Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by leszek at 2015-06-02 19:50:55
Running from C:\Users\leszek\Desktop\Nowy folder
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3924117992-576461840-467304932-500 - Administrator - Disabled)
Gość (S-1-5-21-3924117992-576461840-467304932-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3924117992-576461840-467304932-1002 - Limited - Enabled)
JOLA (S-1-5-21-3924117992-576461840-467304932-1001 - Administrator - Enabled) => C:\Users\JOLA
leszek (S-1-5-21-3924117992-576461840-467304932-1003 - Administrator - Enabled) => C:\Users\leszek

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Ochrona komputera (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AS: Ochrona komputera (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Crystal Eye webcam (HKLM\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.34.724 - Chicony Electronics Co.,Ltd.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS5 (HKLM\...\{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Advanced RAR Repair v1.2 (HKLM\...\Advanced RAR Repair v1.2) (Version:  - )
ALLConverter PRO 1.3 (HKLM\...\{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1) (Version:  - ALLCinema, Inc.)
Ashampoo WinOptimizer 10 v.10.2.5 (HKLM\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.02.05 - Ashampoo GmbH & Co. KG)
Centrum obsługi urządzeń z systemem Windows Mobile — aktualizacja sterowników (HKLM\...\{E7044E25-3038-4A76-9064-344AC038043E}) (Version: 6.1.6965.0 - Microsoft Corporation)
Common Desktop Agent (Version: 1.53.0 - OEM) Hidden
Computer Security 12.83.104.0 (release) (Version: 12.83.104.0 - F-Secure Corporation) Hidden
ConvertAd (HKLM\...\ConvertAd) (Version: 1.0.0.0 - ConvertAd) <==== ATTENTION
Creative Pack Volume 1 (HKLM\...\{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}) (Version: 3.0.1 - Corel Corporation)
Dazzle Video Capture DVC100 X86 Driver 1.06 (HKLM\...\{D4ACFA69-25BA-4B10-8A5E-CA222939FCF9}) (Version: 1.06.0000 - Pinnacle)
DivX PowerPack 1.54 (HKLM\...\{17301EEA-29BD-4666-AEF7-56BF5903B99F}_is1) (Version: 1.54 - Maciej Bieniek)
Divxpack (remove only) (HKLM\...\Divxpack) (Version:  - )
Dodatek Zapisywanie jako PDF lub XPS firmy Microsoft dla programów pakietu Microsoft Office 2007 (HKLM\...\{90120000-00B2-0415-0000-0000000FF1CE}) (Version: 12.0.4518.1020 - Microsoft Corporation)
e-Deklaracje Desktop (HKLM\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 7.0.1 - Ministerstwo Finansow)
e-Deklaracje Desktop (Version: 7.0.1 - Ministerstwo Finansow) Hidden
EVEREST Ultimate Edition v5.00 (HKLM\...\EVEREST Ultimate Edition_is1) (Version: 5.00 - Lavalys, Inc.)
Exifer (HKLM\...\Exifer_is1) (Version:  - Friedemann Schmidt)
ffdshow (HKLM\...\ffdshow) (Version: 20050215 - Milan Cutka)
Filmmaker's Toolkit for Studio (HKLM\...\InstallShield_{2444562A-A7DC-42B8-A4D8-1BCF704B1480}) (Version: 1.0.1 - Red Giant)
Filmmaker's Toolkit for Studio (Version: 1.0.1 - Red Giant) Hidden
FormatFactory 2.60 (HKLM\...\FormatFactory) (Version: 2.60 - Free Time)
Freemake Video Converter wersja 4.1.5 (HKLM\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
F-Secure CCF Reputation (Version: 1.0.25.1877 - F-Secure) Hidden
F-Secure CCF Scanning 1.51.111.300 (release) (Version: 1.51.111.300 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.128 (Version: 1.02.128 - F-Secure Corporation) Hidden
Gadu-Gadu 10 (GG 10.5) Packages (HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\Gadu-Gadu 10 (GG 10.5) Packages) (Version:  - ) <==== ATTENTION
GG (HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\GG) (Version: 12 - GG Network S.A.)
Google Earth (HKLM\...\{0A844D8F-A965-11E2-9E77-B8AC6F98CCE3}) (Version: 7.1.1.1580 - Google)
Google SketchUp Pro 8 PL (Version: 8.0.4811.3 - Progrupa sp. z o.o.) Hidden
High-Definition Video Playback 10 (Version: 7.0.11400.29.0 - Nero AG) Hidden
Hollywood FX Volumes 1-3 (HKLM\...\{E3D181F8-246B-497F-945E-6DB98CBA6677}) (Version: 2.0.1 - Corel Corporation)
Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version:  - )
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
