Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2016 Ran by Varak (31-10-2016 23:39:28) Running from E:\Download\Mozilla Windows 10 Pro Version 1607 (X64) (2016-08-03 21:58:42) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1879993363-3360728001-3534206898-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1879993363-3360728001-3534206898-503 - Limited - Disabled) Guest (S-1-5-21-1879993363-3360728001-3534206898-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1879993363-3360728001-3534206898-1006 - Limited - Enabled) Varak (S-1-5-21-1879993363-3360728001-3534206898-1000 - Administrator - Enabled) => C:\Users\Varak __vmware_user__ (S-1-5-21-1879993363-3360728001-3534206898-1003 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\uTorrent) (Version: 3.4.9.42606 - BitTorrent Inc.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.) Akamai NetSession Interface (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\Akamai) (Version: - Akamai Technologies, Inc) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ATTENTION Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.5510 - Perfect World Entertainment) Aslain's XVM Mod wersja 4.2.8 (HKLM-x32\...\ZRwTINhSZfduKONYrSCTiCiGPggQZdcLRvoAVxyCOXXpkHeC~1DC3968F_is1) (Version: 4.2.8 - Aslain) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC) BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC) Bloody5 (HKLM-x32\...\Bloody3) (Version: 14.09.0014 - Bloody) Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Cities: Skylines (HKLM\...\Steam App 255710) (Version: - Colossal Order Ltd.) Club Life (HKLM\...\Steam App 404180) (Version: - Dharker Studio) CMUD 3.34 (HKLM-x32\...\CMUD) (Version: 3.34 - Zugg Software) Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project) CPUID ROG CPU-Z 1.61.3 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.61.3 - CPUID, Inc.) Cum on! Bukkake Ranch! version 1.0 (HKLM-x32\...\{77A1823D-1DC6-4032-9B60-2D2EE2F8A36A}_is1) (Version: 1.0 - MangaGamer) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0195 - Disc Soft Ltd) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0316 - DT Soft Ltd) Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version: - Eidos Montreal) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Divine Slice of Life (HKLM\...\Steam App 348540) (Version: - AJT Games) Dropbox (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\Dropbox) (Version: 13.4.21 - Dropbox, Inc.) Endless Legend (HKLM\...\Steam App 289130) (Version: - AMPLITUDE Studios) Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{32136776-FE3F-453D-80DA-CDD993BDB2A3}) (Version: 11.1.20810.00 - Microsoft Corporation) Europa Universalis IV (HKLM\...\Steam App 236850) (Version: - Paradox Development Studio) foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski) Forsaken World (HKLM-x32\...\Steam App 36620) (Version: - Perfect World Beijing) Gadwin PrintScreen (64-Bit) (HKLM\...\{819A52E1-0929-469A-BEB6-1AEBE0873CFC}) (Version: 5.4.2.0 - Gadwin Systems) Galactic Civilizations III (HKLM\...\Steam App 226860) (Version: - Stardock Entertainment) GDR 5520 for SQL Server 2008 (KB2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation) GDR 5538 for SQL Server 2008 (KB3045305) (64-bit) (HKLM\...\KB3045305) (Version: 10.3.5538.0 - Microsoft Corporation) GG (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\GG) (Version: 11 - GG Network S.A.) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.71 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Gwent (HKLM-x32\...\1853006981_is1) (Version: 2.0.0.1 - GOG.com) HTML TADS Player Kit (HKLM-x32\...\htmltads.exe) (Version: - ) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.42 - Irfan Skiljan) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Kadu 2.1 (HKLM-x32\...\Kadu) (Version: 2.1 - Kadu Team) K-Lite Codec Pack 9.1.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.1.0 - ) Life Is Strange™ (HKLM\...\Steam App 319630) (Version: - DONTNOD Entertainment) Marvel Heroes 2016 (HKLM-x32\...\Steam App 226320) (Version: - Gazillion Entertainment) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{F43ADE73-2880-4A95-B995-4FE386ECF667}) (Version: 10.3.5538.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (11.1.20828.01) (HKLM-x32\...\{4F2B8233-35EE-4197-8C3B-EACCBF712029}) (Version: 11.1.20828.01 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) (HKLM-x32\...\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}) (Version: 11.1.20828.01 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C# 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C# 2010 Express - ENU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 49.0.2 (x86 pl) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 pl)) (Version: 49.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla) Mozilla Thunderbird 45.4.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 pl)) (Version: 45.4.0 - Mozilla) MyFreeCodec (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\MyFreeCodec) (Version: - ) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT) Neverwinter (HKLM-x32\...\Neverwinter) (Version: - Cryptic Studios) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming) Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.6.2 - ) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Oracle VM VirtualBox 4.3.12_ZZZZ (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.) Paragon Partition Manager™ 12 Free (HKLM-x32\...\{47E5588F-C3A0-11DE-9857-005056C00008}) (Version: 90.00.0003 - Paragon Software) Pillars of Eternity (HKLM-x32\...\Steam App 291650) (Version: - Obsidian Entertainment) Planescape Torment (HKLM-x32\...\1207658887_is1) (Version: 2.1.0.9 - GOG.com) PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.8.11-r110387-release - Plays.tv, LLC) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc) Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.25 - Razer Inc.) Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.1013 - Razer Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.) Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.4.8 - Reimage) <==== ATTENTION RGSS-RTP Standard (HKLM-x32\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games) RPG MAKER VX Ace RTP (HKLM-x32\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain) SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation) Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.) Sid Meiers Civilization VI Proper (HKLM\...\c2lkbWVpZXJzY2l2aWxpemF0aW9udmk_is1) (Version: 1 - ) Sid Meier's Civilization: Beyond Earth (HKLM\...\Steam App 65980) (Version: - Firaxis Games) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 11.0.0.22 - Bioware/EA) Star Wars: Knights of the Old Republic (HKLM\...\Steam App 32370) (Version: - BioWare) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Stellaris (HKLM\...\Steam App 281990) (Version: - Paradox Development Studio) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden The Legend of Heroes: Trails in the Sky (HKLM\...\Steam App 251150) (Version: - Nihon Falcom) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com) The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.24.0.0 - GOG.com) The Witcher 3: Wild Hunt - Krew i Wino (HKLM-x32\...\Blood and Wine_is1) (Version: 1.24.0.0 - GOG.com) The Witcher 3: Wild Hunt - Serca z kamienia (HKLM-x32\...\Hearts of Stone_is1) (Version: 1.24.0.0 - GOG.com) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH) TP-LINK TL-WN881ND Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK) TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Ultimate Boob Wars!! ~Big Breasts vs Flat Chests~ version 1.0 (HKLM-x32\...