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{CC4C68E9-0BB4-400D-A576-72FEDF9C086D}" = dir=in | name=hp smart | 
"{CCA782AC-C2C3-4029-8B51-837BD092E763}" = dir=in | name=@{microsoft.win32webviewhost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 
"{CCCAB36B-4808-4718-BD77-33D8B217C2D8}" = dir=in | name=xbox one smartglass | 
"{CCE6B5D7-0EF4-453A-91B9-4694CC6FDFD2}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{CF4FB666-A168-40A2-A5C6-33EB3B25D0C8}" = dir=out | name=@{microsoft.getstarted_8.2.22942.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{CFB34C9F-A97B-4CD9-BECB-E9CDA562FFB0}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | 
"{D0A5600E-CAFC-450A-BF76-5E3708E2B39F}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.18362.449_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | 
"{D1653DCE-55F8-44A7-A12C-2ED725FDD87F}" = dir=out | name=xbox game bar | 
"{D523005C-61E5-4403-B513-4A9A172B3999}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{D798E511-8AA4-4D2B-AD8C-99572A2AE3AE}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.18362.449_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 
"{DAE87EEC-94C2-462E-B743-08FD5F3033EE}" = protocol=6 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifasetup\fifaconfig.exe | 
"{DD497C6C-2DD3-4A74-A8C7-DC47269FC439}" = dir=out | name=office | 
"{E02C6682-CDA0-44E5-93C9-B1F5D6581767}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{E0B36FA1-B547-40E0-A4A4-33BB5110E989}" = dir=out | name=@{microsoft.people_10.1909.3457.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{E0E32197-EC03-4D66-BD32-527AE73D917F}" = protocol=17 | dir=in | app=b:\program files (x86)\steam\steam.exe | 
"{E1AF5D5B-5F54-40DC-95C7-40143966070B}" = protocol=6 | dir=in | app=b:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{E2A2D6A2-9DA2-4C44-A7A7-003D23581E2B}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | 
"{E5560236-43AF-4A1A-BB32-7A5765CC9E57}" = protocol=6 | dir=in | app=b:\program files (x86)\steam\steam.exe | 
"{E85D488C-BC33-4FCC-A8C3-92D09CC6C31B}" = dir=out | name=xbox game bar plugin | 
"{EC9ECC43-3572-4F5F-AE49-9382FD13AF32}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{EEB5FA3C-BE9C-45AA-AC7A-CA6075E38A5D}" = dir=out | name=xbox tcui | 
"{EF407A5F-1E7E-4BA8-BE79-BDCD471C2BDB}" = dir=out | name=shell input application | 
"{F1FF6704-DD6D-4E62-A74B-BC8B2E898ECA}" = dir=out | name=@{microsoft.windowsstore_12003.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{F3139E48-EDED-42F6-AEFF-FE18FF07B551}" = dir=in | name=@{microsoft.messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{F32A47AA-B6A8-43B8-9FF5-C0D9AEEC5CF1}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{F600DFCF-ACBB-46A3-A4AC-66D86B77388A}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"TCP Query User{1EDCAC6A-DCCD-40B6-9C23-BBAF062B1FA2}B:\programdata\wargaming.net\gamecenter\wgc.exe" = protocol=6 | dir=in | app=b:\programdata\wargaming.net\gamecenter\wgc.exe | 
"TCP Query User{2A8225CB-6755-4539-A546-4DD56D7BA363}B:\program files (x86)\origin games\fifa 17\fifa17.exe" = protocol=6 | dir=in | app=b:\program files (x86)\origin games\fifa 17\fifa17.exe | 
"TCP Query User{60D05466-B07D-47F3-8ACE-802E54A4BB0E}B:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=b:\games\world_of_tanks\worldoftanks.exe | 
"TCP Query User{659F5014-9310-47EB-B383-FE4145013875}B:\games\far cry 4\bin\farcry4.exe" = protocol=6 | dir=in | app=b:\games\far cry 4\bin\farcry4.exe | 
"TCP Query User{67D9AC25-9962-4C12-A5C2-4805DC8F1499}B:\programdata\wargaming.net\gamecenter\wgc.exe" = protocol=6 | dir=in | app=b:\programdata\wargaming.net\gamecenter\wgc.exe | 
"TCP Query User{8B221273-955B-48CB-9405-DA7E78DCBBB0}B:\games\fifa18\fifa18.exe" = protocol=6 | dir=in | app=b:\games\fifa18\fifa18.exe | 
"TCP Query User{8BA9032A-19C2-4410-8B88-F6BC61668E2F}B:\games\battlefield 1\bf1.exe" = protocol=6 | dir=in | app=b:\games\battlefield 1\bf1.exe | 
"TCP Query User{8CC19F40-0EFC-497B-A866-0336366360D9}B:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=b:\games\world_of_tanks\wotlauncher.exe | 
"TCP Query User{C23D646F-A020-40B0-B679-8038412BE3FD}B:\program files (x86)\origin games\fifa 19\fifa19.exe" = protocol=6 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifa19.exe | 
"TCP Query User{E5595F3C-44AB-4C2D-AB35-31DCF870BF44}C:\program files (x86)\origin games\fifa 18 demo\fifa18_demo.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 18 demo\fifa18_demo.exe | 
"TCP Query User{ED1BC40B-71F3-4802-9E2A-17CB53354CD7}C:\users\przemek\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\przemek\appdata\roaming\utorrent\utorrent.exe | 
"TCP Query User{FA9BD5AC-33FA-40C7-AF25-11455ACDBD81}B:\games\fifa18\fifa18.exe" = protocol=6 | dir=in | app=b:\games\fifa18\fifa18.exe | 
"TCP Query User{FDC1DB2A-98CF-4B1F-9132-829ABE754E28}B:\games\world_of_tanks\win32\worldoftanks.exe" = protocol=6 | dir=in | app=b:\games\world_of_tanks\win32\worldoftanks.exe | 
"UDP Query User{0788EAD0-A175-4B12-A923-3D015FEAA226}B:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=b:\games\world_of_tanks\wotlauncher.exe | 
"UDP Query User{1F023C7F-6BAD-4DEB-883B-5158CBD3B295}B:\games\fifa18\fifa18.exe" = protocol=17 | dir=in | app=b:\games\fifa18\fifa18.exe | 
"UDP Query User{2FE98A12-04C8-419D-8098-5E55D6DBA481}B:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=b:\games\world_of_tanks\worldoftanks.exe | 
"UDP Query User{4DB5D2FD-D066-4978-942C-3B9D386EBBBA}B:\program files (x86)\origin games\fifa 17\fifa17.exe" = protocol=17 | dir=in | app=b:\program files (x86)\origin games\fifa 17\fifa17.exe | 
"UDP Query User{4FA0CE34-7050-40BD-87AD-331FDAC9A038}B:\games\far cry 4\bin\farcry4.exe" = protocol=17 | dir=in | app=b:\games\far cry 4\bin\farcry4.exe | 
"UDP Query User{6D406BEE-507D-44CB-8F8C-381D0ECF86F4}C:\users\przemek\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\przemek\appdata\roaming\utorrent\utorrent.exe | 
"UDP Query User{742AF71D-863B-4872-A1F3-5FBFFC66DC36}B:\games\world_of_tanks\win32\worldoftanks.exe" = protocol=17 | dir=in | app=b:\games\world_of_tanks\win32\worldoftanks.exe | 
"UDP Query User{7DF9D26A-418F-4FF2-8BEE-C2BE205B8017}B:\programdata\wargaming.net\gamecenter\wgc.exe" = protocol=17 | dir=in | app=b:\programdata\wargaming.net\gamecenter\wgc.exe | 
"UDP Query User{90AA0A9C-FB04-4BB7-93D6-8B4D8C22D080}C:\program files (x86)\origin games\fifa 18 demo\fifa18_demo.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 18 demo\fifa18_demo.exe | 
"UDP Query User{AD645543-9F79-4CB8-BA91-B7B76F14D104}B:\games\battlefield 1\bf1.exe" = protocol=17 | dir=in | app=b:\games\battlefield 1\bf1.exe | 
