Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-07-2015 Ran by Mateusz at 2015-07-09 19:10:16 Running from C:\Users\Mateusz\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-4109652526-3747850710-83083684-500 - Administrator - Disabled) Gość (S-1-5-21-4109652526-3747850710-83083684-501 - Limited - Disabled) Mateusz (S-1-5-21-4109652526-3747850710-83083684-1002 - Administrator - Enabled) => C:\Users\Mateusz użytkownik (S-1-5-21-4109652526-3747850710-83083684-1005 - Limited - Enabled) => C:\Users\użytkownik ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 3DStudio In 16 POL (HKLM-x32\...\063FFFFFFF16FF00FF1801F00F02F000-R1) (Version: 16.0 - Graphisoft) 3DStudio In 18 POL (HKLM\...\063FFF2FFF18FF00FF1801F01F02F000-R1) (Version: 18.0 - Graphisoft) 7-Zip 9.38 beta (HKLM-x32\...\7-Zip) (Version: - ) ABBYY FineReader OCR Engine for Microtek (HKLM-x32\...\{345C90FB-FA10-11D5-9C2A-0080C85A0C2D}) (Version: - ) Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.8 - Absolute Software) Ace Stream Media 3.0.12 (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\AceStream) (Version: 3.0.12 - Ace Stream Media) <==== ATTENTION! Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1860 - Adobe Systems Incorporated) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.8.800.168 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.) Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version: - ) Aktualizacje NVIDIA 2.4.5.44 (Version: 2.4.5.44 - NVIDIA Corporation) Hidden Alligator Flash Designer PL (8.0.31) (HKLM-x32\...\Alligator Flash Designer PL) (Version: (8.0.31) - Selteco) ALLMediaServer (HKLM-x32\...\{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1) (Version: 0.92 - ALLCinema, Inc.) ALLPlayer Pilot (HKLM-x32\...\{146BDBDD-ACD9-4B04-A286-C27471841E8E}_is1) (Version: 1.1 - ALLPlayer Group, Ltd.) ALLPlayer V5.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) ALLPlayer.TV (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\2947388539.api.allplayer.nextplus.pl) (Version: - api.allplayer.nextplus.pl) Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArchiCAD 16 POL (HKLM\...\001FFF2FFF16FF00FF1801F01F02F000-R1) (Version: 16.0 - GRAPHISOFT) ArchiCAD 18 POL (HKLM\...\001FFF2FFF18FF00FF1801F01F02F000-R1) (Version: 18.0 - GRAPHISOFT) Artlantis File Exporter 1.0.15.26 for Rhinoceros (HKLM\...\{3A1D641D-EB23-4E1C-9E37-99247923C5F0}) (Version: 1.0.15.26 - AsuniCAD) Artlantis Studio 4.0 (HKLM\...\Artlantis Studio 4) (Version: 4.0.16 - Abvent R&D) Artlantis Studio 5.1.2.4 (64 bit) (HKLM\...\Artlantis Studio 5 (64 bit)) (Version: 5.1.2.4 - Abvent R&D) Autodesk 3ds Max Design 2012 64-bit - English (HKLM\...\Autodesk 3ds Max Design 2012 64-bit - English) (Version: 14.0 - Autodesk) Autodesk 3ds Max Design 2012 64-bit - English (Version: 14.0 - Autodesk) Hidden Autodesk Backburner 2012.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2012.0.0 - Autodesk, Inc.) Autodesk FBX Plug-in 2012.0 - 3ds Max Design 2012 64-bit (HKLM\...\Autodesk FBX Plug-in 2012.0 - 3ds Max Design 2012 64-bit) (Version: - Autodesk) Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Medium Resolution Image Library 2012 (HKLM-x32\...\{B5751715-EC10-43D9-8C95-62E1368433EF}) (Version: 2.5.0.8 - Autodesk) Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.579 - Avira Operations GmbH & Co. KG) BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.8.0.29626 - BitTorrent Inc.) BitTorrent (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.) Blender (HKLM\...\Blender) (Version: 2.69 - Blender Foundation) BobsTrackBuilder (HKLM-x32\...\{ECDF8120-703D-4A96-B36C-A565419B3900}) (Version: 1.0.0 - Bobs Track Builder) Capitalism II (HKLM-x32\...\{EF581945-BBE9-11D5-A7FE-50275FC10000}) (Version: - ) Citrix Online Launcher (HKLM-x32\...\{AC7E7905-8C59-4806-A96D-30936A2B1FC5}) (Version: 1.0.168 - Citrix) CodeMeter Runtime Kit v5.10a (HKLM\...\{CADFF08A-A157-474F-B6A8-8F26F81F7ABE}) (Version: 5.10.1224.501 - WIBU-SYSTEMS AG) CoffeeCup HTML Editor (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\CoffeeCup HTML Editor) (Version: - ) Cole2k Media - Codec Pack (Advanced) 8.0.1 (HKLM-x32\...\Cole2k Media - Codec Pack) (Version: - Cole2k Media) Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk) Corel Graphics - Windows Shell Extension (HKLM\...\_{B16BB34E-B7BF-47DF-8658-BEABCF40CD6A}) (Version: 16.1.0.843 - Corel Corporation) Corel Graphics - Windows Shell Extension (Version: 16.1.843 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 32 Bit (Version: 16.1.843 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Capture (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Common (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Connect (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Custom Data (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Draw (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Filters (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - FontNav (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - IPM (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - PL (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Redist (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Setup Files (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - VBA (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - VideoBrowser (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - VSTA (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Writing Tools (x64) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 (64-Bit) (HKLM\...\_{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.1.0.843 - Corel Corporation) CorelDRAW Graphics Suite X6 (x64) (Version: 16.1 - Corel Corporation) Hidden CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DataNumen RAR Repair v2.1 (HKLM-x32\...