\{6F534391-95E7-4291-B9A4-101A400F0995}_is1) (Version: 1.0 - MangaGamer) Unity Web Player (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0415-1000-0000000FF1CE}_Office15.PROPLUS_{67847964-08E2-4A8F-B09D-B08D5CE69250}) (Version: - Microsoft) Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft) Uslugi streamingowe Octoshape (HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\Octoshape Streaming Services) (Version: - Octoshape ApS) Vampire: The Masquerade - Bloodlines (HKLM-x32\...\Steam App 2600) (Version: - Troika Games) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VMware Player (HKLM-x32\...\VMware_Player) (Version: 3.1.3.14951 - VMware, Inc) VMware Player (x32 Version: 3.1.3.14951 - VMware, Inc.) Hidden Vulkan Run Time Libraries 1.0.11.0 (HKLM\...\VulkanRT1.0.11.0) (Version: 1.0.11.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0-2) (Version: 1.0.17.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.17.0 (Version: 1.0.17.0 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Windows Glulxe (HKLM-x32\...\WinGlulxe) (Version: - ) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.31 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - ) 神採りアルケミーマイスター (HKLM-x32\...\InstallShield_{41810510-3CE0-425B-BE07-B9793731737F}) (Version: 2.00.0019 - Eushully) 神採りアルケミーマイスター (x32 Version: 1.00.0006 - Eushully) Hidden 神採りアルケミーマイスター Append01 (HKLM-x32\...\InstallShield_{EFE563B0-DDDB-45AF-B49A-C109C93E5F35}) (Version: 1.00.0004 - Eushully) 神採りアルケミーマイスター Append01 (x32 Version: 1.00.0004 - Eushully) Hidden 神採りアルケミーマイスター Append02 (HKLM-x32\...\InstallShield_{19B5CAAF-3E36-40F4-83F2-45E0D258000C}) (Version: 1.00.0003 - Eushully) 神採りアルケミーマイスター Append02 (x32 Version: 1.00.0003 - Eushully) Hidden 神採りアルケミーマイスター Ver2.00 Update (HKLM-x32\...\InstallShield_{C7B5C8A0-CE3F-4645-A0B6-B5515794076D}) (Version: 2.00.0019 - Eushully) 神採りアルケミーマイスター Ver2.00 Update (x32 Version: 2.00.0019 - Eushully) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Varak\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1879993363-3360728001-3534206898-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Varak\AppData\Roaming\Dropbox\bin\DropboxExt64.1.0.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00933738-2549-4224-B7F1-094A5C76834E} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {01623AF3-BB46-49F5-AF51-617BCAAEA6D8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {0B40296A-CABB-41FD-BE03-D80BB9B5E8AE} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION Task: {1E19B272-5B4A-4356-9012-1414A453E8C1} - System32\Tasks\e-pity2015a_styczen => D:\e-pity2015\Assets\signxml.exe Task: {24EE15F0-8248-4052-A643-291E138EF443} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {28FCF109-9FB2-44D8-AF7E-7DB1C987A60F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-10-12] (Microsoft Corporation) Task: {292F1873-DA61-4B82-85D3-DD7566491453} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated) Task: {3117A8C1-C2D0-431B-897C-FD7BD8B8E28D} - System32\Tasks\Clurers Server => C:\Program Files (x86)\Ckifasy\derfile.exe [2016-10-29] (Glarysoft Ltd) Task: {3DA4EAEF-EE92-49FC-99C2-89937066B536} - System32\Tasks\e-pity2015a_kwiecien => D:\e-pity2015\Assets\signxml.exe Task: {51590512-AECF-45FC-A0B2-A73C3858D26D} - System32\Tasks\SafeZone scheduled Autoupdate 1455206523 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software) Task: {5C740449-D899-4A6E-B0BA-4251AF988FB8} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-26] (Adobe Systems Incorporated) Task: {844C7240-F3BA-4219-A817-3A90248CC553} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-16] (Advanced Micro Devices, Inc.) Task: {86B7D1E1-8BB3-43C5-A0C8-DA69E09FBC36} - System32\Tasks\{95C9A4C6-A89C-4B95-997C-B6BB00AD7232} => pcalua.exe -a D:\GRY\Kamidori\Kamidori\age.exe -d D:\GRY\Kamidori\Kamidori\ Task: {9927C950-A239-43EB-97B4-EBA9994074DF} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2016-09-29] (Reimage ltd.) <==== ATTENTION Task: {99A968C6-81B2-47E0-8030-D2B79384F0A5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {A1DA479E-E731-4B47-9ECD-C7CD2BD60A7C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28] (Google Inc.) Task: {B25B83DA-C764-43F3-95CE-7576A95DE353} - \Microsoft\Windows\Setup\gwx\runappraiser -> No File <==== ATTENTION Task: {BF2E73A0-9D9A-4C35-AFEE-1EDDDFB26241} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1879993363-3360728001-3534206898-1000Core => C:\Users\Varak\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.) Task: {CEC20B22-3B89-4E12-B860-28204019A8E1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28] (Google Inc.) Task: {CFE1A74B-EBB0-4F79-B1BA-D72D8BAC05F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {D2233F7D-098E-46FB-A4C0-CA639B9E91E3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {DBB4D0AC-2019-4B78-BB98-03317D5D030D} - System32\Tasks\avast! Emergency Update => D:\Avast\AvastEmUpdate.exe [2016-09-10] (AVAST Software) Task: {E2B556CA-DAE3-4E6F-A034-82CB5B2BA656} - System32\Tasks\0415avUpdateInfo => C:\ProgramData\Avg_Update_0415av\0415av_AVG-Secure-Search-Update.exe [2015-04-21] () Task: {E60B6775-CC96-40A2-8752-47676BCB5B69} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {E84A99B8-6DD5-4E00-9430-8E97C08D196E} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2016-09-28] (Reimage®) <==== ATTENTION Task: {EEA424B4-4D71-4818-8532-B74470D4728D} - System32\Tasks\48156235445b4b0653a5d4549627ebef => Rundll32.exe "C:\Program Files (x86)\Google\0t4b4g.dll",e62dc6c6547f46bda862da2d05af6862 <==== ATTENTION Task: {F2D924EF-DF4D-4DB2-862E-18E87116FF4A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1879993363-3360728001-3534206898-1000UA => C:\Users\Varak\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.) Task: {F41CCDEC-9814-431B-AECF-84FF0BD75893} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Varak-PC-Varak Varak-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2016-02-09] (Microsoft Corporation) Task: {F97740AF-FB53-4C00-9223-13B530A0ED09} - System32\Tasks\{017DA730-482E-4233-B473-01C9962F68DD} => pcalua.exe -a E:\Download\Mozilla\DuOSInstaller-Beta.exe -d E:\Download\Mozilla (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\0415avUpdateInfo.job => C:\ProgramData\Avg_Update_0415av\0415av_AVG-Secure-Search-Update.exe Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1879993363-3360728001-3534206898-1000Core.job => C:\Users\Varak\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1879993363-3360728001-3534206898-1000UA.job => C:\Users\Varak\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\Users\Varak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Glulxe\(www) Download Glulx games.lnk -> hxxp://mirror.ifarchive.org/indexes/if-archiveXgamesXglulx.html ShortcutWithArgument: C:\Users\Varak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Program uruchamiający aplikacje Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list ShortcutWithArgument: C:\Users\Varak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\グランブルーファンタジー[ChromeApps版].lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=eablgejicbklomgaiclcolfilbkckngf ==================== Loaded Modules (Whitelisted) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-09-30 16:31 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Program Files (x86)\Mozilla Firefox\browser\features\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Program Files (x86)\Mozilla Firefox\browser\features_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Program