K-Lite Codec Pack 9.8.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 9.8.0 - )
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motion Graphics Toolkit for Studio (HKLM\...\InstallShield_{E5C99F9E-E97D-40B6-BAFC-8BCBFF1031E4}) (Version: 1.0.1 - Red Giant)
Motion Graphics Toolkit for Studio (Version: 1.0.1 - Red Giant) Hidden
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\MyFreeCodec) (Version:  - )
NapiProjekt 2.0.0 (build 2151) (HKLM\...\NapiProjekt_is1) (Version:  - )
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG)
Nero DiscCopy Gadget 10 (HKLM\...\{92EC1A84-7FFC-42DF-A8F6-79C21C4765A5}) (Version: 3.0.10700.9.100 - Nero AG)
Nero Express 10 (HKLM\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG)
Nero InfoTool 10 (HKLM\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13200 - Nero AG)
Nero Recode 10 (HKLM\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
Online Safety 2.83.1346.10 (Version: 2.83.1346.10 - F-Secure Corporation) Hidden
OpenFM (HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\OpenFM) (Version: 2 - GG Network S.A.)
OpenOffice 4.0.1 (HKLM\...\{DA0106A3-216E-48DE-9CF6-655DA8FC1D22}) (Version: 4.01.9714 - Apache Software Foundation)
Pakiet Bezpieczeństwa UPC (HKLM\...\F-Secure ServiceEnabler 46267) (Version: 1.83.315.0 - F-Secure Corporation)
Pakiet Bezpieczeństwa UPC (Version: 1.83.315.0 - F-Secure Corporation) Hidden
PATRONAT7 (HKLM\...\{2170D74F-E036-48AD-B7CD-56257F327DAD}) (Version: 7 - PATRONAT7-UPGRADE)
PATRONAT7 (HKLM\...\{ADCCB4AE-15D1-4F90-ABDF-4E7872531626}) (Version: 7 - PATRONAT7-UPGRADE)
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
Phoenix Service Software 2010.8.4.41526 (HKLM\...\{92DA4424-0CFB-44D1-A08B-B63D5D8BEFBC}_is1) (Version:  - PhoenixSlayer)
Pinnacle Studio 17 (HKLM\...\{3DA8F808-72E2-4361-82EC-433081D23005}) (Version: 17.6.0.332 - Corel Corporation)
Pinnacle Studio 17 Add-Ons (Version: 17.0 - Corel) Hidden
Pinnale Systems Software Keys (HKLM\...\{616CD10B-1EC7-41D2-8C14-3ECE93E7AEE9}_is1) (Version:  - VPP TEAM)
Polski pakiet językowy dla programu Google SketchUp Pro 8 (HKLM\...\Google SketchUp Pro 8 PL) (Version: 8.0.4811.3 - Progrupa sp. z o.o.)
Premium Pack Volumes 1-2 (HKLM\...\{88C4D8A6-9954-46A0-965D-92E55DAB8734}) (Version: 2.0.1 - Corel Corporation)
proDAD Vitascene 2.0 (HKLM\...\proDAD-Vitascene-2.0) (Version: 2.0.112 - proDAD GmbH)
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.02.06.10 - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Assistant (HKLM\...\Samsung Scan Assistant) (Version: 1.04.45.00 - Samsung Electronics Co., Ltd.)
Samsung SCX-3400 Series (HKLM\...\Samsung SCX-3400 Series) (Version: 1.08 (2012-05-07) - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
ScoreFitter Volumes 1-2 (HKLM\...\{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}) (Version: 2.0.1 - Corel Corporation)
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.4 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
SmartSound Common Data (HKLM\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.)
SmartSound Common Data (Version: 1.1.0 - SmartSound Software Inc.) Hidden
SmartSound Sonicfire Pro 5 (HKLM\...\InstallShield_{1D273D91-D7D5-4036-8B84-EB4615FF5F81}) (Version: 5.6.0 - SmartSound Software Inc.)
SmartSound Sonicfire Pro 5 (Version: 5.6.0 - SmartSound Software Inc.) Hidden
SureThing Express Labeler (HKLM\...\stax-Pinnacle_is1) (Version:  - MicroVision Development, Inc.)
Title Extreme (HKLM\...\{F7214014-27EE-4237-9978-2F9D1551559B}) (Version: 2.0.1 - Corel Corporation)
Ultra RM Converter 4.2.0220 (HKLM\...\Ultra RM Converter_is1) (Version:  - Aone Software)
Update for Zip Opener (HKU\S-1-5-21-3924117992-576461840-467304932-1001\...\DSite) (Version:  - ) <==== ATTENTION
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.0.0.0 - Azureus Software, Inc.)
Windows Mobile Device Center (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR 4.20 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wtyczka e-Deklaracje (HKLM\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: 4.1.0 - Ministerstwo Finansów)
XviD MPEG-4 Video Codec (HKLM\...\XviD_is1) (Version: XviD-1.0.1-05062004 - XviD Team (Koepi))