\DataNumen RAR Repair v2.1) (Version: - ) Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.4 - Samsung Electronics CO.,LTD.) E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Free Sound Recorder v9.4.1 (HKLM-x32\...\Free Sound Recorder_is1) (Version: - Copyright(C) 2005-2012 FreeSoundRecorder Technologies, Inc.) Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.) Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google) Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden GoToMeeting 6.0.0.1259 (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\GoToMeeting) (Version: 6.0.0.1259 - CitrixOnline) Guitar Pro 6 (HKLM-x32\...\{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1) (Version: - Arobas Music) Handset USB Driver (HKLM\...\{D2D77DC2-8299-11D1-8949-444553540000}_is1) (Version: 5.2066.1.A14B04 - ) Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.) Huawei E5373 (HKLM-x32\...\Huawei E5373) (Version: 22.001.23.00.1202 - Huawei Technologies Co.,Ltd) HWiNFO64 Version 4.26 (HKLM\...\HWiNFO64_is1) (Version: 4.26 - Martin Malík - REALiX) Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(SM) center 33070) (Version: 41450 - Intel) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36702 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7854AA22-A2F0-4F29-A2E9-D0C5A2B685E7}) (Version: 2.5.0.0248 - Motorola Solutions, Inc) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) WiDi (HKLM\...\{6097158B-0184-4140-BEC3-7885794D2571}) (Version: 3.5.40.0 - Intel Corporation) IntelliMemory (HKLM\...\{E93403C5-8A91-4940-89DB-EED69DA6E82E}) (Version: 1.0.30.0 - Condusiv Technologies) Internet Explorer Toolbar 4.6 by SweetPacks (HKLM-x32\...\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}) (Version: 4.6.0004 - SweetIM Technologies Ltd.) Iray for Rhino Plugin 64-Bit (HKLM\...\{1CAA032B-D11D-4985-BE54-6C8B9A13F630}) (Version: 1.98 - NVIDIA Corporation) iVisit 3D Builder 5.0.2.5 (HKLM-x32\...\iVisit 3D Builder 5) (Version: 5.0.2.5 - Abvent R&D) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java(TM) 6 Update 32 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.320 - Oracle) Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech) Maxwell 3 (HKLM-x32\...\Maxwell 3) (Version: - ) Maxwell Shell Extension (x64) (HKLM\...\{7636B8E9-4F52-41F7-A3B2-526E97F2879F}) (Version: 3.0.0 - Next Limit Technologies) Michael Schumacher World Tour Kart 2004 Demo (HKLM-x32\...\mswt2004demo) (Version: - ) Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}) (Version: - Microsoft) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Need for Speed™ SHIFT (HKLM-x32\...\{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}) (Version: 1.0.0.0 - Electronic Arts) NVIDIA GeForce Experience 2.4.5.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.44 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - ) NVIDIA Sterownik graficzny 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.30 - NVIDIA Corporation) Obsługa programów Apple (HKLM-x32\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.) OpenOffice.org 3.3 (HKLM-x32\...\{0141D498-16DA-4221-A529-1D7A64BE8B05}) (Version: 3.3.9567 - OpenOffice.org) Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation) Panel sterowania NVIDIA 353.30 (Version: 353.30 - NVIDIA Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Plants vs. Zombies (HKLM-x32\...\Plants vs. Zombies) (Version: - PopCap Games) Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden PS2 Emulator r5135 + BIOS (HKLM-x32\...\PS2 Emulator + BIOS_is1) (Version: - ) QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.) Race Driver 3 (HKLM-x32\...\{0297C87B-CC40-446F-865A-031B4FC0CF22}) (Version: 1.00.0000 - Codemasters) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6699 - Realtek Semiconductor Corp.) Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.10.0 - Samsung Electronics CO., LTD.) Rejestracja użytkownika drukarki Canon iP2600 series (HKLM-x32\...\Rejestracja użytkownika drukarki Canon iP2600 series) (Version: - ) rFactor (remove only) (HKLM-x32\...\rFactor) (Version: - ) rFactor2 (HKLM-x32\...\rFactor2) (Version: - ) Rhinoceros 5 (64-bit) (HKLM\...\{5CA3E5C9-4DEF-4248-A8BB-9E4C1AB4573F}) (Version: 5.11.50226.17195 - Robert McNeel & Associates) Rhinoceros 5 (HKLM-x32\...\{62476555-4F2D-432D-9A5F-B0FEE9E2621E}) (Version: 5.11.50226.17195 - Robert McNeel & Associates) Rhinoceros 5 Help Media (HKLM-x32\...\{EBEF7C2F-9B93-450A-964F-32369E6C5987}) (Version: 5.11.50106.18145 - Robert McNeel & Associates) Rhinoceros 5 Language Pack Installer (en-US) (HKLM-x32\...\{A402C0C6-E224-4D03-A2D9-2B9507B12CDF}) (Version: 5.11.50226.17195 - Robert McNeel & Associates) Richard Burns Rally (HKLM-x32\...\{92C7D009-A464-4948-A980-7A3E28CB2F49}) (Version: 1.00.000 - ) RSRBR2014 (HKLM-x32\...\RSRBR_v2014_is1) (Version: - RallyeSim) S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden ScanWizard 5 (HKLM-x32\...\{B08D262E-D902-11D5-9C28-0080C85A0C2D}) (Version: - ) Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.) SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.44 - NVIDIA Corporation) Hidden SketchUp 2014 (HKLM-x32\...\{F246092E-FA0B-47C8-9D3E-CF8C210293C8}) (Version: 14.1.1282 - Trimble Navigation Limited) SketchUp 8 (HKLM-x32\...\{779D8CA1-03DD-4AD4-B21F-3E20BFE7BEDE}) (Version: 3.0.15158 - Trimble Navigation Limited) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation) Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) SopCast 3.8.3 (HKLM-x32\...\SopCast) (Version: 3.8.3 - www.sopcast.com) Spotify (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Spotify) (Version: 1.0.8.59.gee82e7e6 - Spotify AB) SubEdit-Player (HKLM-x32\...\SubEdit-Player_is1) (Version: 4072 - Artur Sikora) Support Center (HKLM\...