"UDP Query User{D0AAF143-23D2-4096-B893-A98A13A46D4A}B:\games\fifa18\fifa18.exe" = protocol=17 | dir=in | app=b:\games\fifa18\fifa18.exe | 
"UDP Query User{E21D8160-C416-464F-9D6E-47B54EA7314E}B:\programdata\wargaming.net\gamecenter\wgc.exe" = protocol=17 | dir=in | app=b:\programdata\wargaming.net\gamecenter\wgc.exe | 
"UDP Query User{F7AA35AE-A408-4180-96FE-96780D1C15A9}B:\program files (x86)\origin games\fifa 19\fifa19.exe" = protocol=17 | dir=in | app=b:\program files (x86)\origin games\fifa 19\fifa19.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" = Malwarebytes (wersja 3.7.1.2839)
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{8D50D8C6-1E3D-3BAB-B2B7-A5399EA1EBD1}" = Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25008
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{A84A4FB1-D703-48DB-89E0-68B6499D2801}" = Qualcomm Atheros Bluetooth Suite (64)
"{B0169E83-757B-EF66-E2F0-391944D785BC}" = Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel" = Ansel
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 388.57
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 3.4.0.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 23.23.30.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.17.0329
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 23.23.30.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvBackend" = NVIDIA Backend
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer" = NVIDIA Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.LocalSystem" = NVIDIA LocalSystem Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.MessageBus" = NVIDIA Message Bus for NvContainer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NetworkService" = NVIDIA NetworkService Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.Session" = NVIDIA Session Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.User" = NVIDIA User Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer" = NVIDIA Display Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS" = NVIDIA Display Container LS
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayPluginWatchdog" = NVIDIA Display Watchdog Plugin
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplaySessionContainer" = NVIDIA Display Session Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs" = NvNodejs
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvPlugin.Watchdog" = NVIDIA Watchdog Plugin for NvContainer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry" = NvTelemetry
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetryContainer" = NVIDIA Telemetry Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci" = NvvHci
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_OSC" = Nvidia Share
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 3.4.0.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 3.60.1
"{BD667C75-0EDD-4073-A406-A6DD9C3016EB}" = Intel(R) Chipset Device Software
"{C668F044-4825-330D-8F9F-3CBFC9F2AB89}" = Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25008
"8335D73177E6D80E7ADC00FED2275758BD28AEFB" = Windows Driver Package - ASUS (ATP) Mouse  (01/13/2015 1.0.0.233)
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"Steam App 476600" = Call of Duty: WWII
"Steam App 730" = Counter-Strike: Global Offensive
"VLC media player" = VLC media player
"VulkanRT1.0.42.1" = Vulkan Run Time Libraries 1.0.42.1
"WinRAR archiver" = WinRAR 5.70 (64-bitowy)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{3391E07D-8484-4124-817E-FCBDA859FD62}" = FIFA 19
"{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
"{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}" = AudioWizard
"{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{7258BA11-600C-430E-A759-27E2C691A335}_is1" = GOG Galaxy
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8B743AA0-53B2-11D2-808A-00600895FB43}" = Heroes of Might and Magic III - Złota Edycja
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90850415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{95140000-00AF-0415-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}" = ASUS USB Charger Plus
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AC76BA86-0804-1033-1959-001824311644}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1045-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Polish
"{c239cea1-d49e-4e16-8e87-8c055765f7ec}" = Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008
"{C6CDA568-CD91-3CA0-9EDE-DAD98A13D6E1}" = Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25008
"{E6222D59-608C-3018-B86B-69BD241ACDE5}" = Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25008
"{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{f1e7e313-06df-4c56-96a9-99fdfd149c51}" = Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008
"{f5d71765-7cd1-4e68-998f-5b379e725da3}" = Oprogramowanie mikroukładu Intel®
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"1495134320_is1" = The Witcher 3: Wild Hunt - Game of the Year Edition
"Adobe Flash Player PPAPI" = Adobe Flash Player 25 PPAPI
"AnVir Task Manager Free" = AnVir Task Manager Free
"Assassin's Creed Origins_is1" = Assassin's Creed Origins
"AVG Antivirus" = AVG AntiVirus FREE
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Chrome" = Google Chrome
"James Bond 007: Nightfire" = James Bond 007: Nightfire
"Mafia III_R.G. Mechanics_is1" = Mafia III
"Mobile Partner" = Mobile Partner
"Origin" = Origin
"PDF To Word Converter_is1" = PDF To Word Converter V5.0.1
"PLAY ONLINE" = PLAY ONLINE
"Steam" = Steam
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3726601081-637110299-688627238-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"OneDriveSetup.exe" = Microsoft OneDrive
"uTorrent" = µTorrent
"Wargaming.net Game Center" = Wargaming.net Game Center
"WOT.EU.PRODUCTION" = World of Tanks EU
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 02.04.2020 14:19:15 | Computer Name = DESKTOP-ERJTRE0 | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: OriginWebHelperService.exe, wersja:
 10.5.56.33908, sygnatura czasowa: 0x5dd474e2  Nazwa modułu powodującego błąd: OriginWebHelperService.exe,
 wersja: 10.5.56.33908, sygnatura czasowa: 0x5dd474e2  Kod wyjątku: 0xc0000005  Przesunięcie
 błędu: 0x00098210  Identyfikator procesu powodującego błąd: 0x1350  Godzina uruchomienia
 aplikacji powodującej błąd: 0x01d6091b1e099fda  Ścieżka aplikacji powodującej błąd:
 B:\Program Files (x86)\Origin\OriginWebHelperService.exe  Ścieżka modułu powodującego
 błąd: B:\Program Files (x86)\Origin\OriginWebHelperService.exe  Identyfikator raportu:
 2dec8180-a2c8-4bbb-8bb6-09499eacb178  Pełna nazwa pakietu powodującego błąd: ?  Identyfikator
 aplikacji względem pakietu powodującego błąd: ?
 
