OTL Extras logfile created on: 2014-06-16 19:19:30 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DM\Desktop\Nowy folder 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17126) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 0,85 Gb Available Physical Memory | 21,37% Memory free 8,00 Gb Paging File | 2,70 Gb Available in Paging File | 33,78% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,88 Gb Total Space | 11,18 Gb Free Space | 4,80% Space Free | Partition Type: NTFS Computer Name: DM-PC | User Name: DM | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0024940F-1E8E-413B-902D-5D9056C3E773}" = rport=137 | protocol=17 | dir=out | app=system | "{16EAE953-AEE2-4CDA-BA30-F6F7EF0F3208}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{4BCEF2AD-4EA0-4475-B1AC-FEB06FCFF0DB}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{4DA0C8CA-DA0C-42CA-876D-5BE095F1BA20}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{7897B03F-D274-48B7-9DE2-A32B74889A24}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{7B163F58-6DB2-4BC0-8C4C-598667292231}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{7E564D15-02B8-46DD-A8FF-7331513D0B47}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{807CDE07-D1A5-4F6C-86D9-AFA6EBCFD578}" = lport=137 | protocol=17 | dir=in | app=system | "{819C14EF-F0AF-4CC0-A049-0B99E2603BED}" = rport=139 | protocol=6 | dir=out | app=system | "{8BA3A940-A891-4F4B-8AB5-4F4D234556D4}" = lport=445 | protocol=6 | dir=in | app=system | "{8DFD71E4-0050-4985-9E01-EA7859170E2B}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{9CCBE47A-82E4-4FB7-9EF1-E9B11515D8D7}" = lport=138 | protocol=17 | dir=in | app=system | "{9EB756CD-3291-4325-91DE-EB82559B324F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{AED42E63-E8B2-455E-BE39-E03956A9BB3E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C08D3538-311D-4A26-9162-24362B6D82B4}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{C37B34FD-24C8-47C7-AA32-F7E643FB7D70}" = lport=139 | protocol=6 | dir=in | app=system | "{C7843F94-BA4B-4800-8059-5D74102B7D20}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{CA6621EF-4B90-46B3-8456-4F26AA286466}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{D4667214-BDF3-4F32-A1B0-49C1B595E0E4}" = rport=138 | protocol=17 | dir=out | app=system | "{F3307B28-4D1F-42E0-9503-4F595CAB00FB}" = rport=445 | protocol=6 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{10377DD0-8C3D-4140-BE67-39FECEAA7BBB}" = protocol=17 | dir=in | app=c:\users\dm\appdata\roaming\bittorrent\bittorrent.exe | "{1909E3BE-EED7-4DCF-B9D8-3317FFA3DF45}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{21CD183F-8DC6-494C-A2A2-F9AB1FD01E7D}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{22826696-7F6E-4715-9F59-564799E8D887}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{2CB9BD74-5B87-4DC8-B91F-CBF6852288EE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sourcefilmmaker\game\bin\qsdklauncher.exe | "{2CD18AA6-8889-4E0A-8630-C01D2FE75D01}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{2FEE7970-A1B0-4ECB-AE21-6FBDB32A8609}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sourcefilmmaker\game\bin\qsdklauncher.exe | "{328E3277-5270-476D-A9E5-068BE41DA7F9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{3544CB60-0546-4E16-B9D0-7C107A1F8F4A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{66EB7C27-872A-4EDD-BDB7-C020F42844E0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{67761C3E-C345-4C8D-9530-4B37E3597534}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sourcefilmmaker\game\sfm.exe | "{6E37349C-96CE-4FBC-8AA2-3269DD8046FD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{6F7B6E40-547B-4441-9538-F4420BBF4457}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe | "{754E058F-4F42-42E4-954F-6F36220D7FEE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe | "{79E7449D-40FC-4D96-BCAE-C3089BB4443A}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe | "{8C3F5546-DD02-4CDC-9CD2-DF1E07A8D235}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe | "{916B501E-B333-4790-8B15-7B284AD2A569}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{927C3678-6BD3-4A44-BD40-17FC453FA46A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sourcefilmmaker\game\sfm.exe | "{9A37BC71-306B-4653-BB18-79444C5873F6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{9B1061F1-0340-46A1-AA1E-7D66F67BFCE0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{AB9A2032-45E4-4B42-8C0E-C17174ADCEF3}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe | "{AC3321E0-1956-4A92-B7D9-AEFF6F0156C0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{B0332AF8-4EFE-44AA-9155-6FB4224A884D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{C45207A9-E424-4B73-BE4B-1D47460D0D6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{CD685592-3911-49A4-8D38-95572CB413D0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{D3C2194B-C64E-4165-BBA0-2D937C451017}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{EA0FA9A0-B6FC-4B3A-817A-7BF436F4B242}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{EC0C25BD-3F01-4049-9791-C47F4B7FC453}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe | "{F37C1390-C7B8-40A0-893B-E8B164BC049B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{FC51DF7D-EEA0-440F-BDA6-23C7855146C6}" = protocol=6 | dir=in | app=c:\users\dm\appdata\roaming\bittorrent\bittorrent.exe | "TCP Query User{1C3A2A5F-E86D-459F-B669-DF90F1CC2911}C:\users\dm\desktop\inne\anon\nowy folder\loe_privateserver.exe" = protocol=6 | dir=in | app=c:\users\dm\desktop\inne\anon\nowy folder\loe_privateserver.exe | "TCP Query User{27350528-F9E7-4150-A281-7088F0892794}C:\users\dm\desktop\inne\anon\tor browser\app\tor.exe" = protocol=6 | dir=in | app=c:\users\dm\desktop\inne\anon\tor browser\app\tor.exe | "TCP Query User{33E1A408-0003-43A9-9A46-F56450C0E40B}C:\users\dm\dysk google\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\users\dm\dysk google\world_of_tanks\wotlauncher.exe | "TCP Query User{3B1D1577-AB6D-431C-9D15-08B600660DD3}C:\games\cs source 2013\hl2.exe" = protocol=6 | dir=in | app=c:\games\cs source 2013\hl2.exe | "TCP Query User{3B1FEDA7-6285-442F-A747-7D09D0AFC7FE}C:\program files (x86)\counter-strike 1.6\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe | "TCP Query User{48BFD33E-9B4C-4FA5-A565-3638165ACD1B}C:\program files (x86)\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "TCP Query User{693F3FFD-2E7B-41D9-BA61-C8775FD772F6}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | "TCP Query User{718E4CF2-A7DA-4F51-A7F2-DA7870781DF3}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "TCP Query User{E96323EA-DD14-4FD0-9348-C14B0268EBC4}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "TCP Query User{EC6EE985-A997-4CFD-9165-EF340EE681CB}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe | "TCP Query User{FEB3F4DF-7490-43FA-AF8F-7807824F7C54}C:\program files (x86)\saints row iv\saintsrowiv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\saints row iv\saintsrowiv.exe | "UDP Query User{29489AC9-62B9-4C74-9BE3-42AA6B7D65A9}C:\games\cs source 2013\hl2.exe" = protocol=17 | dir=in | app=c:\games\cs source 2013\hl2.exe | "UDP Query User{39A9E62C-0C5E-4BFA-AD85-CB5A5B906D4C}C:\program files (x86)\saints row iv\saintsrowiv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\saints row iv\saintsrowiv.exe | "UDP Query User{4EF40D48-432B-44CE-8B18-45647CA11CE7}C:\users\dm\desktop\inne\anon\nowy folder\loe_privateserver.exe" = protocol=17 | dir=in | app=c:\users\dm\desktop\inne\anon\nowy folder\loe_privateserver.exe | "UDP Query User{6A24B945-80B9-48C1-882F-376931FF5154}C:\program files (x86)\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "UDP Query User{78A141F1-5D38-420C-B0F9-2024026BF632}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe | "UDP Query User{95784636-0826-4B0E-965C-0EEE0D936D45}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{A63DFEAE-E1EE-46B0-8184-8A09CF4A5878}C:\users\dm\desktop\inne\anon\tor browser\app\tor.exe" = protocol=17 | dir=in | app=c:\users\dm\desktop\inne\anon\tor