Files (x86)\Youtube AdBlock\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Program Files (x86)\Youtube AdBlock_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\DefaultAppPool\AppData\Local\Temp\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\DefaultAppPool\AppData\Local\Temp_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\LocalLow\Youtube AdBlock\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\LocalLow\Youtube AdBlock_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\Local\Google\Chrome\User Data\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\Local\Google\Chrome\User Data_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\Local\Temp\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\Users\Varak\AppData\Local\Temp_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\WINDOWS\Temp\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () C:\WINDOWS\Temp_\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () D:\Internet Download Manager\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () D:\K-Lite Codec Pack\local64spl.dll 2016-10-30 22:00 - 2016-10-31 22:00 - 00142848 ____H () D:\Origin\local64spl.dll 2016-09-24 23:20 - 2016-09-24 23:21 - 00189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe 2016-09-30 16:31 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-08-04 05:50 - 2016-08-04 05:50 - 00959168 _____ () C:\Users\Varak\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll 2016-09-16 14:06 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-10-12 16:05 - 2016-10-05 10:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-10-27 20:03 - 2016-10-15 04:41 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-10-27 20:03 - 2016-10-15 04:34 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-10-27 20:03 - 2016-10-15 04:34 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-10-27 20:03 - 2016-10-15 04:34 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-10-27 20:03 - 2016-10-15 04:38 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2014-09-18 16:26 - 2014-09-13 15:30 - 13969920 _____ () C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe 2015-09-05 12:06 - 2013-04-09 10:05 - 00846848 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe 2016-08-19 09:12 - 2016-08-19 09:12 - 00298448 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe 2016-09-10 05:35 - 2016-09-10 05:35 - 00169064 _____ () D:\Avast\JsonRpcServer.dll 2016-10-31 19:06 - 2016-10-31 19:06 - 03125136 _____ () D:\Avast\defs\16103101\algo.dll 2016-09-10 05:35 - 2016-09-10 05:35 - 00482928 _____ () D:\Avast\ffl2.dll 2015-11-24 21:48 - 2015-11-24 21:48 - 00028160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\servicemanager.pyd 2015-11-24 21:46 - 2015-11-24 21:46 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes26.dll 2015-11-24 21:48 - 2015-11-24 21:48 - 00041472 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32service.pyd 2015-11-24 21:48 - 2015-11-24 21:48 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd 2015-11-24 21:43 - 2015-11-24 21:43 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_hashlib.pyd 2015-11-24 21:48 - 2015-11-24 21:48 - 00017920 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32event.pyd 2015-11-24 21:48 - 2015-11-24 21:48 - 00019968 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32evtlog.pyd 2015-11-24 21:48 - 2015-11-24 21:48 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd 2015-11-24 21:43 - 2015-11-24 21:43 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_socket.pyd 2015-11-24 21:43 - 2015-11-24 21:43 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ssl.pyd 2015-11-24 21:43 - 2015-11-24 21:43 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ctypes.pyd 2015-11-24 21:46 - 2015-11-24 21:46 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom26.dll 2015-11-24 21:48 - 2015-11-24 21:48 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd 2015-11-24 21:47 - 2015-11-24 21:47 - 01980928 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd 2015-12-07 21:57 - 2015-12-07 21:57 - 00077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd 2015-11-24 21:47 - 2015-11-24 21:47 - 01862144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd 2015-11-24 21:47 - 2015-11-24 21:47 - 00516608 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd 2015-11-24 21:47 - 2015-11-24 21:47 - 04060160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd 2015-11-24 21:43 - 2015-11-24 21:43 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\select.pyd 2010-11-11 12:31 - 2010-11-11 12:31 - 00970352 _____ () D:\VMware Player\libxml2.dll 2010-11-11 12:31 - 2010-11-11 12:31 - 00068720 _____ () D:\VMware Player\zlib1.dll 2016-10-29 21:59 - 2016-10-29 21:59 - 00275968 _____ () c:\program files (x86)\ckifasy\zapingdreqisserver.dll 2013-03-12 17:10 - 2016-09-08 04:14 - 00784672 _____ () D:\Steam\SDL2.dll 2015-01-21 17:06 - 2016-09-01 02:02 - 04969248 _____ () D:\Steam\v8.dll 2014-05-22 15:51 - 2016-10-13 02:58 - 02321696 _____ () D:\Steam\video.dll 2014-08-29 08:37 - 2016-01-27 08:49 - 02549760 _____ () D:\Steam\libavcodec-56.dll 2014-08-29 08:37 - 2016-01-27 08:49 - 00491008 _____ () D:\Steam\libavformat-56.dll 2014-08-29 08:37 - 2016-01-27 08:49 - 00332800 _____ () D:\Steam\libavresample-2.dll 2014-08-29 08:37 - 2016-01-27 08:49 - 00442880 _____ () D:\Steam\libavutil-54.dll 2014-08-29 08:37 - 2016-01-27 08:49 - 00485888 _____ () D:\Steam\libswscale-3.dll 2015-01-21 17:06 - 2016-09-01 02:02 - 01563936 _____ () D:\Steam\icui18n.dll 2015-01-21 17:06 - 2016-09-01 02:02 - 01195296 _____ () D:\Steam\icuuc.dll 2012-09-25 17:55 - 2016-10-13 02:58 - 00836896 _____ () D:\Steam\bin\chromehtml.DLL 2016-03-10 16:49 - 2016-07-04 23:17 - 00266560 _____ () D:\Steam\openvr_api.dll 2014-09-18 16:27 - 2013-04-03 17:29 - 00085504 _____ () C:\Program Files (x86)\Bloody5\Bloody5\DLL\DLL_ZoomControl.dll 2014-09-18 16:27 - 2014-01-10 16:48 - 04260352 _____ () C:\Program Files (x86)\Bloody5\Bloody5\Data\RES\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll 2015-09-05 12:06 - 2013-01-22 13:40 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll 2015-09-05 12:06 - 2013-04-02 12:41 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll 2015-09-05 12:06 - 2013-05-07 10:16 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll 2015-09-05 12:06 - 2013-05-07 10:16 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL 2015-12-12 03:46 - 2016-10-10 19:19 - 00035792 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2016-10-27 18:44 - 2016-10-10 19:19 - 00145864 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2016-10-27 18:44 - 2016-10-10 19:19 - 00019408 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2016-10-27 18:45 - 2016-10-10 19:19 - 00116688 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-12 03:46 - 2016-10-10 19:19 - 00100296 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-12 03:46 - 2016-10-10 19:19 - 00018888 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-12 03:46 - 2016-10-24 14:16 - 00019760 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-12 03:46 - 2016-10-10 19:19 - 00694224 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00020816 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-12 03:46 - 2016-10-10 19:20 - 00123856 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 01682760 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00020808 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00105928 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32api.pyd 2016-08-05 21:55 - 