1. OTL
2.  
3. OTL logfile created on: 2018-07-19 16:19:00 - Run 1
4. OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Agnieszka\Downloads
5. 64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
6. Internet Explorer (Version = 9.0.8112.16421)
7. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
8.  
9. 7,89 Gb Total Physical Memory | 5,53 Gb Available Physical Memory | 70,16% Memory free
10. 15,77 Gb Paging File | 13,43 Gb Available in Paging File | 85,14% Paging File free
11. Paging file location(s): ?:\pagefile.sys [binary data]
12.  
13. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
14. Drive C: | 227,68 Gb Total Space | 62,78 Gb Free Space | 27,57% Space Free | Partition Type: NTFS
15. Drive D: | 238,08 Gb Total Space | 213,99 Gb Free Space | 89,88% Space Free | Partition Type: NTFS
16.  
17. Computer Name: LAPTOP | User Name: Agnieszka | Logged in as Administrator.
18. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
20.  
21. [color=#E56717]========== Processes (SafeList) ==========[/color]
22.  
23. PRC - [2018-07-19 16:18:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Agnieszka\Downloads\OTL.exe
24. PRC - [2018-07-18 12:12:40 | 010,828,504 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
25. PRC - [2018-07-18 10:28:47 | 000,322,464 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
26. PRC - [2018-04-20 10:53:04 | 003,943,664 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
27. PRC - [2018-04-20 10:51:12 | 003,892,256 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
28. PRC - [2018-04-20 10:48:08 | 006,788,032 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
29. PRC - [2018-03-21 02:21:48 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
30. PRC - [2013-05-04 15:16:41 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
31. PRC - [2012-07-17 14:57:22 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
32. PRC - [2012-07-17 14:57:20 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
33. PRC - [2012-07-13 17:37:46 | 000,017,376 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
34. PRC - [2012-06-25 17:19:24 | 000,178,848 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
35. PRC - [2012-06-25 15:54:28 | 000,322,208 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
36. PRC - [2012-06-25 10:57:14 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
37. PRC - [2012-06-19 13:59:04 | 000,174,752 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
38. PRC - [2012-05-28 10:04:48 | 000,113,312 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
39. PRC - [2012-05-07 15:10:20 | 001,121,448 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
40. PRC - [2012-05-03 15:13:10 | 000,309,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
41. PRC - [2012-04-24 02:17:00 | 002,458,944 | R--- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
42. PRC - [2012-04-13 10:14:00 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
43. PRC - [2012-02-21 14:49:04 | 000,102,568 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
44. PRC - [2012-02-21 14:49:00 | 000,162,456 | ---- | M] (ASUSTeK) -- C:\Windows\SysWOW64\ACEngSvr.exe
45. PRC - [2012-02-16 16:01:36 | 000,473,728 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
46. PRC - [2012-02-07 06:12:52 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
47. PRC - [2011-11-21 14:22:08 | 000,080,512 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
48. PRC - [2011-11-21 14:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
49. PRC - [2009-06-19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
50. PRC - [2009-06-19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
51. PRC - [2008-12-22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
52.  
53.  
54. [color=#E56717]========== Modules (No Company Name) ==========[/color]
55.  
56. MOD - [2018-07-18 10:30:39 | 067,126,928 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
57. MOD - [2018-07-18 10:28:51 | 000,483,544 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\streamback.dll
58. MOD - [2018-07-18 10:28:42 | 000,282,840 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
59. MOD - [2012-02-21 14:49:00 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
60.  
61.  
62. [color=#E56717]========== Services (SafeList) ==========[/color]
63.  