browser\app\tor.exe | "UDP Query User{AAFD1992-E0C8-4D7F-8E6E-EA8265208D4C}C:\program files (x86)\counter-strike 1.6\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe | "UDP Query User{B94D4BF3-30D3-4478-8641-9A2AE7175BDF}C:\users\dm\dysk google\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\users\dm\dysk google\world_of_tanks\wotlauncher.exe | "UDP Query User{BB84A6BC-FE2E-4D24-92E0-3B9345147200}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{D287AB46-666A-4C38-BB61-E813A03C106D}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 "{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition) "{45F1F774-38B4-3CC3-BAAF-051E6D19E48E}" = Microsoft .NET Framework 4.5.1 (PLK) "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 3.0.7 "{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 "{90150000-002A-0000-1000-0000000FF1CE}" = Microsoft Office 64-bit Components 2013 "{90150000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2013 "{90150000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2013 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski) "{B0A5A6EE-F8BA-48B1-BB32-BAC17E96C2B4}" = Microsoft Visual J# 2.0 Redistributable Package - SE (x64) "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 320.49 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 320.49 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 320.49 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.7.1 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 320.49 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.13.0604 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 10.4.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC" = GeForce Experience NvStream Client Components "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.3.24.2 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 9.3.21 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.9 "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "Bitdefender" = Bitdefender Total Security "CCleaner" = CCleaner "CPUID HWMonitor_is1" = CPUID HWMonitor 1.25 "Defraggler" = Defraggler "GIMP-2_is1" = GIMP 2.8.10 "NVIDIA Drivers" = NVIDIA Drivers "Pen Tablet Driver" = Wacom "Wacom WebTabletPlugin for Internet Explorer and Netscape" = WebTablet FB Plugin 64 bit "WinRAR archiver" = WinRAR 4.20 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}" = Razer Synapse 2.0 "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{23170F69-40C1-2701-0464-000001000000}" = 7-Zip 4.64 "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 60 "{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}" = NVIDIA PhysX "{373B1718-8CC5-4567-8EE2-9033AD08A680}" = ROBLOX Player "{40C4D9A6-C222-4593-9E81-B42DF5FEBD07}_is1" = Space Engineers wersja 01.027.010 "{418BAAD1-754D-48B4-B078-46EF4F25AF42}" = Google Drive "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in "{4DC2C824-0D75-42C1-BECB-C5583676D253}" = The Panorama Factory V5 m32 Edition "{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}" = Adobe AIR "{532F6E8A-AF97-41C3-915F-39F718EC07D1}" = ASUS GPU Tweak "{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{59E4543A-D49D-4489-B445-473D763C79AF}" = Microsoft Games for Windows - LIVE Redistributable "{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}" = Plants vs. Zombies™ "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{66ED8E01-C915-41F5-B33E-C5C31F27B885}" = USB Network Driver "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{70CB6C40-8DF1-11E1-BDCF-F04DA23A5C58}" = MSVCRT Redists "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™ "{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.14 "{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1" = Free Alarm Clock 3.0.3 "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{90150000-0018-0409-0000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013 "{90150000-0019-0409-0000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013 "{90150000-001A-0409-0000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013 "{90150000-001B-0409-0000-0000000FF1CE}" = Microsoft Word MUI (English) 2013 "{90150000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English "{90150000-001F-040C-0000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français "{90150000-001F-0415-0000-0000000FF1CE}" = Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski "{90150000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español "{90150000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013 "{90150000-0044-0409-0000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013 "{90150000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013 "{90150000-00BA-0409-0000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013 "{90150000-00E2-0409-0000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013 "{90150000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013 "{90150000-0117-0409-0000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013 "{90150000-012B-0409-0000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013 "{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = Rollercoaster Tycoon 3 ZE "{947C41AC-5926-41D6-9139-D41ABE9173AE}" = Bamboo Link "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.07) - Polish "{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager "{BB285C9F-C821-4770-8970-56C4AB52C87E}" = Skype Click to Call "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{BFA04EE0-8240-4667-8D53-45496A901C33}" = Camtasia Studio 8 "{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6 "{C3592426-531E-4110-911D-BFECE2CE284C}" = osu! "{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 "{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh "{D9DAD0FF-495A-472B-9F10-BAE430A26682}" = Obsługa programów Apple "{E8870D92-54F6-4AC7-82D0-7DCDFB1F00AE}" = Cs Non Steam "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 1.60.13 "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1A6C690-C12C-4E7A-B4BD-958678215418}" = 3DMark "{F3FCB08B-E752-444D-86A0-0634A4F3B23D}" = System Requirements Lab CYRI "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 14 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 13 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 12.1 "Ares" = Ares 2.2.6 "Audacity_is1" = Audacity 2.0.5 "Battlelog Web Plugins" = Battlelog Web Plugins "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager "Euro Truck Simulator 2 v1.5.2.1s with Going East DLC1.5.2.1s" = Euro Truck Simulator 2 v1.5.2.1s with Going East DLC "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "FL Studio 10" = FL Studio 10 "Flvto Youtube Downloader" = Flvto Youtube Downloader "FormatFactory" = FormatFactory 2.60 "Google Chrome" = Google Chrome "IL Download Manager" = IL Download Manager "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}" = ASUS GPU Tweak "InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "InstallShield_{947C41AC-5926-41D6-9139-D41ABE9173AE}" = Bamboo Link "KLiteCodecPack_is1" = K-Lite Codec Pack 10.0.5 Full "LAME_is1" = LAME v3.99.3 (for Windows) "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "OpenTTD" = OpenTTD 1.3.3 "Opera 22.0.1471.50" = Opera Stable 22.0.1471.50 "Origin" = Origin "pcsx2-r5350" = PCSX2 - Playstation 2 Emulator "PunkBusterSvc" = PunkBuster Services "Rainmeter" = Rainmeter "Razer Game Booster_is1" = Razer Game Booster "Razer Surround" = Razer Surround "SpeedFan" = SpeedFan (remove only) "Steam" = Steam "Steam App 1840" = Source Filmmaker "Steam App 8930" = Sid Meier's Civilization V "Swiff Player_is1" = Swiff Player 1.7.2 "To the Moon1.0" = To the Moon "Tropico 5_is1" = Tropico 5 "U2FpbnRzUm93SVY=_is1" = Saints Row IV "Uplay" = Uplay "Wacom WebTabletPlugin for Internet Explorer and Netscape" = WebTablet FB Plugin 32 bit "Watch Dogs_R.G. Mechanics_is1" = Watch Dogs "Winamp" = Winamp "Wise Registry Cleaner_is1" = Wise Registry Cleaner 8.03 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1818139271-3789548429-1232871354-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free (DM) "6b0b0d2561055daf" = Smooth Operators - Indie