\{5C20C1A9-75F9-4B6B-AAC3-9065C2AFB918}) (Version: 2.1.1106 - Samsung Electronics CO., LTD.) Support Center FAQ (x32 Version: 1.0.11 - Samsung Electronics CO., LTD.) Hidden SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.1 - Synaptics Incorporated) Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 0.10.0000 - Atari) Test Drive Unlimited 2 (HKLM-x32\...\Test Drive Unlimited 2_is1) (Version: - Atari) Unity Web Player (HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\UnityWebPlayer) (Version: - Unity Technologies ApS) User Guide (HKLM-x32\...\{039EA659-E421-45C6-8913-BED5D69B5536}) (Version: 1.1.00 - Samsung Electronics CO., LTD.) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) V-Ray for Rhinoceros 5 adv (HKLM-x32\...\V-Ray for Rhinoceros 5 adv 1.50.22564) (Version: 1.50.22564 - Chaos Software, Ltd) V-Ray for Rhinoceros 5 x64 adv (HKLM-x32\...\V-Ray for Rhinoceros 5 x64 adv 2.00.24184) (Version: 2.00.24184 - Chaos Software, Ltd) WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.00d of 2011-Sep-22 (Build 138) (Setup) - WIBU-SYSTEMS AG) Windows 8 Codec Pack 2.0.1 (HKLM-x32\...\Windows 8 - Codec Pack) (Version: 2.0.1 - Windows 8 Codec Pack) Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.) WinRAR 4.20 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) WinRAR 4.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) WRC3 wersja 1.0 (HKLM-x32\...\{B4BF2667-112C-45EF-B8CB-1168E4EB5BA8}_is1) (Version: 1.0 - Milestone Srl) ZTE Handset USB Driver (HKLM\...\{01D42BF0-ED08-463f-8A28-99EB6FEE962B}) (Version: - ZTE Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Mateusz\AppData\Local\Citrix\GoToMeeting\1259\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Mateusz\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-4109652526-3747850710-83083684-1002_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll () ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2012-07-26 07:26 - 2013-11-01 10:01 - 00000860 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {01950492-D321-44A9-A7CA-742C275B867E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: {03E3F2F3-66D8-4CDF-AA54-DB46A173E953} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-26] (Google Inc.) Task: {13201129-65F1-43E4-A8B0-6BB11DB909CA} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.) Task: {143017C7-46DA-4D02-9139-4604E518F170} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-21] (Synaptics Incorporated) Task: {4BDA0113-8D19-4399-9758-9FD3DCD34205} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe Task: {4C7E553E-5041-4222-A8E5-0CA3D54B14E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {64948544-164F-41B8-B654-802C95F1BC05} - System32\Tasks\GoogleUpdateTaskMachineCore1d042e977a72ea2 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-26] (Google Inc.) Task: {A2B88F80-5BAB-4977-B680-A0F7C705DD8D} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.) Task: {B81E30DA-26E2-4B6F-87B9-7ED074A1BC4D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-05-13] (Microsoft Corporation) Task: {CD99A607-41A7-4630-805C-A76268D62830} - System32\Tasks\SWUpdateAgent => C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe Task: {E872B37F-6F82-404F-ADA4-0593B7C1F71D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {EE826D9B-8210-43DF-8C0D-EDD82887FDAA} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4109652526-3747850710-83083684-1002Core.job => C:\Users\Mateusz\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cf8ecc90467aee.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cfeba6c04b9e04.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cfff61ce17801f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d042e977a72ea2.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (Whitelisted) ============== 2015-06-26 20:04 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe 2011-03-17 00:07 - 2011-03-17 00:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf 2011-02-22 21:52 - 2011-02-22 21:52 - 00086016 _____ () C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe 2014-11-01 12:05 - 2014-03-31 10:31 - 00237424 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe 2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll 2013-01-29 00:34 - 2008-03-21 14:16 - 00344064 _____ () C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe 2013-02-25 02:51 - 2013-02-25 02:51 - 00704520 _____ () C:\Windows\SysWOW64\C2MP\TrayMenu.exe 2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll 2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll 2013-01-29 00:34 - 2006-10-04 10:57 - 00258048 _____ () C:\Program Files (x86)\ScanWizard 5\SFRes.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00020480 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll 2012-12-24 13:02 - 2012-09-18 21:04 - 00064512 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll 2012-09-15 02:27 - 2012-06-25 20:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Temp:EBF38A57 AlternateDataStreams: C:\Users\Mateusz\OneDrive:ms-properties ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\99819429.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\99819429.sys => ""="Driver" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-4109652526-3747850710-83083684-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta z Przeglądarki fotografii systemu Windows.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: ALLUpdate => "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE" MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Mateusz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" MSCONFIG\startupreg: Start WingMan Profiler => C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui HKLM\...\StartupApproved\StartupFolder: => "Network Server.lnk" HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run: => "BCSSync" HKLM\...\StartupApproved\Run32: => "Adobe ARM" HKLM\...