Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-07-2015 Ran by Semijah at 2015-07-05 14:00:44 Running from C:\Users\Semijah\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2001989473-1170954191-3321282362-500 - Administrator - Disabled) Gość (S-1-5-21-2001989473-1170954191-3321282362-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2001989473-1170954191-3321282362-1002 - Limited - Enabled) Semijah (S-1-5-21-2001989473-1170954191-3321282362-1001 - Administrator - Enabled) => C:\Users\Semijah ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated) Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.117 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) Aktualizacje NVIDIA 2.4.5.28 (Version: 2.4.5.28 - NVIDIA Corporation) Hidden Alternative Look for Yennefer (HKLM-x32\...\Alternative Look for Yennefer_is1) (Version: 1.0.0.0 - GOG.com) Bastion (HKLM-x32\...\1423058311_is1) (Version: 2.0.0.6 - GOG.com) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB) Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com) BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC) BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC) BitTorrent (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\BitTorrent) (Version: 7.8.1.29939 - BitTorrent Inc.) BitTorrent Packages (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\BitTorrent Packages) (Version: - ) <==== ATTENTION CCleaner (HKLM\...\CCleaner) (Version: 5.06 - Piriform) Creative ALchemy Universal (HKLM-x32\...\ALchemy) (Version: - ) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd) DEAD OR ALIVE 5 Last Round (HKLM-x32\...\REVBRE9SQUxJVkU1TGFzdFJvdW5k_is1) (Version: 1 - ) Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation) Dreamfall Chapters (HKLM-x32\...\Dreamfall Chapters_is1) (Version: 1.0 - ) Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD) Dungeon Keeper 2 (HKLM-x32\...\Dungeon Keeper II) (Version: - ) EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc) Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.4 - Echobit, LLC) foobar2000 v1.2.9 (HKLM-x32\...\foobar2000) (Version: 1.2.9 - Peter Pawlowski) Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions) Free Zune Video Converter 1.1 (HKLM-x32\...\{C1AE31B4-CDC7-4782-9A7D-1892B2013019}_is1) (Version: 1.1 - Jacek Pazera) FTL version 1.03.3 (HKLM-x32\...\{20E23A40-38E5-4DD6-B738-BC8097AE66B6}_is1) (Version: 1.03.3 - Subset Games) Galaxy Client (HKLM-x32\...\{D6D1DA54-531F-4FA0-B683-CE66ACE3543F}_is1) (Version: 0.1.0.456 - GOG.com) Game Dev Tycoon wersja 1.4.5 (HKLM-x32\...\{5BBB8682-1335-410F-A79F-8E5611A54BD0}_is1) (Version: 1.4.5 - Greenheart Games Pty. Ltd.) GameRanger (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\GameRanger) (Version: - GameRanger Technologies) GG (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\GG) (Version: 11 - GG Network S.A.) Google Chrome (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) Hand of Fate (HKLM-x32\...\1424100574_is1) (Version: 2.0.0.1 - GOG.com) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes III The Shadow of Death (HKLM-x32\...\Heroes III The Shadow of Death) (Version: - ) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Hotline Miami (HKLM-x32\...\GOGPACKHOTLINEMIAMI_is1) (Version: 2.0.0.4 - GOG.com) Hotline Miami 2 - Wrong Number (HKLM-x32\...\1424773427_is1) (Version: 2.0.0.1 - GOG.com) Hotline Miami 2: Wrong Number Digital Comic (HKLM-x32\...\Steam App 341190) (Version: - Dennaton Games) HotPotatoes v 6.3.0.5 (HKLM-x32\...\hotpot_is1) (Version: - HalfBaked) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) K-Lite Codec Pack 10.2.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden Malwarebytes Anti-Malware wersja 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.) Metal Gear Solid V Ground Zeroes (HKLM-x32\...\Metal Gear Solid V Ground Zeroes_is1) (Version: - ) Microsoft .NET Compact Framework 2.0 SP1 (HKLM-x32\...\{625386A4-B6B6-4911-A6E8-23189C3F2D15}) (Version: 2.0.6129 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60830 (HKLM\...\{122B909F-9DCF-360E-91E7-0679E033FBE1}) (Version: 11.0.60830 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60830 (HKLM\...\{083808D6-6235-37A8-82C1-98D226EB681F}) (Version: 11.0.60830 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (HKLM-x32\...\{F68B404C-0E04-337F-A132-796508EE337A}) (Version: 11.0.60830 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (HKLM-x32\...