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3924117992-576461840-467304932-1001_Classes\CLSID\{1EBF38D6-BF74-62AA-BFC1-C6D1D27E600D}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3924117992-576461840-467304932-1003_Classes\CLSID\{1EBF38D6-BF74-62AA-BFC1-C6D1D27E600D}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3924117992-576461840-467304932-1003_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\leszek\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.)

==================== Restore Points =========================

24-04-2015 23:30:59 Zaplanowany punkt kontrolny
06-05-2015 21:11:58 Zaplanowany punkt kontrolny
13-05-2015 20:45:53 Windows Update
15-05-2015 12:51:56 Windows Update
15-05-2015 20:01:42 Windows Update
22-05-2015 14:28:09 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2014-05-30 07:42 - 2014-05-30 07:42 - 00000355 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	localhost
::1			localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B4F7FAB-9787-4F25-9220-D80942763F1F} - System32\Tasks\{134B2DF3-D007-4D9A-8E13-FC77DD974FEE} => pcalua.exe -a F:\AutoRunPro.exe -d F:\
Task: {13B1C0AC-FB0F-4968-8F72-831EC7CE0711} - System32\Tasks\{FCFD5D36-5309-43EE-BF48-8340C8781738} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"
Task: {1DDE77CC-2B14-4290-BBCE-ED701E0E4BBF} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {1F193B56-B615-45EA-9E9D-87692D8E5317} - System32\Tasks\{451EFC9C-F032-4CC8-B526-9C77D9053D4E} => pcalua.exe -a "C:\Users\leszek\Desktop\driver for 3476 5743 5744\Setup_.exe" -d "C:\Users\leszek\Desktop\driver for 3476 5743 5744"
Task: {23745F22-4BBE-403C-9D41-3B6DCE81DB6B} - System32\Tasks\{0C5B0297-377A-4439-8EFF-03850F984D72} => C:\Users\leszek\Desktop\krp-beta7.exe
Task: {26507EB7-49E8-4DA8-ADBF-3C57C8A228EC} - System32\Tasks\{D62D7395-F83A-49D4-B4C2-9F228F0CBD83} => pcalua.exe -a C:\Users\leszek\Desktop\RM-237_DP20_8.10__sw-07.21.exe -d C:\Users\leszek\Desktop
Task: {2D5F5565-58B1-4AAF-9476-C411957C6124} - System32\Tasks\AdobeAAMUpdater-1.0-JOLA-Komputer-leszek => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {2DC3C306-EF47-406D-AF0F-0F532289BA8D} - System32\Tasks\{08D2558B-E0CA-4E7A-AC61-B19C63225CED} => pcalua.exe -a "D:\photoshop\Kurs Photoshop - praktyczne projekty\Kodeki\kodek - tscc.exe" -d "D:\photoshop\Kurs Photoshop - praktyczne projekty\Kodeki"
Task: {3E9286D6-146B-4674-B585-955F30EF3AA5} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe <==== ATTENTION
Task: {4078C36A-BD98-4A8D-86EA-A46430B39D8A} - System32\Tasks\{CBE23C82-F3A9-4270-9636-1B538B9C3D4F} => D:\Nowy folder\MSWT2004\MSWorldTour.exe
Task: {41CF395E-B843-45BF-B1C2-6427DD576368} - System32\Tasks\{41800F67-1B0E-4B7B-9AEB-6B912B16DC12} => pcalua.exe -a "C:\Program Files\SureThing Express Labeler\unins000.exe"
Task: {574E1E2A-3B31-4F1D-9B32-825F7255A588} - System32\Tasks\{9F145980-B2FA-4A68-A563-30FC14226FB7} => pcalua.exe -a "C:\Users\leszek\Desktop\driver for 3476 5743 5744\SETUP.EXE" -d "C:\Users\leszek\Desktop\driver for 3476 5743 5744"