64. SRV:[b]64bit:[/b] - [2018-07-18 10:28:47 | 000,322,464 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
65. SRV:[b]64bit:[/b] - [2018-07-18 10:28:43 | 007,780,400 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe -- (aswbIDSAgent)
66. SRV:[b]64bit:[/b] - [2017-08-14 12:30:26 | 002,291,904 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe -- (Disc Soft Lite Bus Service)
67. SRV:[b]64bit:[/b] - [2016-05-10 09:56:46 | 000,037,504 | ---- | M] (The OpenVPN Project) [On_Demand | Stopped] -- C:\Program Files\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService)
68. SRV:[b]64bit:[/b] - [2012-04-20 14:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
69. SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
70. SRV - [2018-07-18 10:25:01 | 000,194,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
71. SRV - [2018-07-18 10:18:53 | 000,335,872 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
72. SRV - [2018-05-22 12:54:56 | 000,779,392 | ---- | M] (EasyAntiCheat Ltd) [Disabled | Stopped] -- C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe -- (EasyAntiCheat)
73. SRV - [2018-03-21 02:21:48 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
74. SRV - [2012-07-17 14:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
75. SRV - [2012-07-17 14:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
76. SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
77. SRV - [2012-06-25 10:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
78. SRV - [2012-04-24 02:17:00 | 002,458,944 | R--- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
79. SRV - [2012-04-13 10:14:00 | 000,277,120 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe -- (ASUS InstantOn)
80. SRV - [2012-02-22 09:18:24 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
81. SRV - [2011-12-29 15:27:48 | 000,158,880 | ---- | M] (Atheros) [Disabled | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt&Wlan Coex Agent)
82. SRV - [2011-12-29 15:09:24 | 000,106,144 | ---- | M] (Atheros Commnucations) [Disabled | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
83. SRV - [2011-11-21 14:22:08 | 000,080,512 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
84. SRV - [2011-11-21 14:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
85. SRV - [2010-01-25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [Disabled | Stopped] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
86. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
87.  
88.  
89. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
90.  
91. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,463,080 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
92. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,381,584 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
93. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,211,160 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
94. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,159,640 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
95. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,085,968 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
96. DRV:[b]64bit:[/b] - [2018-07-18 10:28:56 | 000,046,976 | ---- | M] (AVAST Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
97. DRV:[b]64bit:[/b] - [2018-07-18 10:28:55 | 000,197,160 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswArPot.sys -- (aswArPot)
98. DRV:[b]64bit:[/b] - [2018-07-18 10:28:55 | 000,111,872 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
99. DRV:[b]64bit:[/b] - [2018-07-18 10:28:45 | 001,027,728 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
100. DRV:[b]64bit:[/b] - [2018-07-18 10:28:42 | 000,239,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswHdsKe.sys -- (aswHdsKe)
101. DRV:[b]64bit:[/b] - [2018-07-18 10:28:41 | 000,346,664 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbloga.sys -- (aswblog)
102. DRV:[b]64bit:[/b] - [2018-07-18 10:28:41 | 000,201,328 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbidsha.sys -- (aswbidsh)
103. DRV:[b]64bit:[/b] - [2018-07-18 10:28:41 | 000,059,592 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbuniva.sys -- (aswbuniv)
104. DRV:[b]64bit:[/b] - [2018-07-18 10:28:40 | 000,229,392 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys -- (aswbidsdriver)
105. DRV:[b]64bit:[/b] - [2017-09-03 17:19:57 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus)
106. DRV:[b]64bit:[/b] - [2017-09-03 17:19:32 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
107. DRV:[b]64bit:[/b] - [2016-04-21 11:10:04 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
108. DRV:[b]64bit:[/b] - [2015-03-05 11:00:00 | 004,137,472 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
109. DRV:[b]64bit:[/b] - [2012-07-13 17:37:48 | 000,049,824 | ---- | M] (ASUS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusTP.sys -- (ATP)
110. DRV:[b]64bit:[/b] - [2012-07-13 17:37:48 | 000,035,968 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusVBus.sys -- (AsusVBus)
111. DRV:[b]64bit:[/b] - [2012-07-13 17:37:46 | 000,019,104 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusVTouch.sys -- (AsusVTouch)
112. DRV:[b]64bit:[/b] - [2012-07-02 15:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
113. DRV:[b]64bit:[/b] - [2012-05-07 15:10:18 | 000,017,152 | ---- | M] (ASUSTek Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AiCharger.sys -- (AiCharger)
114. DRV:[b]64bit:[/b] - [2012-04-24 02:17:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
115. DRV:[b]64bit:[/b] - [2012-03-01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
116. DRV:[b]64bit:[/b] - [2012-02-22 09:18:14 | 014,692,224 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
117. DRV:[b]64bit:[/b] - [2012-02-20 04:31:14 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
118. DRV:[b]64bit:[/b] - [2012-02-07 06:12:56 | 000,787,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