\{50AF8559-F490-381F-A6E7-06A07DE227DC}) (Version: 11.0.60830 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{85467CBC-7A39-33C9-8940-D72D9269B84F}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Minecraft1.7.2 (HKLM-x32\...\Minecraft1.7.2) (Version: - ) Minecraft1.7.9 (HKLM-x32\...\Minecraft1.7.9) (Version: - ) Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION Mortal Kombat (HKLM-x32\...\Mortal Kombat_is1) (Version: 1.0u2 - WB Interactive Entertainment) MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com) Mozilla Firefox 38.0.5 (x86 pl) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 pl)) (Version: 38.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) My Game Long Name (HKLM\...\UDK-67a18dc0-4858-4a35-b955-ad30238910d3) (Version: - Epic Games, Inc.) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Nero 2015 (HKLM-x32\...\{F9592BA0-AA0D-454C-95AA-9782DF00CB4B}) (Version: 16.0.04000 - Nero AG) New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com) NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA Sterownik graficzny 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software) Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Panel sterowania NVIDIA 353.06 (Version: 353.06 - NVIDIA Corporation) Hidden Papers, Please (HKLM-x32\...\GOGPACKPAPERSPLEASE_is1) (Version: 2.4.0.10 - GOG.com) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - ) PlagueInc 1.0 (HKLM-x32\...\PlagueInc 1.0) (Version: 1.0 - Cat-A-Cat) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Prerequisite installer (x32 Version: 16.0.0003 - Nero AG) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.) RepZ Installer (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\1b1c64cc2484e6cc) (Version: 1.0.2.12 - RepZ) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden Skype Packages (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\Skype Packages) (Version: - ) <==== ATTENTION Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.) SopCast 3.8.3 (HKLM-x32\...\SopCast) (Version: 3.8.3 - www.sopcast.com) SPEEDLINK USB GAMEPAD (HKLM-x32\...\{9C42F308-A660-4445-9269-A740EEDCC1F0}) (Version: 09.28.2009 - SPEEDLINK) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) System Requirements Lab Detection (HKLM-x32\...\{928B2028-BE91-48D1-B626-1DD2C7B945D1}) (Version: 2.2.3.0 - Husdawg, LLC) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com) Terraria v1.2.0.2 cracked-KEBAB (HKLM-x32\...\{A1264D7F-CEF6-4033-8F9D-3E27392E3627}) (Version: 1.2.0.2 - KEBAB) The Binding of Isaac Rebirth 1.0 (HKLM-x32\...\The Binding of Isaac Rebirth 1.0) (Version: 1.0 - Games on Cat-A-Cat.Net) The Walking Dead: Season 2 Episode 3 (HKLM-x32\...\VGhlV2Fsa2luZ0RlYWRTZWFzb24y_is1) (Version: 1 - ) The Witcher 3 Wild Hunt (HKLM-x32\...\The Witcher 3 Wild Hunt_is1) (Version: 1.02 - Релиз от R.G. Steamgames) The Witcher Adventure Game (HKLM-x32\...\1207666883_is1) (Version: 2.1.0.2 - GOG.com) This War of Mine (HKLM-x32\...\1207666873_is1) (Version: 2.0.0.2 - GOG.com) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH) Transformice (HKLM-x32\...\Transformice) (Version: 1.0.0 - UNKNOWN) Transformice (x32 Version: 1.0.0 - UNKNOWN) Hidden Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version: - Tunngle.net GmbH) Unity Web Player (HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\...\UnityWebPlayer) (Version: 5.0.1f1 - Unity Technologies ApS) Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{40930C8E-A677-414C-A72F-DFDEB10738FB}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3054791) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{591150FB-47D4-495C-9E76-F8D354A2577D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3054791) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{591150FB-47D4-495C-9E76-F8D354A2577D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3054791) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{591150FB-47D4-495C-9E76-F8D354A2577D}) (Version: - Microsoft) Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft) VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2001989473-1170954191-3321282362-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Semijah\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2001989473-1170954191-3321282362-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Semijah\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-2001989473-1170954191-3321282362-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Semijah\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.) ==================== Restore