Task: {5BB58CB0-389F-40FA-91EE-042D21FFDD50} - System32\Tasks\AdobeAAMUpdater-1.0-JOLA-Komputer-JOLA => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {62BC5A5C-99A2-4684-BF35-B1B33859BDD5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-17] (Adobe Systems Incorporated)
Task: {67BEC20E-8DC2-4664-A5A7-32B43DD2DF34} - System32\Tasks\{7CBB2957-A5A5-4E78-988C-AEBF6B0DD397} => pcalua.exe -a "C:\Program Files\Avid\Studio Plugins\RedGiant\TCShineStudio.exe" -d "C:\Program Files\Avid\Studio Plugins\RedGiant"
Task: {80F9B260-7F67-49ED-9481-5CC7367BDEFB} - System32\Tasks\{2F414D25-DFEE-4FF7-AFCD-E779AD8DD6F2} => D:\CART\rebuilt.krp-beta7.exe
Task: {8BE4E315-5887-4034-905D-06C916C52311} - System32\Tasks\{22534D6A-22A6-41F0-A513-A9C032C9F93A} => pcalua.exe -a "F:\Nowy folder (3)\DODATKI AVID\Red.Giant.Plugins.Pack by ramzesadam+Serial\Red.Giant.Red.Giant.Trapcode.Starglow.v1.6.for.Multiple\Avid AVX\Trapcode Starglow AVX 1.5.1.exe" -d "F:\Nowy folder (3)\DODATKI AVID\Red.Giant.Plugins.Pack by ramzesadam+Serial\Red.Giant.Red.Giant.Trapcode.Starglow.v1.6.for.Multiple\Avid AVX"
Task: {8D41FE59-1032-4B0A-9732-841066AA512C} - System32\Tasks\{42AA610F-5AB5-40A6-B4CB-521EFF02FA93} => C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
Task: {93125F2C-3AF8-4E00-8E5D-67C683B19AD3} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {9CF2513D-4AE0-4404-A36C-F2225FE909F4} - System32\Tasks\{09D87AF4-E43F-48F7-BA90-C71C26921DD1} => pcalua.exe -a "D:\AVID PLIKI\RedGiant\KnollEZStudio.exe" -d "D:\AVID PLIKI\RedGiant"
Task: {A2947084-3520-4EBF-9652-DE8B80FE416C} - System32\Tasks\{11A9C86D-FF4B-4D40-B294-31085E0A3E0B} => pcalua.exe -a E:\setup.exe -d E:\
Task: {A4D357DE-BEB2-47FD-A240-6EB76D2C066F} - System32\Tasks\DSite => C:\Users\JOLA\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {A8B29310-2352-48E5-A21B-181002562262} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {A969328A-1161-4A60-A379-E87FEB43987F} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {B3240B15-7C9D-4517-9B2D-A7536CAFBD2D} - System32\Tasks\4835 => Wscript.exe C:\Users\leszek\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {B4BBB5D9-4662-45F7-B33C-DAE7D71FA137} - System32\Tasks\{7BC357D6-C8E7-4A4B-BFC5-E53DC4F0E665} => C:\Users\leszek\Desktop\krp-beta7.exe
Task: {B84A3D18-2BFB-4FF8-8639-F4BFE398ED7A} - System32\Tasks\RunAsStdUser => C:\Program Files\Desk 365\desk365.exe <==== ATTENTION
Task: {BCA6C1EB-ECA5-4FF5-8A50-17E998CCAA9E} - System32\Tasks\{0631AAA9-FF7E-4223-8B9C-4D9B3B139013} => D:\CART\Tom Coronel Indoor Kartracing\kart.exe
Task: {DCA46324-F0B4-43A6-A43F-52157C5F90F1} - System32\Tasks\{F6429747-5075-4325-A209-12F6E6182B62} => pcalua.exe -a "C:\Users\leszek\Pictures\ALARMOWE\7 Sins\GameSetup.exe" -d "C:\Users\leszek\Pictures\ALARMOWE\7 Sins"
Task: {E507527E-A713-4AFA-8C89-00B036694290} - System32\Tasks\{E173F09E-2B3F-4D15-B463-EC756E66CACE} => D:\Nowy folder\MSWT2004\MSWorldTour.exe