2016-10-24 14:16 - 00021312 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00052024 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00038696 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\fastpath.pyd 2016-10-27 18:45 - 2016-10-10 19:19 - 00392144 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2016-10-27 18:44 - 2016-10-10 19:21 - 00020936 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00024528 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00116176 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-12 03:46 - 2016-10-24 14:16 - 00381752 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00124880 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32file.pyd 2016-08-05 21:55 - 2016-10-24 14:16 - 00025424 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00024016 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00175560 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00030160 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00043472 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00048592 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00057808 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00024016 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32profile.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00246592 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00026456 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-08-05 21:55 - 2016-10-10 19:20 - 00241104 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00020280 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00028616 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-12 03:46 - 2016-10-24 14:16 - 00023376 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2016-02-10 23:38 - 2016-10-24 14:16 - 00020800 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-02-10 23:38 - 2016-10-24 14:16 - 00019776 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd 2016-02-10 23:38 - 2016-10-24 14:16 - 00020800 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd 2015-12-12 03:46 - 2016-10-10 19:21 - 00350152 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-02-10 23:38 - 2016-10-24 14:16 - 00022352 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 00024392 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2016-10-27 18:44 - 2016-10-10 19:17 - 00036296 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\librsync.dll 2016-10-27 18:44 - 2016-10-24 14:15 - 00031568 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2016-10-27 18:44 - 2016-10-24 14:06 - 00293392 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2016-10-27 18:44 - 2016-10-24 14:15 - 00084280 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2016-10-27 18:44 - 2016-10-24 14:15 - 01826096 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-12 03:46 - 2016-10-10 19:19 - 00083912 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\sip.pyd 2016-10-27 18:44 - 2016-10-24 14:16 - 00531248 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 03928880 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2016-10-27 18:44 - 2016-10-24 14:15 - 01972528 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 00133424 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 00224056 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2016-10-27 18:44 - 2016-10-24 14:16 - 00207672 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2016-08-05 21:55 - 2016-10-24 14:16 - 00020288 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd 2016-10-27 18:44 - 2016-10-10 19:24 - 00017864 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\libEGL.dll 2016-10-27 18:44 - 2016-10-10 19:24 - 01631184 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-12-12 03:46 - 2016-10-10 19:21 - 00060880 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\win32print.pyd 2016-04-15 00:06 - 2016-10-24 14:16 - 00037192 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd 2016-08-05 21:55 - 2016-10-24 14:16 - 00024904 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 00546096 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2016-10-27 18:44 - 2016-10-24 14:16 - 00357680 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 00042808 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2016-10-27 18:45 - 2016-10-24 14:16 - 00168760 _____ () C:\Users\Varak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2016-10-29 05:54 - 2016-10-29 05:54 - 00143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll 2016-09-10 05:35 - 2016-09-10 05:35 - 48936448 _____ () D:\Avast\libcef.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ctypes.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_socket.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ssl.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtGui.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sip.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtCore.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32api.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pywintypes26.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\select.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_hashlib.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32process.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32file.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_sqlite3.pyd 2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sqlite3.dll 2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32gui.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pyexpat.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\winsound.pyd 2015-10-21 21:29 - 2015-10-21 21:29 - 00113171 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlc.dll 2015-10-21 21:29 - 2015-10-21 21:29 - 02396691 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlccore.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\unicodedata.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PIL._imaging.pyd 2015-06-27 00:09 - 2015-06-27 00:09 - 00271872 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\amd_ags.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pythoncom26.dll 2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32com.shell.shell.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\gobject._gobject.pyd 2016-04-19 18:08 - 2016-04-19 18:08 - 02717595 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\heliotrope._purple.pyd 2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libxml2-2.dll 2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\zlib1.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libaim.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\liboscar.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libicq.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libirc.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libmsn.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libxmpp.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libjabber.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoo.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libymsg.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoojp.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl-nss.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl.dll 2016-10-15 13:36 - 2016-09-07 21:42 - 50656768 _____ () C:\Users\Varak\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll 2016-10-15 13:30 - 2016-08-04 21:56 - 49825056 _____ () D:\Steam\bin\cef\cef.winxp\libcef.dll 2016-10-15 13:36 - 2016-09-07 21:42 - 01874944 _____ () C:\Users\Varak\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll 2016-10-15 13:36 - 2016-09-07 21:42 - 00075264 _____ () C:\Users\Varak\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll 2016-10-25 16:59 - 2016-10-31 23:18 - 00158720 _____ () C:\Users\Varak\Temp\sfareca00001.dll 2016-08-04 23:57 - 2016-10-31 23:18 - 00192512 _____ () C:\Users\Varak\Temp\sfamcc00001.