Points ========================= ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-12-07 01:08 - 00000930 ____A C:\Windows\system32\Drivers\etc\hosts 64.191.102.135 http://www.karachan.org 192.186.244.160 totalkillaz.eu 192.186.244.160 www.totalkillaz.eu ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {01D03B13-A720-46E0-AF9B-C525E6738104} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {0713ED18-4CE8-4366-A7B7-1ED09F83B50B} - System32\Tasks\{F3206002-739F-45FC-9851-76A7BA0DB423} => D:\Max Payne 2\MaxPayne2.exe Task: {288C20E5-92E8-43CA-9179-87FE6B4A9755} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner64[1].exe [2015-05-08] (Piriform Ltd) Task: {3F9369DB-79D4-4BE5-99B5-66AD2B349196} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {4932659D-1F27-4A8A-828C-52654CB39074} - System32\Tasks\{B1D23F65-0EAC-4A96-AD1D-DFA4383341A1} => pcalua.exe -a "C:\Users\Semijah\Desktop\Nowy folder (4)\PopUninstall.exe" -d "C:\Users\Semijah\Desktop\Nowy folder (4)" Task: {5C21FD40-3B79-4F62-8DF1-778E800FEECC} - System32\Tasks\Opera scheduled Autoupdate 1422434127 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software) Task: {8EBC4508-3504-4D21-84E9-BE11E8FC1074} - System32\Tasks\Origin => C:\ProgramData\Origin\update.vbe [2015-03-11] () <==== ATTENTION Task: {BCFF3CDF-E4E6-47CF-AE0D-A3A7C3915115} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {C724F5B4-CF26-4F2E-AC1F-A946B88FC89E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2001989473-1170954191-3321282362-1001Core => C:\Users\Semijah\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.) Task: {E93FFABD-5AB2-40D8-9F8B-A51884D1E162} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2001989473-1170954191-3321282362-1001UA => C:\Users\Semijah\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.) Task: {FA8FDDB8-9C67-404D-A576-FEEFDDCD1F3D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2001989473-1170954191-3321282362-1001Core.job => C:\Users\Semijah\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2001989473-1170954191-3321282362-1001UA.job => C:\Users\Semijah\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-03-18 14:08 - 2015-03-18 14:08 - 08898720 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2014-06-13 22:40 - 2014-06-29 22:01 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2013-10-11 19:13 - 2013-09-28 05:45 - 00735936 _____ () C:\Program Files (x86)\Mobogenie\DaemonProcess.exe 2015-06-03 15:16 - 2015-05-28 09:04 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-03-18 14:08 - 2015-03-18 14:08 - 08898720 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2001989473-1170954191-3321282362-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Semijah\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{F0B9F1FC-0ACA-4675-AE99-C8C402C46DCF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{67E1C7D1-8A46-4AC7-BDE5-A3EE94B233FD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{0714AC20-2158-40B8-A951-98AAE532009C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{EF474D17-B354-4C20-9A25-E113EDD12A7D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{2D26BEC4-43BB-4E9D-A866-E36B137E5638}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{0C6E8353-E107-4587-AA35-DDF9BAB792A2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{374C2FBD-AE86-4300-8775-E342B20D414A}] => (Allow) C:\Users\Semijah\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{26CAB4E8-E962-4CA5-82C7-345BC6504B77}] => (Allow) C:\Users\Semijah\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{590ABE9C-4879-4A37-9F9D-24AA9D694702}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{63CD362F-3DAA-4D1E-B869-67CC9EA1CDA8}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{1954355B-0F4D-4A9D-B312-5E8376D965DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{3FF3117F-3819-4CF0-A95C-BE5DE9276ADD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{6BDB16B5-B81E-486E-B106-871BB04D947E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{37A2C8DF-D069-4DEA-A5A7-C923DC0A918A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{A94C587E-C95F-4BB2-8DD9-6D99A0AE196E}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe FirewallRules: [UDP Query User{A5D0F8C7-6174-4402-ACEF-94BF140C6F5E}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe FirewallRules: [TCP Query User{C2A72111-5F81-40E5-BDCA-02474BE7070A}C:\users\semijah\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\semijah\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [UDP Query User{B1290875-8B1E-4DCA-BD4C-CD356C0994C9}C:\users\semijah\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\semijah\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [TCP Query User{B1067A59-2EB7-456B-927F-67F2B8D9C6D9}D:\the stanley parable\stanley.exe] => (Block) D:\the stanley parable\stanley.exe FirewallRules: [UDP Query User{80F28587-E556-4424-9528-B8B85DD57B3E}D:\the stanley parable\stanley.exe] => (Block) D:\the stanley parable\stanley.exe FirewallRules: [{510243BC-9A14-4315-80BF-48FC0209357E}] => (Allow) E:\Evolve\EvoSvc.exe FirewallRules: [{5EC70D96-E4E7-440B-9D10-D8FC0CDDD2F4}] => (Allow) E:\Evolve\EvolveClient.exe FirewallRules: [TCP Query User{125830BE-7831-4B2F-A97C-21ED4886D8BD}D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe FirewallRules: [UDP Query User{FD361872-40F4-4E1D-81C3-E6F162530B12}D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe FirewallRules: [{326F5D49-4877-4366-9CBE-134456960C60}] => (Block) D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe FirewallRules: [{56921444-FC26-46CD-879C-BCE250F27FAC}] => (Block) D:\48784874-ciiiv5.incl.brve.nw.wrld.dlc\48784874-ciiiv5.incl.brve.nw.wrld.dlc\sid meier's civilization v\civilizationv_dx11.exe FirewallRules: [{19D63AAB-3BB1-422B-892C-5BEFBA437A07}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{41043D0A-12F2-407F-AB8F-447B040B9551}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{22A74583-11AF-4FC2-A513-EE9567081CAF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{92FFEF29-14DD-4D2E-8280-B7BEAF37A002}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{1D0D4B82-F48B-4929-8018-753F52866C28}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E15B38A7-2BB5-41C6-9C68-8E1BFF8CA314}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8AE39536-9848-44A9-8436-81C9365C2DF0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{79334A5C-7F2E-4F9A-AB46-84028F4814CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{B49E0078-1F1C-4D10-A8C3-DF5ED48FAA1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{602E5D87-F8AD-430C-BBE1-FACCA6869EC7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{26062006-262D-4ABC-8E1E-67714313EC68}D:\antichamber v1.0 steam-rip cracked-richvsm\antichamber\binaries\win32\udk.exe] => (Block) D:\antichamber v1.0 steam-rip cracked-richvsm\antichamber\binaries\win32\udk.exe FirewallRules: [UDP Query User{E08B6C00-1A77-4B9E-8E4B-BE05D8EF6A4C}D:\antichamber v1.0 steam-rip cracked-richvsm\antichamber\binaries\win32\udk.exe] => (Block) D:\antichamber v1.0 steam-rip cracked-richvsm\antichamber\binaries\win32\udk.exe FirewallRules: [{3688D7D9-2D0A-4CDC-A26B-1E134801BA78}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{B56A8767-814F-47CB-B0DB-1D45F5EEE81C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe FirewallRules: [{57BA69CB-F684-4BAA-B22C-020B5A0AD7CE}] => (Allow) E:\Battle.net\Battle.net.exe FirewallRules: [{2ABB31F7-E0E2-4ABE-AAC6-F5DD23E129A8}] => (Allow) E:\Battle.net\Battle.net.exe FirewallRules: [{494E2CB1-19AD-4FAF-9C35-B0701B61790A}] => (Allow) E:\Hearthstone\Hearthstone.exe FirewallRules: [{59A6223B-1138-45F0-A4AB-B13C894BA5CD}] => (Allow) E:\Hearthstone\Hearthstone.exe FirewallRules: [TCP Query User{358C512C-DF89-4FCA-B0B4-0D95728E3B35}D:\disciples 2 be\discipl2.exe] => (Block) D:\disciples 2 be\discipl2.exe FirewallRules: [UDP Query User{11EC5614-4601-4E80-BA28-DD2F0FDF33A6}D:\disciples 2 be\discipl2.exe] => (Block) D:\disciples 2 be\discipl2.exe FirewallRules: [{B33594CF-C0DF-40E7-B0B6-F5A546D074F8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{99C3B581-7C30-4AD3-ADD9-DBB9955E5F50}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{413BE2E5-6512-4338-943B-899F136813A3}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{1669695D-0C94-4605-A6E8-16E01F1BC4E6}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{D4C068B4-DABB-4B7C-8D2B-F9124C0D5B34}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{29EEA654-6112-46CA-A756-39E5663047F5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{C118B03D-C07F-4E55-BB50-B67AA9963E1B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{C3A089CD-CD57-48A1-AC08-0854AC4ADEC0}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{CDCF37A9-0FD8-4E1C-86C5-2B705318C294}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{9751637C-0705-4DB4-91C4-83B587DA032B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{F58E125B-3B46-41B4-BC51-5046F9DE8E31}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{283A0C44-29BC-4671-A1C5-C8FEF570115F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{9B283D29-CD47-4B6F-A796-BECF84AF3751}] => (Allow) D:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe FirewallRules: [{E1FCF319-FBDA-47DC-B481-20D28411BF15}] => (Allow) D:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe FirewallRules: [TCP Query User{1F4143C5-1A8E-4A67-AA88-8EF0FFF336A4}D:\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) D:\goat simulator\binaries\win32\goatgame-win32-shipping.exe FirewallRules: [UDP Query User{02098F6D-E192-4887-8EA6-66C59F04BB9F}D:\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) D:\goat simulator\binaries\win32\goatgame-win32-shipping.exe FirewallRules: [{07DC7CE6-40BF-44A8-96DD-E6073CD24848}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{5D1E1BE5-79DA-4622-9E6E-BFDDB3F81C1A}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{5616F9CB-B906-4813-A3B1-56879EE82F35}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{67800429-3E84-4CC3-92D1-9620376C245E}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe FirewallRules: [{45AEE53A-B8C4-4C58-B529-1F724C16792B}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{A18F9E9F-D6F6-4864-B7F8-1FACA863BCC3}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{36478953-8240-4420-85D3-86458566C4A5}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{8706B99B-345F-4B05-A9BA-AAB7C5408190}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe FirewallRules: [{F0FF54F3-EF9E-4CDF-B25C-F8B9C3E0E38B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{B542A2B7-75BB-4AF0-A666-4B43BF242F7B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{39F1657D-8DB1-4BC6-92DE-6D05549F7B65}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E737269A-DE55-41CE-8046-68EA3D0C0632}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{AF55E017-1E06-46D5-A500-5A4786950E46}D:\mortal kombat\mkke.exe] => (Allow) D:\mortal kombat\mkke.exe FirewallRules: [UDP Query User{266377A8-27FA-4993-9F29-A86C04B58A5D}D:\mortal kombat\mkke.exe] => (Allow) D:\mortal kombat\mkke.exe FirewallRules: [{10D380BB-26E4-4D12-9419-90D224C41B2A}] => (Block) D:\mortal kombat\mkke.exe FirewallRules: [{013924EF-AEEB-44C9-8123-089ACF794A56}] => (Block) D:\mortal kombat\mkke.exe FirewallRules: [{35D6C157-FCA6-4E0A-8A53-DF74B101CB24}] => (Allow) C:\Program Files (x86)\Nero2015\Nero Blu-ray Player\Blu-rayPlayer.exe FirewallRules: [{0FAD4A91-1AE3-4620-8175-4B7E8B28C258}] => (Allow) C:\Program Files (x86)\Nero2015\Nero Blu-ray Player\Blu-rayPlayer.exe FirewallRules: [{440F9E7B-F629-4EB1-B8BF-91C1BC8F8B3B}] => (Allow) C:\Program Files (x86)\Nero2015\Nero 2015\Nero Burning ROM\StartNBR.exe FirewallRules: [{8EBA5E4E-FECF-45D1-848A-BC65732FBC8D}] => (Allow) C:\Program Files (x86)\Nero2015\KM\NMDllHost.exe FirewallRules: [{D9BD4457-6F32-47D1-A970-6AE6B6D2AF07}] => (Allow) C:\Program Files (x86)\Nero2015\Nero 2015\Nero Burning ROM\nero.exe FirewallRules: [TCP Query User{7F2B4982-A2DE-485C-94E8-4DB123AA0CEE}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{8447015A-8FCE-4CA1-9CCE-24295D6D2B60}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{C68A8C80-4441-4594-860C-D95F66CCFCC9}] => (Allow) E:\SteamLibrary\SteamApps\common\Hotline Miami 2 Wrong Number Digital Comic\hlm2comics.exe FirewallRules: [{B94A2503-DD8F-4AF8-9BE6-441CE4816484}] => (Allow) E:\SteamLibrary\SteamApps\common\Hotline Miami 2 Wrong Number Digital Comic\hlm2comics.exe FirewallRules: [{89947EAC-2CC8-42F4-9F93-5CD26305FF87}] => (Allow) E:\Battle.net\Battle.net.exe FirewallRules: [{1A118C5F-9D09-49DE-9F59-3AA18AF02E0E}] => (Allow) E:\Battle.net\Battle.net.exe FirewallRules: [{3D9352EA-C133-4928-9AEC-5FB09E8BFB18}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{9680CDFC-4E9D-424E-B1BC-A5342D30AA20}D:\tmnationsforever\tmforever.exe] => (Allow) D:\tmnationsforever\tmforever.exe FirewallRules: [UDP Query User{BDE7BFC7-602C-4C17-A825-402D09115225}D:\tmnationsforever\tmforever.exe] => (Allow) D:\tmnationsforever\tmforever.exe