Task: {EC339D86-5A18-4E59-B5C8-1D0C0E34082E} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {EE93797B-F44E-4DBE-8076-7A06CC5A1A69} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {F335E578-55DB-4734-9470-CB0F8A0147CC} - System32\Tasks\{9131B289-C536-4143-9B63-CDE578E51B24} => pcalua.exe -a C:\Users\leszek\Desktop\phoenixreg.exe -d C:\Users\leszek\Desktop
Task: {F6BB103B-0FF6-43B6-9872-6B0AA361FD44} - System32\Tasks\{938091E3-562C-4B0C-89E5-02AFE45BDD17} => D:\CART\rebuilt.krp-beta7.exe
Task: {FEEFCDE0-7F5A-4CF7-B9AA-433A0AB205BB} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exe <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\JOLA\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2013-02-01 17:32 - 2011-05-02 06:41 - 00024064 _____ () C:\Windows\System32\ssm1mlm.dll
2009-09-01 05:31 - 2009-09-01 05:31 - 00022723 _____ () C:\Windows\System32\ssp2ml3.dll
2014-11-11 16:07 - 2013-08-14 14:22 - 00045504 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2013-05-15 17:05 - 2013-05-15 17:05 - 00220096 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\daas2.dll
2014-11-11 16:14 - 2014-11-11 16:14 - 00030888 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2014-11-11 16:07 - 2015-04-14 10:15 - 00175144 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Gemini\fsgem.dll
2014-11-11 16:07 - 2014-11-11 16:14 - 00212008 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Spam Control\fsas.dll
2014-11-11 16:07 - 2015-02-24 22:48 - 00949288 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2010-12-17 19:12 - 2010-12-17 19:12 - 00332288 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2010-12-17 19:13 - 2010-12-17 19:13 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2014-11-11 16:07 - 2013-08-14 14:22 - 00056256 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\FSGUI\fsavures.eng
2014-05-01 12:23 - 2014-05-01 12:23 - 00593464 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll
2014-11-11 16:07 - 2013-08-14 14:22 - 00154560 _____ () C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\FSGUI\flyerres.eng
2015-04-24 19:03 - 2015-04-24 19:03 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\9b11f95761e3c76aa93115ce2f5c2ae5\Kies.Common.DeviceServiceLib.Interface.ni.dll
2015-04-24 19:03 - 2015-04-24 19:03 - 14993920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\3653ac1d9f963527f0a0d09d810dc847\Kies.Theme.ni.dll
2015-05-15 13:38 - 2015-05-15 13:38 - 01876992 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\dc603bd3d0a0801da356bdadf84138fa\Kies.UI.ni.dll
2015-04-24 19:02 - 2015-04-24 19:02 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\0da2411911d04d158b83ea1b9e8794c8\Kies.MVVM.ni.dll
2014-10-16 11:51 - 2014-10-16 11:51 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\6815ff93472d008087880a6462931188\ASF_cSharpAPI.ni.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3924117992-576461840-467304932-1001\...\samsungsetup.com -> hxxp://www.samsungsetup.com
IE trusted site: HKU\S-1-5-21-3924117992-576461840-467304932-1001\...\wp.pl -> hxxp://czat.wp.pl