119. DRV:[b]64bit:[/b] - [2012-02-07 06:12:54 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
120. DRV:[b]64bit:[/b] - [2012-02-07 06:12:54 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
121. DRV:[b]64bit:[/b] - [2012-02-01 11:06:18 | 000,292,968 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsBaStor.sys -- (RSBASTOR)
122. DRV:[b]64bit:[/b] - [2011-12-29 15:18:54 | 000,548,000 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
123. DRV:[b]64bit:[/b] - [2011-12-29 15:18:06 | 000,280,992 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
124. DRV:[b]64bit:[/b] - [2011-12-29 15:17:54 | 000,068,256 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
125. DRV:[b]64bit:[/b] - [2011-12-29 15:17:24 | 000,167,584 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
126. DRV:[b]64bit:[/b] - [2011-12-29 15:17:06 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
127. DRV:[b]64bit:[/b] - [2011-12-29 15:16:54 | 000,030,368 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
128. DRV:[b]64bit:[/b] - [2011-12-29 15:16:36 | 000,110,752 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
129. DRV:[b]64bit:[/b] - [2011-12-29 15:16:18 | 000,338,592 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
130. DRV:[b]64bit:[/b] - [2011-12-23 05:09:00 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
131. DRV:[b]64bit:[/b] - [2011-08-23 15:57:24 | 000,565,352 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
132. DRV:[b]64bit:[/b] - [2009-07-20 11:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
133. DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
134. DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
135. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
136. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
137. DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
138. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
139. DRV:[b]64bit:[/b] - [2009-07-14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
140. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
141. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
142. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
143. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
144. DRV - [2011-09-07 09:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
145. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
146. DRV - [2009-07-02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
147.  
148.  
149. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
150.  
151.  
152. [color=#E56717]========== Internet Explorer ==========[/color]
153.  
154. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
155. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
156. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
157. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
158. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
159.  
160. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
161. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
162. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
163. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
164.  
165. [color=#E56717]========== FireFox ==========[/color]
166.  
167. FF - prefs.js..browser.search.countryCode: "PL"
168. FF - prefs.js..browser.search.region: "PL"
169. FF - user.js - File not found
170.  
171. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_134.dll File not found
172. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll ( Microsoft Corporation)
173. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_134.dll ()
174. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1234204.dll (Adobe Systems, Inc.)
175. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
176. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
177. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll ( Microsoft Corporation)
178. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
179. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
180. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
181.  
182. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 61.0.1\extensions\\Components: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS
183. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 61.0.1\extensions\\Plugins: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS
184. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
185.  
186. [2013-05-04 16:07:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Agnieszka\AppData\Roaming\mozilla\Extensions
187. [2017-11-17 11:33:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Agnieszka\AppData\Roaming\mozilla\SystemExtensionsDev
188. [2018-07-19 12:18:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Agnieszka\AppData\Roaming\mozilla\Firefox\Profiles\hs2g5730.default-1531903920870\extensions
189. [2018-07-19 12:18:25 | 002,457,020 | ---- | M] () (No name found) -- C:\Users\Agnieszka\AppData\Roaming\mozilla\firefox\profiles\hs2g5730.default-1531903920870\extensions\[email protected]
190.  
191. O1 HOSTS File: ([2013-05-04 15:52:32 | 000,000,921 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
192. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
193. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
194. O1 - Hosts: 127.0.0.1 sls.microsoft.com
195. O2:[b]64bit:[/b] - BHO: (ASUS Browser Extension x64) - {78234974-0C4B-4111-BDEB-D9A104418772} - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x64\BrowserExtension64.dll (ASUSTeK Computer Inc.)
196. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
197. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
198. O4:[b]64bit:[/b] - HKLM..\Run: [ASUS Quick Gesture (x64)] C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.)
199. O4:[b]64bit:[/b] - HKLM..\Run: [ASUS Quick Gesture (x86)] C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (ASUSTeK Computer Inc.)