FirewallRules: [{45C0F43B-812D-4163-8FF6-81C4590B8E45}] => (Block) D:\tmnationsforever\tmforever.exe FirewallRules: [{E478DFEA-4317-4E86-A229-0F9B455F794F}] => (Block) D:\tmnationsforever\tmforever.exe FirewallRules: [TCP Query User{247B1BCB-0221-44FD-AF44-B8876A21FA58}E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{8907E899-5EB9-4966-86E0-AE73B645DE0B}E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [{E8ED5667-5044-4200-A287-F3CEE155B016}] => (Block) E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe FirewallRules: [{1609E9F7-2444-4B98-BE5A-01FC2D371079}] => (Block) E:\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/05/2015 01:40:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/05/2015 00:14:53 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/04/2015 04:45:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/04/2015 02:56:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/04/2015 00:24:48 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/04/2015 00:16:12 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2015 01:52:50 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/03/2015 01:44:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/02/2015 11:37:40 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/02/2015 11:28:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (07/05/2015 01:39:18 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 00:21:12 na ‎2015-‎07-‎05 było nieoczekiwane. Error: (07/04/2015 03:01:50 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa Windows Update zawiesiła się podczas uruchamiania. Error: (07/01/2015 04:10:05 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (06/29/2015 06:32:27 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa Windows Update zawiesiła się podczas uruchamiania. Error: (06/27/2015 03:38:40 AM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (06/25/2015 03:49:16 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {CC957078-B838-47C4-A7CF-626E7A82FC58} Error: (06/24/2015 05:10:46 AM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (06/22/2015 07:03:32 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa Windows Update zawiesiła się podczas uruchamiania. Error: (06/18/2015 04:46:13 AM) (Source: volsnap) (EventID: 36) (User: ) Description: Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error: (06/18/2015 03:14:20 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Usługa Windows Update zawiesiła się podczas uruchamiania. Microsoft Office: ========================= Error: (07/05/2015 01:40:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/05/2015 00:14:53 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/04/2015 04:45:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/04/2015 02:56:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/04/2015 00:24:48 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/04/2015 00:16:12 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2015 01:52:50 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/03/2015 01:44:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/02/2015 11:37:40 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/02/2015 11:28:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2013-10-15 21:02:57.887 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Semijah\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-10-15 21:02:57.887 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Semijah\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-10-15 21:02:57.715 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-10-15 21:02:57.715 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: AMD Phenom(tm) II X4 955 Processor Percentage of memory in use: 26% Total physical RAM: 8191.23 MB Available physical RAM: 6010.07 MB Total Virtual: 16380.66 MB Available Virtual: 13958.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:68.26 GB) (Free:4.31 GB) NTFS Drive d: () (Fixed) (Total:198.7 GB) (Free:18.23 GB) NTFS Drive e: () (Fixed) (Total:198.71 GB) (Free:18.51 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F9D288EE) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=68.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=198.7 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=198.7 GB) - (Type=07 NTFS) ==================== End of log ============================