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:27D40D6F [197] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2016-10-29 22:02 - 00001006 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Varak\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp DNS Servers: 192.168.0.1 - 192.168.0.2 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == HKLM\...\StartupApproved\Run: => "XboxStat" HKLM\...\StartupApproved\Run32: => "BlueStacks Agent" HKLM\...\StartupApproved\Run32: => "PlaysTV" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\StartupFolder: => "LOA2.lnk" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "GG" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "Kadu" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "Battle.net" HKU\S-1-5-21-1879993363-3360728001-3534206898-1000\...\StartupApproved\Run: => "World of Tanks" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{9754CACA-D48A-4A54-ADAE-D665CAEE68BB}] => (Allow) D:\Steam\steamapps\common\Galactic Civilizations III\GalCiv3.exe FirewallRules: [{2035F9AB-D756-4327-9469-860EF133A691}] => (Allow) D:\Steam\steamapps\common\Galactic Civilizations III\GalCiv3.exe FirewallRules: [{83E3D7A2-AFDC-417F-AACA-D82D51F0C66C}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe FirewallRules: [{5746ECF2-E9AD-4EC9-8185-66021EDA37B5}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe FirewallRules: [UDP Query User{93CC6B5D-3F7D-4151-B3E3-E3493667B673}C:\users\varak\temp\f5a1.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\f5a1.tmp\kmservice.exe FirewallRules: [TCP Query User{BDCD6737-B7DB-4FF5-8B02-DFB60104634C}C:\users\varak\temp\f5a1.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\f5a1.tmp\kmservice.exe FirewallRules: [{47D735E4-BC56-4664-8509-F2EB3D0DAA32}] => (Allow) D:\Steam\steamapps\common\Trails in the Sky FC\Config.exe FirewallRules: [{76B6EF7E-C0A5-44E4-AF42-CFEAD89D89FA}] => (Allow) D:\Steam\steamapps\common\Trails in the Sky FC\Config.exe FirewallRules: [{8470891E-02F0-43DD-B7E6-7C798E87DBA0}] => (Allow) D:\Steam\steamapps\common\Trails in the Sky FC\ed6_win.exe FirewallRules: [{14A6443A-C7A1-465D-BBA4-C563CCCEF404}] => (Allow) D:\Steam\steamapps\common\Trails in the Sky FC\ed6_win.exe FirewallRules: [{6A2171F3-F638-4F8D-BBC8-35B1D58B36E6}] => (Allow) D:\Steam\steamapps\common\Endless Legend\EndlessLegend.exe FirewallRules: [{954D3FBD-01A1-4E47-BF5A-1AA066C0FF7F}] => (Allow) D:\Steam\steamapps\common\Endless Legend\EndlessLegend.exe FirewallRules: [{E2800DF3-9B63-49E9-AEBA-508080E0CB1A}] => (Allow) D:\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{B9C8CED9-D260-4EE5-A42C-E022F9088CA0}] => (Allow) D:\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{FF3573A8-5111-436B-9602-821B23DD028F}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe FirewallRules: [{054BD4C2-11F5-4295-A02E-DF2B1B2B12BC}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe FirewallRules: [{BE04A7C9-78FE-4DA8-9312-D53F1B8F3FBE}] => (Allow) D:\Droid4X\Droid4X\MultiMgr.exe FirewallRules: [{8BD27711-25B9-43AB-B9E2-220686997E01}] => (Allow) D:\Steam\steamapps\common\swkotor\swkotor.exe FirewallRules: [{453E459E-5EAA-44FC-885F-B2DFE8AF9FFD}] => (Allow) D:\Steam\steamapps\common\swkotor\swkotor.exe FirewallRules: [{5AED6F6D-A98F-4808-B70F-6D23A4A68BE1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{C949C9EB-4F64-4F84-977D-99F4B1BB4F14}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{3FDE4558-1CA0-45DE-A024-A1BA3CF25B7E}] => (Allow) C:\Users\Varak\Downloads\BlackDesert_Downloader.exe FirewallRules: [{BEC586B2-B6C7-49F8-8D9E-AA82542F0DAC}] => (Allow) C:\Users\Varak\Downloads\BlackDesert_Launcher.exe FirewallRules: [{20056464-FFD3-4719-A341-BF0FE70F5B26}] => (Allow) C:\Users\Varak\Downloads\bin64\BlackDesert64.exe FirewallRules: [{50CEFF41-CF8D-4D40-B975-91CE791DE91A}] => (Allow) C:\Users\Varak\Downloads\bin\BlackDesert32.exe FirewallRules: [{28360A03-B791-4FB0-8298-9E0435E0E7E3}] => (Allow) D:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe FirewallRules: [{859B1E11-B697-47AE-9D6A-512AE1C9A7A2}] => (Allow) D:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe FirewallRules: [UDP Query User{B02584CA-A996-4D5F-941F-E9D029D809E2}D:\gry\diablo iii\diablo iii.exe] => (Allow) D:\gry\diablo iii\diablo iii.exe FirewallRules: [TCP Query User{90B31411-81E5-4734-BC0B-9A971096F299}D:\gry\diablo iii\diablo iii.exe] => (Allow) D:\gry\diablo iii\diablo iii.exe FirewallRules: [{B1F30DE5-175B-4B96-AFAF-C8AD71DEF8F2}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{73C28D01-FAA9-41F0-A308-771767DDA8A2}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{FE7075E0-8EC6-4889-8594-7EE209847E18}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{46C3340E-7061-4EB2-AAFB-173C4EBA9508}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{1A51630F-58D5-4B82-BB88-8BDB775216BF}] => (Allow) D:\Droid4X\Droid4X\download\MiniThunderPlatform.exe FirewallRules: [{18F3183B-91FC-448E-AC3F-6F58A7263431}] => (Allow) LPort=5000 FirewallRules: [{83302B41-3F1C-4CD8-A4FD-0B15B59CE65E}] => (Allow) LPort=49180 FirewallRules: [{34661D23-E3AD-419B-8AA7-614D36E2E146}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{1221EF13-1823-4FDB-B7E7-FE772408DDFB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [UDP Query User{FAF20A4A-E0E5-4CA1-96AF-4061571AE66B}D:\droid4x\droid4x\download\minithunderplatform.exe] => (Allow) D:\droid4x\droid4x\download\minithunderplatform.exe FirewallRules: [TCP Query User{5D0BC139-3896-494D-8D4B-C1D79664075B}D:\droid4x\droid4x\download\minithunderplatform.exe] => (Allow) D:\droid4x\droid4x\download\minithunderplatform.exe FirewallRules: [{1EBE485E-16B6-427A-98C1-8B12A58136C7}] => (Allow) D:\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe FirewallRules: [{B60C0682-189F-475B-9D45-BCD2707B6EE4}] => (Allow) D:\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe FirewallRules: [UDP Query User{EA51104B-03A2-4453-9CA1-3EBD52DEF7A1}C:\users\varak\temp\565a.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\565a.tmp\kmservice.exe FirewallRules: [TCP Query User{1C07F98E-4ED5-4DEB-BAC4-2A78BA3319D3}C:\users\varak\temp\565a.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\565a.tmp\kmservice.exe FirewallRules: [{50C0B6AE-364E-4C38-93CF-4963B04E1678}] => (Allow) D:\NapiProjekt\napisy.exe FirewallRules: [{46DC4036-790D-427F-98D5-193D0048FB91}] => (Allow) D:\NapiProjekt\napisy.exe FirewallRules: [{53753BF0-04A8-4AE0-A1D8-B539CBE231FE}] => (Allow) D:\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe FirewallRules: [{CE4E1C15-F6AA-4624-B540-AB972ECD0C40}] => (Allow) D:\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe FirewallRules: [{61B2CC9E-E790-4D92-8F2B-DB6050FBD827}] => (Allow) D:\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe FirewallRules: [{A4C44708-B250-475E-B84F-1C46138EA147}] => (Allow) D:\Steam\steamapps\common\Divinity - Original Sin\Shipping\EoCApp.exe FirewallRules: [UDP Query User{EFBD5971-D8E1-41D5-A89F-5B2C183536BA}D:\kadu\kadu.exe] => (Allow) D:\kadu\kadu.exe FirewallRules: [TCP Query User{04C4C68A-1C1E-4829-B2FC-C9BA6C06A578}D:\kadu\kadu.exe] => (Allow) D:\kadu\kadu.exe FirewallRules: [UDP Query User{50ABEF47-D819-4D6E-8D7A-CA616EB47F5B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{DE014DFD-E7AD-48E4-B1E1-27ACF052C965}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{46919683-FC91-4591-89B3-F31B9ECB89C3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F0C58F55-C28F-41AD-A1CA-3F2C236BA665}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{291B6397-367E-409C-A053-52D738041A76}C:\users\varak\temp\2ad8.