\StartupApproved\Run32: => "CLVirtualDrive" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "Sweetpacks Communicator" HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager" HKLM\...\StartupApproved\Run32: => "Intel AppUp(R) center" HKLM\...\StartupApproved\Run32: => "SwitchBoard" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKLM\...\StartupApproved\Run32: => "avgnt" HKLM\...\StartupApproved\Run32: => "YouCam Service" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "ALLUpdate" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "OfficeSyncProcess" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "Google Update" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "Facebook Update" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "AceStream" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "AceWebExtensionUpdater" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "AceUpdater" HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\StartupApproved\Run: => "Skype" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{D4235F6A-0CFE-41E8-ACDE-615A7A9BA218}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{5313564D-BE6A-4F5A-8FD5-142FA1649837}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [UDP Query User{B92644A8-68CC-401B-A73A-68B8859CFA17}C:\program files\graphisoft\archicad 18\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 18\licensefilegenerator.exe FirewallRules: [TCP Query User{7C18118F-D3F5-419D-ACA1-072E9818C1C8}C:\program files\graphisoft\archicad 18\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 18\licensefilegenerator.exe FirewallRules: [{4D363DFD-1949-429C-B69B-0B0E0B50AC68}] => (Allow) C:\Users\Mateusz\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{A75E2854-A9EB-4C73-BC58-2B0F56BEC3F2}] => (Allow) C:\Users\Mateusz\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{DE21FA9B-3773-4D42-B86A-66DAB79F434F}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe FirewallRules: [{88C02052-3B58-4ABB-99AA-876C795316E9}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe FirewallRules: [{11146382-C044-426E-BE1B-6DFE6EFFFDA2}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe FirewallRules: [UDP Query User{EF4DE330-6052-4D5E-BE75-204AE04BC60D}C:\program files\graphisoft\archicad 18\cinerender\cinerender 64bit.exe] => (Allow) C:\program files\graphisoft\archicad 18\cinerender\cinerender 64bit.exe FirewallRules: [TCP Query User{9683E052-83E2-4F32-9830-5499211D62EB}C:\program files\graphisoft\archicad 18\cinerender\cinerender 64bit.exe] => (Allow) C:\program files\graphisoft\archicad 18\cinerender\cinerender 64bit.exe FirewallRules: [UDP Query User{03870530-1B05-46B8-A1CD-2F81969ACFBD}C:\program files\graphisoft\archicad 18\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 18\archicad.exe FirewallRules: [TCP Query User{8A7436CF-C7B1-4FA3-B793-3F25A802928D}C:\program files\graphisoft\archicad 18\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 18\archicad.exe FirewallRules: [{EB3186DA-4B11-4063-8602-AC6985A0A6CC}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 18\CineRender\CineRender 64bit.exe FirewallRules: [{2054405E-7617-4D1D-B420-FC3E3072CC20}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 18\CineRender\CineRender 64bit.exe FirewallRules: [{23D853A8-415F-4D73-AF0E-BC79D31064D8}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 18\ArchiCAD.exe FirewallRules: [{39EB2F0F-6A75-4690-A17F-B7B463B98CF1}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 18\ArchiCAD.exe FirewallRules: [UDP Query User{9B237849-23AF-48EF-81BF-FA61ED125ADB}C:\program files\next limit\maxwell 3\mxnetwork.exe] => (Allow) C:\program files\next limit\maxwell 3\mxnetwork.exe FirewallRules: [TCP Query User{96CAC94E-D43F-47B3-8B71-83E78D06BF6A}C:\program files\next limit\maxwell 3\mxnetwork.exe] => (Allow) C:\program files\next limit\maxwell 3\mxnetwork.exe FirewallRules: [UDP Query User{3B8A61D5-D2D2-41F3-91C7-C64E0DDA35CC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{D3D72EDD-D6A6-4823-AD34-4801C5C90BB8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{A8CAFC8C-52F9-438D-A947-BF06DA1C5107}C:\users\mateusz\appdata\local\temp\rar$exa0.688\racer\racer.exe] => (Block) C:\users\mateusz\appdata\local\temp\rar$exa0.688\racer\racer.exe FirewallRules: [TCP Query User{BB5B7E76-E93A-4AE9-B434-E4C8792097F5}C:\users\mateusz\appdata\local\temp\rar$exa0.688\racer\racer.exe] => (Block) C:\users\mateusz\appdata\local\temp\rar$exa0.688\racer\racer.exe FirewallRules: [UDP Query User{482A7C7E-DA3E-4173-8BCF-791DC49A4098}C:\program files (x86)\lfs\live for speed 0.6 b + unlock\lfs.exe] => (Allow) C:\program files (x86)\lfs\live for speed 0.6 b + unlock\lfs.exe FirewallRules: [TCP Query User{FE3C39CF-2DC1-485A-A1A8-281A06256AB9}C:\program files (x86)\lfs\live for speed 0.6 b + unlock\lfs.exe] => (Allow) C:\program files (x86)\lfs\live for speed 0.6 b + unlock\lfs.exe FirewallRules: [UDP Query User{9BADDE20-0F50-4700-8B52-8E25521B7F19}C:\program files\artlantis studio 5\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 5\artlantis license manager.exe FirewallRules: [TCP Query User{C9BCA4D7-D573-4BA3-AFD6-FCEBC9D43A02}C:\program files\artlantis studio 5\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 5\artlantis license manager.exe FirewallRules: [UDP Query User{80E1276F-370A-4640-BFCD-4062206584F8}C:\users\mateusz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mateusz\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{74106DAE-EC0F-48E5-A2A4-0879509D442B}C:\users\mateusz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mateusz\appdata\roaming\spotify\spotify.exe FirewallRules: [{994236C5-0CB5-47BA-AC96-889D0EA2F1C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{031040E3-886B-4F3F-B3D6-52C6F34B50F9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{AEE0D08A-F892-4F56-9D7C-06A7879EAB21}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{342DC89D-A875-40A5-9136-B0EE0704EE3C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [UDP Query User{49476D02-FCA4-4667-9F89-FF63799CD39C}C:\program files (x86)\atari\tdu2\testdrive2.exe] => (Block) C:\program files (x86)\atari\tdu2\testdrive2.exe FirewallRules: [TCP Query User{6ADDB0D2-0F3C-421D-A77E-7FA15B68F15A}C:\program files (x86)\atari\tdu2\testdrive2.exe] => (Block) C:\program files (x86)\atari\tdu2\testdrive2.exe FirewallRules: [UDP Query User{EEF80B64-719D-4A95-B113-B598F4D508E1}C:\program files (x86)\atari\tdu2\testdrive2.exe] => (Block) C:\program files (x86)\atari\tdu2\testdrive2.exe FirewallRules: [TCP Query User{59585FFF-FD39-451C-8645-E0ABA1552A59}C:\program files (x86)\atari\tdu2\testdrive2.exe] => (Block) C:\program files (x86)\atari\tdu2\testdrive2.exe FirewallRules: [{AB8DE3B2-915A-416B-9CC5-2CA7F5E02D82}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{F8B2BE08-9C2B-47E7-8E20-9D181C7BBEC7}] => (Allow) C:\ProgramData\eSafe\eGdpSvc.exe FirewallRules: [UDP Query User{31218DA7-9D10-444F-A3E3-DF596375F505}C:\program files (x86)\racer\tracked.exe] => (Allow) C:\program files (x86)\racer\tracked.exe FirewallRules: [TCP Query User{3FB34F15-D84A-496C-86DF-87D7E9FD6521}C:\program files (x86)\racer\tracked.exe] => (Allow) C:\program files (x86)\racer\tracked.exe FirewallRules: [UDP Query User{A1715D5C-D09B-4290-9BAE-899DC0FCFF31}C:\program files (x86)\racer\racer.exe] => (Allow) C:\program files (x86)\racer\racer.exe FirewallRules: [TCP Query User{A3988C73-D51F-493C-A081-2A6714B05714}C:\program files (x86)\racer\racer.exe] => (Allow) C:\program files (x86)\racer\racer.exe FirewallRules: [UDP Query User{195CC402-4035-485B-84CB-8C9789FBC0E9}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [TCP Query User{3E3D06F6-F141-47C0-9DE5-EC1A0D573134}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [{D06A1CA0-43EE-4B33-89D2-063B6B617BE6}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe FirewallRules: [UDP Query User{E63AC5A8-133B-45E6-9446-F25CB45468D2}C:\program files\artlantis studio 4\artlantisstudio.exe] => (Block) C:\program files\artlantis studio 4\artlantisstudio.exe FirewallRules: [TCP Query User{0A5DFF65-3C47-49CA-A0A3-40BCB8DAE405}C:\program files\artlantis studio 4\artlantisstudio.exe] => (Block) C:\program files\artlantis studio 4\artlantisstudio.exe FirewallRules: [{4039515D-2CC9-4869-8E8A-D5A1889D496A}] => (Allow) C:\Users\Mateusz\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{2C9BA17E-62FA-45BF-8C76-2E60A986DC2D}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\3dsmax.exe FirewallRules: [{179F7E6C-C9B9-4840-93A2-FEF1A9D73AD9}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\3dsmax.exe FirewallRules: [{D9BC044F-7FF4-4795-B1C6-9F8645F6D1F9}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe FirewallRules: [{0185BC0A-F56B-4D27-97DF-2E3ED5561314}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe FirewallRules: [{CF9D8519-053B-4F85-AB5E-C0100B9D3EE0}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe FirewallRules: [{8BBBED1F-DD8A-42E3-8076-FE0F334FCB66}] => (Allow) C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe FirewallRules: [{8899A48A-86BB-42A6-92BA-7723E9548376}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe FirewallRules: [{1EA21E12-EF85-4383-B4F4-47E15F1BE405}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe FirewallRules: [{FFC7EAC4-9343-42CB-B6AC-AFA1C0226933}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe FirewallRules: [{747B7A7A-C43D-4329-9A11-66F9654E0D5A}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe FirewallRules: [{3A1930D6-D695-430D-A94F-AFF7E2EEA9FD}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe FirewallRules: [{780D5101-00CC-4B91-957E-6258F9722E84}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe FirewallRules: [UDP Query User{173D3A15-0DFE-4F96-AD7D-3F29ED781E4D}C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe] => (Allow) C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe FirewallRules: [TCP Query User{165E09E2-3214-47D1-943C-A1A21C134C76}C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe] => (Allow) C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe FirewallRules: [{5BC49111-56A8-4A36-B0B9-0AFC60EABAB6}] => (Allow) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe FirewallRules: [{F08D81C6-795C-4190-896C-7E177EED65F3}] => (Allow) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe FirewallRules: [UDP Query User{5F9A152B-A3C9-42CF-9494-855E60412DFD}C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe] => (Block) C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe FirewallRules: [TCP Query User{7F93376A-59D8-4924-81E4-47E6A5108E6C}C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe] => (Block) C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe FirewallRules: [UDP Query User{2FF97695-0A71-4728-99EE-3CC16762D29A}C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe] => (Allow) C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe FirewallRules: [TCP Query User{6B2F0F20-D9AB-4E61-8024-F30A7CAAF16E}C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe] => (Allow) C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe FirewallRules: [UDP Query User{82C2A056-1C62-4B10-ACF7-0DC233B84BA6}C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe] => (Allow) C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe FirewallRules: [TCP Query User{1138B932-9F5B-434D-94FF-75F4C0CFBA86}C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe] => (Allow) C:\program files\rhinoceros 5.0 (64-bit)\system\rhino.exe FirewallRules: [{EFE97219-D8F7-43F5-8B1E-AC8E9B0325F1}] => (Allow) C:\Program Files (x86)\Opera\opera.exe