Gala Edition "Bitcoin" = Bitcoin "Papers, Please PL" = Papers, Please PL "TeamSpeak 3 Client" = TeamSpeak 3 Client "UnityWebPlayer" = Unity Web Player "UpdateChecker" = UpdateChecker "Winamp Detect" = Detektor Winampa [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1818139271-3789548429-1232871354-1068\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free (DM) "Bitcoin" = Bitcoin "BitTorrent" = BitTorrent "MyFreeCodec" = MyFreeCodec "Papers, Please PL" = Papers, Please PL "TeamSpeak 3 Client" = TeamSpeak 3 Client "UnityWebPlayer" = Unity Web Player "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-06-15 15:18:23 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 15:18:23 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 15:58:59 | Computer Name = DM-PC | Source = VSS | ID = 8194 Description = Blad Uslugi kopiowania woluminów w tle: nieoczekiwany blad podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostepu. . To jest czesto spowodowane przez niepoprawne ustawienia zabezpieczen w procesie zapisujacym lub zadajacym. Operacja: Zbieranie danych modulu zapisujacego Kontekst: Identyfikator klasy modulu zapisujacego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modulu zapisujacego: System Writer Identyfikator wystapienia modulu zapisujacego: {c846415e-66c9-42e2-9d37-a082d95aecb3} Error - 2014-06-15 23:17:30 | Computer Name = DM-PC | Source = TabletServicePen | ID = 0 Description = Error - 2014-06-15 23:17:35 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 23:17:35 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 23:17:37 | Computer Name = DM-PC | Source = WTabletServiceCon | ID = 1 Description = Error - 2014-06-15 23:28:49 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 23:28:49 | Computer Name = DM-PC | Source = NvStreamSvc | ID = 131073 Description = Error - 2014-06-15 23:29:45 | Computer Name = DM-PC | Source = TabletServicePen | ID = 0 Description = Error - 2014-06-15 23:29:53 | Computer Name = DM-PC | Source = WTabletServiceCon | ID = 1 Description = [ System Events ] Error - 2014-06-15 15:25:59 | Computer Name = DM-PC | Source = Schannel | ID = 36888 Description = Zostal wygenerowany nastepujacy alert krytyczny: 43. Stan bledu wewnetrznego: 552. Error - 2014-06-15 15:25:59 | Computer Name = DM-PC | Source = Schannel | ID = 36876 Description = Certyfikat odebrany od serwera zdalnego nie zostal zweryfikowany pomyslnie. Kod bledu: 0x80092013. Zadanie polaczenia SSL nie powiodlo sie. W dolaczonych danych znajduje sie certyfikat serwera. Error - 2014-06-15 22:21:57 | Computer Name = DM-PC | Source = DCOM | ID = 10010 Description = Error - 2014-06-15 23:16:39 | Computer Name = DM-PC | Source = EventLog | ID = 6008 Description = Poprzednie zamkniecie systemu przy 05:14:43 na ?2014-?06-?16 bylo nieoczekiwane. Error - 2014-06-15 23:24:51 | Computer Name = DM-PC | Source = Schannel | ID = 36888 Description = Zostal wygenerowany nastepujacy alert krytyczny: 43. Stan bledu wewnetrznego: 552. Error - 2014-06-15 23:24:51 | Computer Name = DM-PC | Source = Schannel | ID = 36876 Description = Certyfikat odebrany od serwera zdalnego nie zostal zweryfikowany pomyslnie. Kod bledu: 0x80092013. Zadanie polaczenia SSL nie powiodlo sie. W dolaczonych danych znajduje sie certyfikat serwera. Error - 2014-06-15 23:28:06 | Computer Name = DM-PC | Source = EventLog | ID = 6008 Description = Poprzednie zamkniecie systemu przy 05:26:39 na ?2014-?06-?16 bylo nieoczekiwane. Error - 2014-06-15 23:36:46 | Computer Name = DM-PC | Source = Schannel | ID = 36888 Description = Zostal wygenerowany nastepujacy alert krytyczny: 43. Stan bledu wewnetrznego: 552. Error - 2014-06-15 23:36:46 | Computer Name = DM-PC | Source = Schannel | ID = 36876 Description = Certyfikat odebrany od serwera zdalnego nie zostal zweryfikowany pomyslnie. Kod bledu: 0x80092013. Zadanie polaczenia SSL nie powiodlo sie. W dolaczonych danych znajduje sie certyfikat serwera. Error - 2014-06-16 12:23:44 | Computer Name = DM-PC | Source = DCOM | ID = 10010 Description = < End of report >