Error - 02.04.2020 14:21:54 | Computer Name = DESKTOP-ERJTRE0 | Source = Software Protection Platform Service | ID = 8198
Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:  hr=0x800704CF
Argumenty
 wiersza polecenia:  RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error - 02.04.2020 14:27:22 | Computer Name = DESKTOP-ERJTRE0 | Source = Software Protection Platform Service | ID = 8198
Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:  hr=0x803F7001
Argumenty
 wiersza polecenia:  RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error - 02.04.2020 14:27:29 | Computer Name = DESKTOP-ERJTRE0 | Source = ESENT | ID = 455
Description = svchost (3624,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01)
 podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 
Error - 02.04.2020 14:34:18 | Computer Name = DESKTOP-ERJTRE0 | Source = ESENT | ID = 455
Description = svchost (10724,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01)
 podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 
Error - 02.04.2020 15:22:52 | Computer Name = DESKTOP-ERJTRE0 | Source = Software Protection Platform Service | ID = 8198
Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:  hr=0x80072EE7
Argumenty
 wiersza polecenia:  RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error - 02.04.2020 15:24:11 | Computer Name = DESKTOP-ERJTRE0 | Source = Software Protection Platform Service | ID = 8198
Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:  hr=0x803F7001
Argumenty
 wiersza polecenia:  RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error - 02.04.2020 15:24:11 | Computer Name = DESKTOP-ERJTRE0 | Source = Software Protection Platform Service | ID = 8198
Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:  hr=0x803F7001
Argumenty
 wiersza polecenia:  RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error - 02.04.2020 15:28:18 | Computer Name = DESKTOP-ERJTRE0 | Source = ESENT | ID = 455
Description = svchost (3420,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01)
 podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 
Error - 02.04.2020 15:43:55 | Computer Name = DESKTOP-ERJTRE0 | Source = ESENT | ID = 455
Description = svchost (9956,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01)
 podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 
[ OSession Events ]
Error - 27.08.2019 04:37:47 | Computer Name = DESKTOP-ERJTRE0 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 579
 seconds with 540 seconds of active time.  This session ended with a crash.
 