FirewallRules: [{661E47B6-5A81-4AFC-8389-839538EB0816}] => (Allow) C:\Program Files (x86)\Opera\opera.exe FirewallRules: [UDP Query User{12A74C24-BDB9-47E3-B2DA-026219EFAE10}C:\program files\artlantis studio 4\qtsocketserver.exe] => (Block) C:\program files\artlantis studio 4\qtsocketserver.exe FirewallRules: [TCP Query User{70103593-3496-47D3-B15A-471DD424B38E}C:\program files\artlantis studio 4\qtsocketserver.exe] => (Block) C:\program files\artlantis studio 4\qtsocketserver.exe FirewallRules: [UDP Query User{0676C004-5408-4397-92A5-F9ED9715DC70}C:\users\mateusz\appdata\local\temp\dac8.tmp\kmservice.exe] => (Allow) C:\users\mateusz\appdata\local\temp\dac8.tmp\kmservice.exe FirewallRules: [TCP Query User{88231A29-6820-4A12-9169-7CAE82741C59}C:\users\mateusz\appdata\local\temp\dac8.tmp\kmservice.exe] => (Allow) C:\users\mateusz\appdata\local\temp\dac8.tmp\kmservice.exe FirewallRules: [UDP Query User{B34D1B44-86DB-4E6E-A552-78C3DA50F149}C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe] => (Block) C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe FirewallRules: [TCP Query User{31C8130B-F804-402A-BF6E-F3D537FA5CDA}C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe] => (Block) C:\program files (x86)\mswt kart 2004 demo\msworldtour_demo.exe FirewallRules: [UDP Query User{C02D1234-7E8C-49BD-BEE8-1EDE0662DF6D}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe FirewallRules: [TCP Query User{563CA0A5-6814-4D46-BCEE-DE03AF5EA9C6}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe FirewallRules: [UDP Query User{699BAD9F-6E20-45DA-A79E-AD91C3AFB3AF}C:\users\mateusz\desktop\fo2\flatout2.exe] => (Block) C:\users\mateusz\desktop\fo2\flatout2.exe FirewallRules: [TCP Query User{76C6F10E-1A09-470E-B2B1-8CB303B8715D}C:\users\mateusz\desktop\fo2\flatout2.exe] => (Block) C:\users\mateusz\desktop\fo2\flatout2.exe FirewallRules: [UDP Query User{CA6A49A2-5959-4133-A740-6F781DC1B254}C:\program files\artlantis studio 4\qtsocketserver.exe] => (Allow) C:\program files\artlantis studio 4\qtsocketserver.exe FirewallRules: [TCP Query User{FC36E876-755A-4DE1-AA16-2614F4A66FCB}C:\program files\artlantis studio 4\qtsocketserver.exe] => (Allow) C:\program files\artlantis studio 4\qtsocketserver.exe FirewallRules: [UDP Query User{29333714-C445-4721-9AF1-DBABD2A5BFBC}C:\program files\graphisoft\archicad 16\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 16\gsquicktimeserver\gsqtserver.exe FirewallRules: [TCP Query User{2BD280DB-E4F8-4000-ADB6-ED7ED9098FA4}C:\program files\graphisoft\archicad 16\gsquicktimeserver\gsqtserver.exe] => (Allow) C:\program files\graphisoft\archicad 16\gsquicktimeserver\gsqtserver.exe FirewallRules: [UDP Query User{A634BCB8-CB06-4BCA-B618-792CA46A6A51}C:\program files\graphisoft\archicad 16\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 16\archicad.exe FirewallRules: [TCP Query User{D23FDBD4-C309-4208-B703-6A80BBA6B266}C:\program files\graphisoft\archicad 16\archicad.exe] => (Allow) C:\program files\graphisoft\archicad 16\archicad.exe FirewallRules: [UDP Query User{3D01796D-039B-46C6-BAB9-E1DAAECE968D}C:\program files\graphisoft\archicad 16\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 16\licensefilegenerator.exe FirewallRules: [TCP Query User{8E730CB2-C5FE-46AA-9370-B912470D57C2}C:\program files\graphisoft\archicad 16\licensefilegenerator.exe] => (Allow) C:\program files\graphisoft\archicad 16\licensefilegenerator.exe FirewallRules: [{245FB405-1581-481D-8AD3-66C801171A4F}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe FirewallRules: [{3A98813E-2423-4404-84B0-B21B950E68C3}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe FirewallRules: [{AE7F8114-6256-49CA-8078-2CE3ED7389DA}] => (Allow) C:\Program Files (x86)\ExpressFiles\expressdl.exe FirewallRules: [{54F0B2BA-B81E-4C8C-BC9E-9A545D8EA941}] => (Allow) C:\Program Files (x86)\ExpressFiles\expressdl.exe FirewallRules: [UDP Query User{BA83132F-E0E3-4A29-9C95-60AEC6C42FC7}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe FirewallRules: [TCP Query User{D6F2A6A1-BE42-474A-8899-0638378FE631}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe FirewallRules: [{7E63B1B1-E521-4067-AE9C-E48D23308CF2}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{58553ECE-8EA9-47BD-B47B-824C7964A6ED}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 16\GSQuickTimeServer\GSQTServer.exe FirewallRules: [{D2258BA3-1243-4DEB-A8AF-964F3E497DB8}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 16\GSQuickTimeServer\GSQTServer.exe FirewallRules: [{16B4EB96-E25D-4ADF-B1C6-843C1517553F}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 16\ArchiCAD.exe FirewallRules: [{5A01894E-E9B2-41CC-9450-46AD33CAB209}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 16\ArchiCAD.exe FirewallRules: [{80E17A76-1BE3-4E2B-91CC-62ABA799AB00}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe FirewallRules: [{F84179B3-8E36-493D-A41C-6498DDDAF3A1}] => (Block) %ProgramFiles% (x86)\Atari\TDU2\UpLauncher.exe FirewallRules: [{F8A61B98-3F02-4376-9B07-C6B6FBA69C21}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{6BE62F93-F2E1-4DAC-82C9-B141C54E30B5}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{F46CB5EE-B8F1-401C-A468-1FD3C717B12B}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{057D0F5D-02C5-4AB4-B943-5E2835D61D6F}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{6DEB8FF1-F81B-4B4F-89E1-72B5BE051691}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{A36D55A7-61F4-44EB-A669-AA53842EA1DB}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe FirewallRules: [{74EC943F-D9C6-4D4C-A6D7-B610AE219A8E}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{2345C467-A7AB-45F2-A64E-5BE3144B0099}] => (Allow) C:\Windows\System32\dmwu.exe FirewallRules: [{86B51A89-2598-4978-B274-313F81185BAD}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{550822D9-5D5D-4966-B71C-2AEDB7DD937F}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{DDA790E8-CB79-48E6-8662-4EDB412F877C}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{23AF1F70-92CA-4AD2-B317-5D2C5FE18D8B}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{32C8A105-5812-4ABD-8D17-112D36EFBCB1}] => (Allow) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe FirewallRules: [{CCC38AB7-8535-4094-B9B4-86E738EAB2FD}] => (Allow) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe FirewallRules: [{C21B8FE4-63E2-4897-817C-FA792F01E6B3}] => (Allow) LPort=1900 FirewallRules: [{5732F0F8-F4FF-4C9D-B8F5-0DBCB1205D2A}] => (Allow) LPort=2869 FirewallRules: [{69115789-3556-48B7-ACA5-489440D2468F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{90EFF61E-3B51-4977-96D1-367537672009}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{BBE535D4-4FD0-40DB-BF6F-5028088B80B4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{916970E4-7D00-4AAA-B80A-97BE0B238B42}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{B467A944-0FEC-45FD-9222-978E0FCF6B6E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [TCP Query User{04E61922-97F6-4302-B798-C4B4243A4F6D}C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe] => (Block) C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe FirewallRules: [UDP Query User{4DA5FB22-5866-48C9-9593-EA16BDA2F023}C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe] => (Block) C:\programdata\asgvis\common\x64\vc10\distributed rendering\xmldrspawner.exe FirewallRules: [TCP Query User{27196C35-5AA5-4834-878B-AC398BA71D07}C:\program files\artlantis studio 5\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 5\artlantis studio.exe FirewallRules: [UDP Query User{BF764CF2-DFD4-4A95-969E-90D0493B0BB1}C:\program files\artlantis studio 5\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 5\artlantis studio.exe FirewallRules: [TCP Query User{8C602A17-F184-488F-928C-D05A9115612A}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [UDP Query User{6646E114-ACA6-4300-9DDC-DB09699D4FCC}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [{8CB36F2A-E798-43D0-B70A-6EC31F2F8DFA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{0D26B14A-5B79-419C-B9BB-E6212188AA77}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{92295BE7-BBC2-494D-9C5D-C95C09A73073}] => (Allow) C:\Windows\SysWOW64\rundll32.exe FirewallRules: [{DA2B3987-B159-4618-A069-552460B3C266}] => (Allow) C:\Windows\SysWOW64\rundll32.exe FirewallRules: [{AC77BB8C-331A-47EC-8FDA-4484220D561A}] => (Allow) C:\Windows\SysWOW64\rundll32.exe FirewallRules: [{69B0BEF7-BAC5-45C4-998E-7B28339C9B0A}] => (Allow) C:\Windows\SysWOW64\rundll32.exe FirewallRules: [TCP Query User{1DDABA49-A089-4A87-B602-00A57555E9C7}C:\users\mateusz\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\mateusz\appdata\roaming\acestream\engine\ace_engine.exe FirewallRules: [UDP Query User{DC00B0BE-0BE0-4DA2-91E9-704C07341E85}C:\users\mateusz\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\mateusz\appdata\roaming\acestream\engine\ace_engine.exe FirewallRules: [TCP Query User{F40E2E9B-5583-426F-9E7A-94F839EA5623}C:\program files\rhinoceros 5 (64-bit)\system\rhino.exe] => (Block) C:\program files\rhinoceros 5 (64-bit)\system\rhino.exe FirewallRules: [UDP Query User{C06D2843-7623-4E93-BBA8-40D56084DA24}C:\program files\rhinoceros 5 (64-bit)\system\rhino.exe] => (Block) C:\program files\rhinoceros 5 (64-bit)\system\rhino.exe FirewallRules: [{E48519C5-1889-433E-A823-725EDFE02927}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server ==================== Faulty Device Manager Devices ============= Name: IWD Bus Enumerator Description: IWD Bus Enumerator Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard system devices) Service: iwdbus Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Event log errors: ========================= Application errors: ================== Error: (07/09/2015 07:10:08 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MsMpEng.exe, wersja: 4.7.205.0, sygnatura czasowa: 0x54cb5aeb Nazwa modułu powodującego błąd: mpengine.dll, wersja: 1.1.9800.0, sygnatura czasowa: 0x5200b9ff Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000571577 Identyfikator procesu powodującego błąd: 0xc20 Godzina uruchomienia aplikacji powodującej błąd: 0xMsMpEng.exe0 Ścieżka aplikacji powodującej błąd: MsMpEng.exe1 Ścieżka modułu powodującego błąd: MsMpEng.exe2 Identyfikator raportu: MsMpEng.exe3 Pełna nazwa pakietu powodującego błąd: MsMpEng.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MsMpEng.exe5 Error: (07/09/2015 07:07:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MsMpEng.exe, wersja: 4.7.205.0, sygnatura czasowa: 0x54cb5aeb Nazwa modułu powodującego błąd: mpengine.dll, wersja: 1.1.9800.0, sygnatura czasowa: 0x5200b9ff Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000571577 Identyfikator procesu powodującego błąd: 0xa60 Godzina uruchomienia aplikacji powodującej błąd: 0xMsMpEng.exe0 Ścieżka aplikacji powodującej błąd: MsMpEng.exe1 Ścieżka modułu powodującego błąd: MsMpEng.exe2 Identyfikator raportu: MsMpEng.exe3 Pełna nazwa pakietu powodującego błąd: MsMpEng.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MsMpEng.exe5 Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD initialization failed [6]). Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]). Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD endpoint registration failed [0]). Error: (07/09/2015 06:55:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MsMpEng.exe, wersja: 4.7.205.0, sygnatura czasowa: 0x54cb5aeb Nazwa modułu powodującego błąd: mpengine.dll, wersja: 1.1.9800.0, sygnatura czasowa: 0x5200b9ff Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000571577 Identyfikator procesu powodującego błąd: 0x7c0 Godzina uruchomienia aplikacji powodującej błąd: 0xMsMpEng.exe0 Ścieżka aplikacji powodującej błąd: MsMpEng.exe1 Ścieżka modułu powodującego błąd: MsMpEng.exe2 Identyfikator raportu: MsMpEng.exe3 Pełna nazwa pakietu powodującego błąd: MsMpEng.