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3924117992-576461840-467304932-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\JOLA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3924117992-576461840-467304932-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\leszek\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.179.1.62 - 62.179.1.63

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: ABBYY Screenshot Reader Bonus => "C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe" -autorun
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Bonus.SSR.FR12 => "C:\Program Files\ABBYY FineReader 12\Bonus.ScreenshotReader.exe" /autorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: VideoDownloadConverter Search Scope Monitor => "C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
MSCONFIG\startupreg: VideoDownloadConverter_4z Browser Plugin Loader => C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbrmon.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{06D51CA9-890E-44DA-8101-0F847CE93E28}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil_.exe
FirewallRules: [{3C1C2513-AE28-4ECD-B6A8-5C037A1408BB}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil_.exe
FirewallRules: [TCP Query User{DC836AFC-FCD1-4408-BC95-2FAC0AF0204D}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{E40964A2-26CB-4EB5-A8F0-ABB9EB804F8E}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{AA1A079A-1E17-4F50-A842-9C7EE5DD7A89}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{3EAB10C8-E0BC-4BCA-B840-FA900B81C44B}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{3AD5E4E4-623D-4DF3-BE81-A2FEE0C8EF1C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7B22BC5A-239B-4850-9FCE-5D68C9083180}] => (Allow) C:\Windows\System32\msiexec.exe
FirewallRules: [{2AE4D1F2-3694-49E3-8F14-558840B2471E}] => (Allow) C:\Windows\System32\msiexec.exe
FirewallRules: [{AAAE40F7-1F49-4A80-A1EC-BB6A6F4DC66C}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{3DCCD4FD-1BD9-4772-B24E-11763463CA1F}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{999529F8-AB54-49BF-B07F-054CA1617828}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{36247760-534F-46EE-9A19-64695D6CDAE4}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{F4D8B319-DC6B-499E-BC0D-B971383103F5}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{DA57A5E9-0206-4504-BBD5-E02D69469206}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{F71E0127-9796-4659-8FFB-A19E63FDB4C2}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{F8F4C1F1-1768-4FA9-A769-AF749A165EAA}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{92AFBC9C-DF3F-4C0B-AFF8-EE28B9EE5276}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{EFF36DFF-7BED-47CA-B0C3-2D4ED33E5E1B}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{2C42E4EA-B85F-485E-A75F-93427B677A17}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{F4BFA60B-39D1-43CC-AC69-A37C6158AF53}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{FCD06812-13EB-49D2-A314-1FF50714DC3F}] => (Allow) C:\Program Files\Scan Assistant\USDAgent.exe
FirewallRules: [{427E5A7E-D26E-47C9-90AA-385AF68CDBD5}] => (Allow) C:\Program Files\Scan Assistant\USDAgent.exe
FirewallRules: [{D7C906DF-F484-4E6D-BF6F-ADFC2C274E21}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{1CC38278-A513-44F8-B5EE-0D243BF8C3E5}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{80164AC2-7311-4901-B257-88572BDDA0DC}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{04D33C94-D3D6-4A58-947F-44403B1C9AFA}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{2A92C76B-CC0B-4DEB-96D1-7377B2BEFA05}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{DD36EDBB-719F-4270-9B9E-4CC2C2FBA97E}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{C050E79A-9134-4041-8729-7751736CE972}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{8C935B47-717E-4D24-88A5-8F7A322965DA}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{79D4A50E-ACB7-4983-842D-4DC89309EDE0}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{BE412881-4F8E-4AA7-B825-5C9950457758}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{B5009990-47CE-4B6C-BC66-53701E39D9E8}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{8A788EF2-B471-429F-BA7F-30EBB341840B}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{51735269-96D4-43FC-9077-C9453BD3624A}] => (Allow) C:\Program Files\Scan Assistant\USDAgent.exe
FirewallRules: [{8CA86123-2CDA-4FDA-B1AA-E6429228813E}] => (Allow) C:\Program Files\Scan Assistant\USDAgent.exe
FirewallRules: [{784D4379-00B1-4B71-9182-FA0AC20A61D6}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{7143F654-742C-4E7C-876D-BC26F561F20D}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [TCP Query User{9DA7048A-2BC1-4777-B1D5-76CDBDC89D23}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe
FirewallRules: [UDP Query User{0E99C026-D986-45AF-97B7-6981BFADD6AA}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe
FirewallRules: [{A176D891-2706-4474-9EC4-0F61EB50C18C}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8B3A316D-364E-4BC0-B2F2-A4C547FE3997}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\RM.exe
FirewallRules: [{2B58CAA0-85A2-4AE2-8941-88572B186A5A}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\RM.exe
FirewallRules: [{C643FD32-A0FA-43FF-BF47-4AAA928B8DC7}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\NGStudio.exe
FirewallRules: [{0C9F98CB-C66B-4FFE-9135-999F433D793C}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\NGStudio.exe
FirewallRules: [{9C10E39C-BED7-4F16-A9AD-CC40B8EDE04F}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\UMI.exe
FirewallRules: [{3F797E5E-9CAF-4F22-A1AE-83DE78F3A809}] => (Allow) C:\Program Files\Pinnacle\Studio 17\programs\UMI.exe
FirewallRules: [TCP Query User{DAE127CD-D885-46F7-B50D-9898BADB0E40}C:\program files\vuze\azureus.exe] => (Block) C:\program files\vuze\azureus.exe
FirewallRules: [UDP Query User{0419C306-C5F2-4DF2-941A-FE5AB221D249}C:\program files\vuze\azureus.exe] => (Block) C:\program files\vuze\azureus.exe