Error - 27.08.2019 04:53:08 | Computer Name = DESKTOP-ERJTRE0 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 902
 seconds with 720 seconds of active time.  This session ended with a crash.
 
Error - 01.09.2019 05:30:43 | Computer Name = DESKTOP-ERJTRE0 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2249
 seconds with 1860 seconds of active time.  This session ended with a crash.
 
Error - 20.09.2019 02:07:26 | Computer Name = DESKTOP-ERJTRE0 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 21
 seconds with 0 seconds of active time.  This session ended with a crash.
 
[ Parameters Events ]
OTL encountered an error while reading this event log. It may be corrupt.
[ State Events ]
OTL encountered an error while reading this event log. It may be corrupt.
Error - 02.04.2020 10:09:36 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego
 błędu:   %%1053
 
Error - 02.04.2020 14:18:14 | Computer Name = DESKTOP-ERJTRE0 | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 6:35:38 PM na ?4/?2/?2020 było 
nieoczekiwane.
 
Error - 02.04.2020 14:18:31 | Computer Name = DESKTOP-ERJTRE0 | Source = Application Popup | ID = 1060
Description = 
 
Error - 02.04.2020 14:18:31 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi SecDrv z powodu następującego błędu:   %%1275
 
Error - 02.04.2020 14:19:47 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7034
Description = Usługa Origin Web Helper Service niespodziewanie zakończyła pracę.
 Wystąpiło to razy: 1.
 
Error - 02.04.2020 15:20:33 | Computer Name = DESKTOP-ERJTRE0 | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 8:18:14 PM na ?4/?2/?2020 było 
nieoczekiwane.
 
Error - 02.04.2020 15:20:46 | Computer Name = DESKTOP-ERJTRE0 | Source = Application Popup | ID = 1060
Description = 
 
Error - 02.04.2020 15:20:46 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi SecDrv z powodu następującego błędu:   %%1275
 
Error - 02.04.2020 15:21:34 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się
 z usługą Origin Web Helper Service.
 
Error - 02.04.2020 15:21:34 | Computer Name = DESKTOP-ERJTRE0 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego
 błędu:   %%1053
 
 
< End of report >