200. O4:[b]64bit:[/b] - HKLM..\Run: [ASUS TP Center (x64)] C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek)
201. O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
202. O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
203. O4:[b]64bit:[/b] - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvLaunch.exe (AVAST Software)
204. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
205. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
206. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
207. O4 - HKLM..\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS)
208. O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
209. O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.)
210. O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
211. O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
212. O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
213. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
214. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
215. O4 - HKCU..\Run: [DAEMON Tools Lite Automount] C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd)
216. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
217. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
218. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
219. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
220. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
221. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
222. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
223. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
224. O13[b]64bit:[/b] - gopher Prefix: missing
225. O13 - gopher Prefix: missing
226. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 31.11.202.254 37.8.214.2
227. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A39DCEA6-AE18-446E-A073-25F0B53414D3}: DhcpNameServer = 31.11.202.254 37.8.214.2
228. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
229. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
230. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
231. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
232. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
233. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
234. O20 - HKLM Winlogon: UserInit - (C:\Windows\SYSTEM32\Userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
235. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
236. O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) -  File not found
237. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
238. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
239. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
240. O32 - HKLM CDRom: AutoRun - 1
241. O33 - MountPoints2\{1e689c3c-b4e9-11e2-967b-806e6f6e6963}\Shell - "" = AutoRun
242. O33 - MountPoints2\{1e689c3c-b4e9-11e2-967b-806e6f6e6963}\Shell\AutoRun\command - "" = E:\InstAll.exe
243. O33 - MountPoints2\{5905c1c1-0d6a-11e8-9d11-2016d8634425}\Shell - "" = AutoRun
244. O33 - MountPoints2\{5905c1c1-0d6a-11e8-9d11-2016d8634425}\Shell\AutoRun\command - "" = G:\HiSuiteDownLoader.exe
245. O33 - MountPoints2\{87335f18-68cc-11e5-bbf9-2016d8634425}\Shell - "" = AutoRun
246. O33 - MountPoints2\{87335f18-68cc-11e5-bbf9-2016d8634425}\Shell\AutoRun\command - "" = F:\HiSuiteDownLoader.exe
247. O33 - MountPoints2\{996c72d4-229a-11e3-8a4c-2016d8634425}\Shell - "" = AutoRun
248. O33 - MountPoints2\{996c72d4-229a-11e3-8a4c-2016d8634425}\Shell\AutoRun\command - "" = F:\LGAutoRun.exe
249. O33 - MountPoints2\{dc6e2375-a377-11e3-a288-2016d8634425}\Shell - "" = AutoRun
250. O33 - MountPoints2\{dc6e2375-a377-11e3-a288-2016d8634425}\Shell\AutoRun\command - "" = F:\LGAutoRun.exe
251. O33 - MountPoints2\F\Shell - "" = AutoRun
252. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\autorun.exe
253. O34 - HKLM BootExecute: (autocheck autochk *)
254. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
255. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
256. O35 - HKLM\..comfile [open] -- "%1" %*
257. O35 - HKLM\..exefile [open] -- "%1" %*
258. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
259. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
260. O37 - HKLM\...com [@ = comfile] -- "%1" %*
261. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
262. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
263. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
264. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
265.  
266. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
267.  