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/02/2015 07:08:25 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (06/02/2015 07:08:25 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (06/02/2015 07:02:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (06/02/2015 06:44:47 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (06/01/2015 09:57:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program iexplore.exe w wersji 11.0.9600.17801 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: 5c4

Godzina rozpoczęcia: 01d09ca4c1e14540

Godzina zakończenia: 172

Ścieżka aplikacji: C:\Program Files\Internet Explorer\iexplore.exe

Identyfikator raportu:

Error: (05/31/2015 11:24:56 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (05/31/2015 11:24:55 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (05/31/2015 10:24:55 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (05/31/2015 10:24:55 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.

Error: (05/31/2015 09:24:55 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: ZARZĄDZANIE NT)
Description: System Windows nie może załadować pliku rejestru klas.
 SZCZEGÓŁY — Nieokreślony błąd.


System errors:
=============
Error: (06/02/2015 07:02:39 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (06/02/2015 06:26:11 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (06/01/2015 09:54:35 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (05/31/2015 11:09:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows.

Error: (05/31/2015 09:18:34 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (05/31/2015 00:42:04 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (05/31/2015 00:40:35 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi Dnscache.

Error: (05/30/2015 08:42:53 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (05/30/2015 00:55:25 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: właściwe dla aplikacjiLokalnyUruchom{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)

Error: (05/29/2015 01:10:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows.


Microsoft Office:
=========================
Error: (12/11/2013 00:01:29 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 2, Application Name: Microsoft Office Access, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 133 seconds with 120 seconds of active time.  This session ended with a crash.

Error: (11/19/2013 07:54:04 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 2, Application Name: Microsoft Office Access, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 564 seconds with 540 seconds of active time.  This session ended with a crash.

Error: (11/18/2013 07:56:43 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 2, Application Name: Microsoft Office Access, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 271 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (05/30/2013 00:28:57 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/30/2013 00:27:54 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 9802 seconds with 3180 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz
Percentage of memory in use: 46%
Total physical RAM: 2814.42 MB
Available physical RAM: 1510.7 MB
Total Pagefile: 5627.16 MB
Available Pagefile: 3910.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.29 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:227.88 GB) (Free:139.9 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:227.88 GB) (Free:136.38 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 33AA84EE)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=227.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=227.9 GB) - (Type=07 NTFS)

==================== End of log ============================