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MsMpEng.exe5 Error: (07/09/2015 06:52:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MsMpEng.exe, wersja: 4.7.205.0, sygnatura czasowa: 0x54cb5aeb Nazwa modułu powodującego błąd: mpengine.dll, wersja: 1.1.9800.0, sygnatura czasowa: 0x5200b9ff Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000571577 Identyfikator procesu powodującego błąd: 0x2f8 Godzina uruchomienia aplikacji powodującej błąd: 0xMsMpEng.exe0 Ścieżka aplikacji powodującej błąd: MsMpEng.exe1 Ścieżka modułu powodującego błąd: MsMpEng.exe2 Identyfikator raportu: MsMpEng.exe3 Pełna nazwa pakietu powodującego błąd: MsMpEng.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MsMpEng.exe5 Error: (07/09/2015 06:51:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MsMpEng.exe, wersja: 4.7.205.0, sygnatura czasowa: 0x54cb5aeb Nazwa modułu powodującego błąd: mpengine.dll, wersja: 1.1.9800.0, sygnatura czasowa: 0x5200b9ff Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000571577 Identyfikator procesu powodującego błąd: 0x35c Godzina uruchomienia aplikacji powodującej błąd: 0xMsMpEng.exe0 Ścieżka aplikacji powodującej błąd: MsMpEng.exe1 Ścieżka modułu powodującego błąd: MsMpEng.exe2 Identyfikator raportu: MsMpEng.exe3 Pełna nazwa pakietu powodującego błąd: MsMpEng.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: MsMpEng.exe5 Error: (07/09/2015 06:37:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD initialization failed [6]). Error: (07/09/2015 06:37:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]). System errors: ============= Error: (07/09/2015 07:10:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Usługa Windows Defender niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (07/09/2015 07:07:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Usługa Windows Defender niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (07/09/2015 07:05:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 z powodu następującego błędu: %%1053 Error: (07/09/2015 07:05:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0. Error: (07/09/2015 07:04:56 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (07/09/2015 07:04:56 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (07/09/2015 07:04:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 z powodu następującego błędu: %%1053 Error: (07/09/2015 07:04:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0. Error: (07/09/2015 07:03:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Avira Mail Protection zależy od usługi Avira Real-Time Protection, której nie można uruchomić z powodu następującego błędu: %%2 Error: (07/09/2015 07:03:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Avira Web Protection zależy od usługi Avira Real-Time Protection, której nie można uruchomić z powodu następującego błędu: %%2 Microsoft Office: ========================= Error: (07/09/2015 07:10:08 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsMpEng.exe4.7.205.054cb5aebmpengine.dll1.1.9800.05200b9ffc00000050000000000571577c2001d0ba69e306c79fC:\Program Files\Windows Defender\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68CAFCB2-6004-436C-9A64-46DA337D59E4}\mpengine.dll58eff54b-265d-11e5-bee9-0c5b8f279a64 Error: (07/09/2015 07:07:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsMpEng.exe4.7.205.054cb5aebmpengine.dll1.1.9800.05200b9ffc00000050000000000571577a6001d0ba69309d0b97C:\Program Files\Windows Defender\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68CAFCB2-6004-436C-9A64-46DA337D59E4}\mpengine.dllfc711674-265c-11e5-bee9-0c5b8f279a64 Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (07/09/2015 07:03:31 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (07/09/2015 06:55:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsMpEng.exe4.7.205.054cb5aebmpengine.dll1.1.9800.05200b9ffc000000500000000005715777c001d0ba681643294dC:\Program Files\Windows Defender\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68CAFCB2-6004-436C-9A64-46DA337D59E4}\mpengine.dll55e4693a-265b-11e5-bee8-808f3e4341c8 Error: (07/09/2015 06:52:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsMpEng.exe4.7.205.054cb5aebmpengine.dll1.1.9800.05200b9ffc000000500000000005715772f801d0ba67985e8f95C:\Program Files\Windows Defender\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68CAFCB2-6004-436C-9A64-46DA337D59E4}\mpengine.dlld7b84813-265a-11e5-bee8-808f3e4341c8 Error: (07/09/2015 06:51:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsMpEng.exe4.7.205.054cb5aebmpengine.dll1.1.9800.05200b9ffc0000005000000000057157735c01d0ba676a0b0bd4C:\Program Files\Windows Defender\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68CAFCB2-6004-436C-9A64-46DA337D59E4}\mpengine.dllb2260299-265a-11e5-bee8-808f3e4341c8 Error: (07/09/2015 06:37:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (07/09/2015 06:37:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] CodeIntegrity Errors: =================================== Date: 2015-03-18 21:30:32.531 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe that did not meet the Store signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz Percentage of memory in use: 20% Total physical RAM: 8079.34 MB Available physical RAM: 6404.19 MB Total Virtual: 11407.34 MB Available Virtual: 9726.4 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:904.64 GB) (Free:358.85 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 988D06B4) Partition: GPT Partition Type. ==================== End of log ============================