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\2ad8.tmp\kmservice.exe FirewallRules: [TCP Query User{C9A6C2BA-C47F-47B7-9056-CD49C6848DAC}C:\users\varak\temp\2ad8.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\2ad8.tmp\kmservice.exe FirewallRules: [UDP Query User{6B20EE32-6F80-49AE-BD5B-204A3E059022}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe FirewallRules: [TCP Query User{99C0BB00-D695-4994-AABA-C6526F2C7DFE}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe FirewallRules: [{6F196AEA-AD06-4717-B753-13895A31EB7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{F0C9DC60-61EA-4428-A226-55292AE3EBD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{2C554073-61B6-475E-849F-9DB523138A38}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{FF4B6090-ED2E-4EBD-97A6-E1B0BCD69510}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{64BABF00-4106-446A-B656-A269CBCE163B}] => (Allow) D:\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{3983C096-AA78-40A4-BEF2-09AD8CFCF641}] => (Allow) D:\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{0A161BA9-2147-413F-B774-51DCDE889A8A}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{F8150545-AD19-44C6-85F2-2C21658F64C1}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [UDP Query User{FCCA77A0-E630-45D9-85B2-1B125BAB6EAE}D:\gry\world of tanks\wotlauncher.exe] => (Allow) D:\gry\world of tanks\wotlauncher.exe FirewallRules: [TCP Query User{06078E80-C3B3-4BD3-BF94-4F2C011D2D1D}D:\gry\world of tanks\wotlauncher.exe] => (Allow) D:\gry\world of tanks\wotlauncher.exe FirewallRules: [UDP Query User{AF11A1F1-AFF9-4487-8D79-EFA9C8AE1F53}D:\gry\divinity - original sin\shipping\eocapp.exe] => (Allow) D:\gry\divinity - original sin\shipping\eocapp.exe FirewallRules: [TCP Query User{7F65EDB6-7D94-467A-AFD2-5DD9FD10B467}D:\gry\divinity - original sin\shipping\eocapp.exe] => (Allow) D:\gry\divinity - original sin\shipping\eocapp.exe FirewallRules: [{8F71D809-B9FB-402E-A25D-1CD6099E3F67}] => (Allow) D:\GRY\Battle.net\Battle.net.exe FirewallRules: [{251E61A7-409A-4CC9-BEAF-CF724EBC9D02}] => (Allow) D:\GRY\Battle.net\Battle.net.exe FirewallRules: [UDP Query User{0EE241B2-1599-4B1C-8BF1-F152A51FB0AA}D:\gry\rohan\rohanclient.exe] => (Allow) D:\gry\rohan\rohanclient.exe FirewallRules: [TCP Query User{BB63EB48-F13A-460E-B039-CC3389EAE783}D:\gry\rohan\rohanclient.exe] => (Allow) D:\gry\rohan\rohanclient.exe FirewallRules: [{6D036873-D53B-45F7-ACF1-DEBEF526F001}] => (Allow) D:\Steam\steamapps\common\Forsaken World\patcher.exe FirewallRules: [{110F8473-5A79-4311-AC4E-7A7540F21788}] => (Allow) D:\Steam\steamapps\common\Forsaken World\patcher.exe FirewallRules: [UDP Query User{9829FDD3-D110-4CD5-91A8-7D33178735F3}D:\gry\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\gry\cryptic studios\neverwinter\live\gameclient.exe FirewallRules: [TCP Query User{17DD6D98-00A7-4A77-8DC1-6B9858059040}D:\gry\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) D:\gry\cryptic studios\neverwinter\live\gameclient.exe FirewallRules: [UDP Query User{40AA26AB-425A-4C68-B3BC-CF5DE65F7FCE}C:\users\varak\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => (Allow) C:\users\varak\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe FirewallRules: [TCP Query User{BED6E0D9-79C8-4990-AB64-2AC6CD6AB9C9}C:\users\varak\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => (Allow) C:\users\varak\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe FirewallRules: [{E6C28242-7068-4978-87BE-FFED15B727B5}] => (Allow) C:\Users\Varak\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{FDF56707-85E7-43A2-AF63-F11667C736DA}] => (Allow) C:\Users\Varak\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [UDP Query User{E435FBBE-7984-41A4-86AA-F7A7D810E601}D:\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) D:\steam\steamapps\common\the witcher 2\bin\witcher2.exe FirewallRules: [TCP Query User{3C849F51-6375-4F69-ABCE-53FC8E2DB2CA}D:\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) D:\steam\steamapps\common\the witcher 2\bin\witcher2.exe FirewallRules: [UDP Query User{42AA936B-413C-427A-B08A-87FB53AD9066}D:\gry\world of tanks\worldoftanks.exe] => (Allow) D:\gry\world of tanks\worldoftanks.exe FirewallRules: [TCP Query User{A981DA01-8350-4BF8-8685-668116158E08}D:\gry\world of tanks\worldoftanks.exe] => (Allow) D:\gry\world of tanks\worldoftanks.exe FirewallRules: [UDP Query User{B5B0D990-EAE0-4B2A-8464-0760F83109C4}C:\users\varak\temp\cdab.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\cdab.tmp\kmservice.exe FirewallRules: [TCP Query User{C401C014-08FB-4690-BF2E-8C871E83C73F}C:\users\varak\temp\cdab.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\cdab.tmp\kmservice.exe FirewallRules: [UDP Query User{7E35F724-F427-45E5-8FA8-9168C66F0C90}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [TCP Query User{FE756030-CFF0-4DCA-9AD8-6FB4CCA5C887}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe FirewallRules: [UDP Query User{481F3D07-B7C7-4F0B-99A9-A0134219A5F0}C:\users\varak\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\varak\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{1A28F934-F624-4E8E-827F-A9DAB41E175E}C:\users\varak\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\varak\appdata\local\akamai\netsession_win.exe FirewallRules: [{F9F8CC84-EB19-4919-AD5A-E69837EC940C}] => (Allow) C:\Users\Varak\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{588875EB-E7B8-4AFD-B3D8-7FE9D635C56A}] => (Allow) C:\Users\Varak\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{545BE448-4674-42BD-95AB-37DE262253FB}] => (Allow) C:\Users\Varak\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{863E9C22-FBF1-49B7-9226-99B67F3941CA}] => (Allow) C:\Users\Varak\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{AE873673-BF96-4F11-84D5-8B9E4D267FD4}] => (Allow) D:\GRY\Star Wars-The Old Republic\launcher.exe FirewallRules: [{AE4A3E73-1C1F-4640-9BD9-85A357355897}] => (Allow) D:\GRY\Star Wars-The Old Republic\launcher.exe FirewallRules: [{1AABF84A-A62D-42C3-8399-7CC493D3433E}] => (Allow) D:\GRY\Star Wars-The Old Republic\launcher.exe FirewallRules: [{AA71CA4D-1C87-4EF0-8BD3-D14D85B6A44E}] => (Allow) D:\GRY\Star Wars-The Old Republic\launcher.exe FirewallRules: [{55C5A4FA-2F3D-40A8-B080-FB32FBB63BDB}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{C1A0CDD6-13A9-4BC5-9C2A-6F9EE29A3A06}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{A24998E4-7A4A-4080-9C73-4054F3463884}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{E21D50D1-C918-42CE-BED8-032A42F85DD7}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{517A9366-AD70-4C9C-ABDE-15E37D7FBC9C}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{79AA4B60-7E74-489C-8D22-A1B640FAFFB4}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{9814F52A-294F-40CA-98E3-8EA5B4D8D275}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{0FAFBFCA-7370-4D6B-A8E7-D754C694B995}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{4D8FDC90-0770-4C8C-96B2-F0F2F91032DD}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{C959F366-D1DD-42CD-845B-28CD91B80A57}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{38F313BB-BA9F-4354-AAB0-0B8739A99798}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{DDE4FCDE-369E-4D56-832A-A414668AE141}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{5D6B6296-510D-4745-A1CE-C481A02DEC02}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{6C1C84AD-9CB7-4932-8C69-14412EB1685D}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{AA1FC5E7-A14B-4EED-A4E5-28A09FEA00CA}] => (Allow) D:\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat FirewallRules: [{810135F2-5838-4FCA-AB11-275471E5A442}] => (Allow) D:\Steam\steamapps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat FirewallRules: [{478563C6-4FA9-46B7-AE00-2E5FD0884668}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{3FE08E5C-C894-473A-B824-BDE03451A978}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{CF21B1CC-0712-41A0-934C-40244F7112FA}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{7E7BD3A1-6911-441A-98D3-28CDE7287A4D}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{63D6E0C6-98C6-4E29-870C-147507A0630B}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{9C26D138-4D99-4DD7-A69E-C8FC374A0553}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{1AFA3DFA-3661-4BF5-BFDB-CE116994DAA3}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe FirewallRules: [{9B750520-9017-4960-93D3-0D7890DA2E93}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe FirewallRules: [{5D337E01-CE02-49B4-B196-AA0827F076CE}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{38B44B42-1283-4622-9148-2B142BB91696}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{F1636639-3E5E-41B1-98A3-4DE605CDFD8C}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{69EA6048-BDCC-46BB-BD94-7AB16EB123E1}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{B92393F0-8A55-4CF6-B61F-5747A7908354}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{B14F7F9C-13FD-43AF-B5C7-DD9A2E87C0FB}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{6D6811CC-7998-42DC-9108-E2E0CE68F574}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{40BA6E36-8223-4108-AC55-5B2EB873AF71}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{9FE4B3B6-5B03-434B-A4A3-E8AA45C81C33}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{C3AB9037-B437-4998-A400-26ABC675DDEF}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{356E3DD4-C2FA-4FA1-8059-CE75CA804F71}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{48548F5A-B003-4048-9775-617A68D3767A}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{4E4C2FA1-159F-4F52-BA87-CEC71CE1DBDC}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{159AF642-E985-4B43-84E4-9AA6320CE3FC}] => (Allow) D:\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{7A077526-7526-4393-A0B9-ECE21F01F263}] => (Allow) D:\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe FirewallRules: [{2022E557-2E5B-4B5F-8FA6-2B2345879A36}] => (Allow) D:\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe FirewallRules: [{49B2E48D-14F2-4B3E-A07E-975F6B5552C6}] => (Allow) D:\Origin\games\Dragon Age II\bin_ship\DragonAge2.exe FirewallRules: [{D8D0F397-F29E-4989-8A01-23DB37CC2A39}] => (Allow) D:\Origin\games\Dragon Age II\bin_ship\DragonAge2.exe FirewallRules: [{BFD8F8FC-17CA-4A60-92F5-5DE253E80566}] => (Allow) D:\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe FirewallRules: [{08FE0E08-0F26-4F11-AD75-FA2DFB9410A0}] => (Allow) D:\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe FirewallRules: [{76A4B235-6A87-4AD8-BC5E-C3C0A1783B12}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{0D1AB15E-4603-40FF-AAF6-0D6059316CF5}] => (Allow) D:\Visual Studio Express 2012\Common7\IDE\WDExpress.exe FirewallRules: [{1D766CC9-BB03-4711-AB63-2333050409F8}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{DA306008-1695-4FDF-AC68-80EE3CADB1DB}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{0D03E782-7F37-4013-9BE7-31F212C946D4}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe FirewallRules: [{A10A8DF1-E0D4-4E59-AA95-A188A7A7195E}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe FirewallRules: [{35EF244F-3A08-42D3-8F3A-E3B4610CCC4C}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{30CD831B-9476-40E0-9B5E-FC656BEF765A}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{698A5676-9E52-41B0-8091-DE14CF8CD55F}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{274CD2F6-B76D-4DFA-8106-E589FD52BA91}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{6A59ACE7-FE44-4169-A747-2699A5519A0D}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{CEB4A53E-4595-47C6-824A-C3521C8065FA}] => (Allow) D:\VMware Player\vmware-authd.exe FirewallRules: [{74A82479-F517-4239-8F87-704159842247}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{99B2F9F4-B127-49DA-922F-DEC48A1470DA}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{C04D34C8-CDCC-4FEB-9447-BD0125A84F37}] => (Allow) LPort=53 FirewallRules: [{5762A32E-9D3F-4355-951C-38E9824B0C3C}] => (Allow) LPort=53 FirewallRules: [{52B0C335-CE16-4D09-8306-302293F4D763}] => (Allow) LPort=68 FirewallRules: [{FC4758EA-D6DF-49B3-AAF9-A3352D8D08E3}] => (Allow) LPort=67 FirewallRules: [{9867586C-6D89-4F29-9854-D7DE402C8F10}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{C38F9109-C8EB-4FE3-ACDD-0F6AA9B877D2}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{6F84FAE0-BFF5-45A6-82AD-02EE14E773CA}] => (Allow) LPort=53 FirewallRules: [{39A54F4B-1A5A-4F0A-B925-C807E36B9D39}] => (Allow) LPort=1542 FirewallRules: [{E99BD831-8439-4151-9772-D4664E3F8B18}] => (Allow) LPort=1542 FirewallRules: [{39550AEA-2478-4043-A6F2-83F250A5997A}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [{D6CAFD6B-543C-4D78-93EE-415625799ACA}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [TCP Query User{ABEE30BB-4D08-4EB3-890B-C159F2B57F8E}C:\users\varak\temp\ba57.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\ba57.tmp\kmservice.exe FirewallRules: [UDP Query User{5B74AEA9-7FD1-4A04-A385-9BF24CFC9FC4}C:\users\varak\temp\ba57.tmp\kmservice.exe] => (Allow) C:\users\varak\temp\ba57.tmp\kmservice.exe FirewallRules: [{0DDA6DF2-65F6-4DBF-AE41-6C1452BE25A4}] => (Allow) D:\Droid4X\Droid4X\download\MiniThunderPlatform.exe FirewallRules: [TCP Query User{CE867920-8D83-4B30-9227-EC07C4270F7D}C:\users\varak\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\varak\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe FirewallRules: [{9A37CB32-AB04-4363-9467-832F4CD31FBE}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{8187295A-D5F5-44F0-A44A-AE7815BEE095}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{B85AD010-9B55-41F7-9683-2F7021BBB230}] => (Allow) D:\Droid4X\Droid4X\Droid4X.exe FirewallRules: [{407D5B8B-A01C-4C91-809B-7C756AEB2789}] => (Allow) D:\Droid4X\Droid4X\download\MiniThunderPlatform.exe FirewallRules: [{839BAF2F-C056-4139-9860-04E03A1E7C10}] => (Allow) C:\Program Files\Oracle\VirtualBox\vboxheadless.exe FirewallRules: [{A3F4336F-FCC1-4A27-822C-EE10C488E583}] => (Allow) D:\Steam\steamapps\common\Vampire The Masquerade - Bloodlines\vampire.exe FirewallRules: [{BA609A8A-FF8D-48FB-A4E0-BEFF91D0E883}] => (Allow) D:\Steam\steamapps\common\Vampire The Masquerade - Bloodlines\vampire.exe FirewallRules: [{3F8ABEE6-C1B4-40CC-863B-1B58E823E954}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{EC5C0F6F-4885-4273-898D-7F00DEC805E5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{A981631E-3AA3-46BF-8D95-E631DE3D9FD8}D:\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => (Allow) D:\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe FirewallRules: [UDP Query User{94CF650B-C67D-4ACE-85FA-1EB80AED54D4}D:\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => (Allow) D:\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe FirewallRules: [{4F0643EF-F42B-486D-81B8-D46163D1D121}] => (Allow) D:\Steam\steamapps\common\Stellaris\stellaris.exe FirewallRules: [{0058CB9C-0CB2-450C-A908-2FFC232AFA0A}] => (Allow) D:\Steam\steamapps\common\Stellaris\stellaris.exe FirewallRules: [{B767EB95-DAE2-4E83-81BE-47B759AD0F6D}] => (Allow) D:\Steam\steamapps\common\Club Life\Club Life.exe FirewallRules: [{2A701808-D7B0-49CB-89F4-65AE668AF955}] => (Allow) D:\Steam\steamapps\common\Club Life\Club Life.exe FirewallRules: [{E167E9EA-9F8F-4486-96CB-2181BAAD98A6}] => (Allow) D:\Steam\steamapps\common\Divine Slice of Life\Divine Slice of Life.exe FirewallRules: [{91C35DAE-CF28-4311-9345-27A634A6FDAC}] => (Allow) D:\Steam\steamapps\common\Divine Slice of Life\Divine Slice of Life.exe FirewallRules: [{0FB20D99-6EAF-47DF-A1AC-04D0B368B00C}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{736AE1B9-A054-400F-BE24-F2032589C560}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{1CBA249A-A1C7-4DDB-B5CE-C89650B7529E}] => (Allow) D:\Steam\steamapps\common\Europa Universalis IV\eu4.exe FirewallRules: [{00B29AD5-6FB7-4E2E-81D2-92D226E0E0AF}] => (Allow) D:\Steam\steamapps\common\Europa Universalis IV\eu4.exe FirewallRules: [TCP Query User{CECE810D-507E-476B-AE14-849A577B05F3}D:\gog galaxy\gwent (kts)\gwent.exe] => (Allow) D:\gog galaxy\gwent (kts)\gwent.exe FirewallRules: [UDP Query User{55DC3D11-366E-4BEC-9F80-4FCC7E3B5960}D:\gog galaxy\gwent (kts)\gwent.exe] => (Allow) D:\gog galaxy\gwent (kts)\gwent.exe FirewallRules: [{423272A1-CCAA-4E4E-AF31-D9E55C084698}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{6AF383A0-DA24-4550-98C8-97F8A49C5234}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{9B4785A2-4B59-4771-A73A-E1A19DF3C7A2}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{121991FF-DB97-43CB-B268-8D9365101D00}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{B416189C-CA20-4EEF-A1D5-BD6AD9496222}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe FirewallRules: [{97BB6872-C5A1-40FC-94A5-9F6B570E9EC8}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe FirewallRules: [{29347BFC-125C-48BB-9B26-8DB692E658BA}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe FirewallRules: [{2C8804AC-D5F5-466F-8C41-6A2F9E3BB22B}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe FirewallRules: [{AECBE45B-831B-4ACE-AE90-3BE96090FEE7}] => (Allow) D:\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{DB0A20AD-18B5-43E2-8C35-9E30C4F1D966}] => (Allow) D:\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{CBAD209F-5B21-481D-A9BE-3B1436A66777}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{D76CDBAC-733D-4A89-9E60-834293613251}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{21B1B8F7-7CEB-45FE-B638-7D147CF9944C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{FD07A945-811C-46D9-900A-967CD4677A3C}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{6DF261EB-5A9F-4E5A-A501-BC564E6B7B51}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/31/2016 09:05:48 PM) (Source: Perflib) (EventID: 1010) (User: ) Description: Procedura zbierania danych dla usługi „C:\Windows\System32\winspool.drv” w bibliotece DLL „Spooler” wygenerowała wyjątek lub zwróciła nieprawidłowy stan. Dane o wydajności zwrócone przez bibliotekę DLL licznika nie będą zwracane w bloku danych Perf Data. Pierwsze cztery bajty (DWORD) sekcji danych Data zawierają kod wyjątku lub kod stanu. Error: (10/31/2016 09:05:47 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Nie powiodło się wykonanie procedury otwierania dla usługi „BITS” w bibliotece DLL „C:\Windows\System32\bitsperf.dll”. Dane wydajności dla tej usługi nie będą dostępne. Pierwsze cztery bajty (DWORD) sekcji danych Data zawierają kod błędu. Error: (10/31/2016 08:03:54 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/31/2016 08:03:37 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/30/2016 06:06:29 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/30/2016 06:06:11 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/30/2016 01:16:21 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/30/2016 01:15:59 PM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. Error: (10/30/2016 12:34:03 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Nie powiodło się wykonanie procedury otwierania dla usługi „BITS” w bibliotece DLL „C:\Windows\System32\bitsperf.dll”. Dane wydajności dla tej usługi nie będą dostępne. Pierwsze cztery bajty (DWORD) sekcji danych Data zawierają kod błędu. Error: (10/30/2016 04:52:04 AM) (Source: MsiInstaller) (EventID: 11310) (User: Varak-PC) Description: Produkt: Akamai NetSession Interface - Błąd 1310. Błąd zapisu w pliku: C:\Users\Varak\AppData\Local\Akamai\admintool.exe. Błąd systemu 0. Sprawdź, czy masz dostęp do tego katalogu. System errors: ============= Error: (10/31/2016 11:18:04 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} i identyfikatorem aplikacji APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (10/31/2016 11:15:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa NetTcpActivator zależy od usługi NetTcpPortSharing, której nie można uruchomić z powodu następującego błędu: Nie można uruchomić określonej usługi, ponieważ jest ona wyłączona lub ponieważ nie są włączone skojarzone z nią urządzenia. Error: (10/30/2016 10:01:16 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (10/30/2016 05:33:47 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (10/29/2016 10:45:32 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} i identyfikatorem aplikacji APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (10/29/2016 10:42:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa NetTcpActivator zależy od usługi NetTcpPortSharing, której nie można uruchomić z powodu następującego błędu: Nie można uruchomić określonej usługi, ponieważ jest ona wyłączona lub ponieważ nie są włączone skojarzone z nią urządzenia. Error: (10/29/2016 10:00:55 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Usługa Coalerly jest oznaczona jako usługa interakcyjna. System jest jednak skonfigurowany tak, aby nie zezwalać na usługi interakcyjne, dlatego ta usługa może nie działać właściwie. Error: (10/29/2016 09:39:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NetMsmqActivator z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (10/29/2016 09:39:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą NetMsmqActivator. Error: (10/29/2016 09:39:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi NetPipeActivator z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz Percentage of memory in use: 35% Total physical RAM: 8153.63 MB Available physical RAM: 5249.9 MB Total Virtual: 16306.63 MB Available Virtual: 12561.65 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:100 GB) (Free:18.03 GB) NTFS Drive d: (Aplikacje) (Fixed) (Total:821.42 GB) (Free:505.16 GB) NTFS Drive e: (Dane) (Fixed) (Total:465.76 GB) (Free:294.43 GB) NTFS Drive i: (Samsung Portable) (Fixed) (Total:596.17 GB) (Free:12.61 GB) NTFS Drive l: (KINGSTON 16G) (Removable) (Total:14.63 GB) (Free:12.39 GB) NTFS Drive z: (Swap) (Fixed) (Total:10 GB) (Free:1.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 465DF795) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=821.4 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C190C190) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 596.2 GB) (Disk ID: 82A1FDA7) Partition 1: (Active) - (Size=596.2 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 14.6 GB) (Disk ID: C3072E18) Partition 1: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================