268. [2018-07-19 16:11:41 | 000,000,000 | R--D | C] -- C:\Users\Agnieszka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
269. [2018-07-19 12:26:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
270. [2018-07-19 12:26:24 | 000,032,168 | ---- | C] (Safer-Networking Ltd.) -- C:\Windows\SysNative\sdnclean64.exe
271. [2018-07-19 12:26:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
272. [2018-07-19 12:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
273. [2018-07-18 10:49:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
274. [2018-07-18 10:49:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
275. [2018-07-18 10:49:35 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
276. [2018-07-18 10:30:48 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Roaming\AVAST Software
277. [2018-07-18 10:30:46 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Local\AVAST Software
278. [2018-07-18 10:30:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
279. [2018-07-18 10:29:07 | 001,027,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
280. [2018-07-18 10:29:07 | 000,463,080 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
281. [2018-07-18 10:29:07 | 000,381,584 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
282. [2018-07-18 10:29:07 | 000,346,664 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbloga.sys
283. [2018-07-18 10:29:07 | 000,239,680 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHdsKe.sys
284. [2018-07-18 10:29:07 | 000,229,392 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys
285. [2018-07-18 10:29:07 | 000,211,160 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
286. [2018-07-18 10:29:07 | 000,201,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbidsha.sys
287. [2018-07-18 10:29:07 | 000,197,160 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswArPot.sys
288. [2018-07-18 10:29:07 | 000,159,640 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
289. [2018-07-18 10:29:07 | 000,111,872 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
290. [2018-07-18 10:29:07 | 000,085,968 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
291. [2018-07-18 10:29:07 | 000,059,592 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbuniva.sys
292. [2018-07-18 10:29:07 | 000,046,976 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
293. [2018-07-18 10:29:01 | 001,142,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
294. [2018-07-18 10:29:01 | 001,001,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
295. [2018-07-18 10:29:01 | 000,378,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
296. [2018-07-18 10:29:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVAST Software
297. [2018-07-18 10:27:51 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
298. [2018-07-18 10:27:11 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
299. [2018-07-18 10:21:53 | 000,000,000 | ---D | C] -- C:\AdwCleaner
300. [2018-07-06 13:23:27 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Local\TDUeditor
301. [2018-07-06 12:08:12 | 000,000,000 | ---D | C] -- C:\acr_logs
302. [2018-07-06 08:36:31 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\Desktop\SARDU_324
303. [2018-07-05 17:54:57 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Steam
304. [2018-07-05 17:16:52 | 006,981,240 | ---- | C] (ESET spol. s r.o.) -- C:\Users\Agnieszka\Desktop\esetonlinescanner_enu.exe
305. [2018-07-05 16:44:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heliborne Dragons Awakening
306. [2018-07-05 16:36:50 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\Desktop\Supreme.Commander.MULTi9
307. [2018-07-05 14:17:28 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\Documents\ZombieDriverHD
308. [2018-07-05 13:59:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exor Studios
309. [2018-07-05 12:56:39 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Local\Targem
310. [2018-07-05 12:56:39 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\Documents\My Games
311. [2018-07-05 11:40:20 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\Documents\Test Drive Unlimited
312. [2018-07-05 11:38:35 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Local\paradise_launcher
313. [2018-07-05 11:37:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Test Drive Unlimited
314. [2018-07-05 11:36:34 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Local\Gaijin
315. [2018-07-05 11:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Gaijin
316. [2018-07-05 11:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EasyAntiCheat
317. [2018-07-05 11:36:31 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossout
318. [2018-07-05 11:35:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Test Drive Unlimited ReincarnaTion
319. [2018-07-05 10:06:29 | 000,000,000 | ---D | C] -- C:\Users\Agnieszka\AppData\Roaming\uTorrent
320. [2009-07-14 03:14:20 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Users\Agnieszka\OiNEFMLyeniag.exe
321. [1 C:\Users\Agnieszka\Desktop\*.tmp files -> C:\Users\Agnieszka\Desktop\*.tmp -> ]
322.  
323. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
324.  
325. [2018-07-19 16:16:59 | 001,676,974 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
326. [2018-07-19 16:16:59 | 000,743,280 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
327. [2018-07-19 16:16:59 | 000,656,628 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
328. [2018-07-19 16:16:59 | 000,156,730 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
329. [2018-07-19 16:16:59 | 000,122,440 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
330. [2018-07-19 16:11:45 | 000,000,387 | ---- | M] () -- C:\Users\Agnieszka\AppData\Roaming\sp_data.sys
331. [2018-07-19 16:09:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
332. [2018-07-19 16:09:06 | 2057,424,895 | -HS- | M] () -- C:\hiberfil.sys
333. [2018-07-19 16:08:34 | 000,009,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
334. [2018-07-19 16:08:34 | 000,009,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
335. [2018-07-19 13:22:21 | 000,000,114 | ---- | M] () -- C:\Windows\wininit.ini
336. [2018-07-19 12:26:33 | 000,001,379 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
337. [2018-07-18 10:50:34 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
338. [2018-07-18 10:49:57 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
339. [2018-07-18 10:30:44 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
340. [2018-07-18 10:28:56 | 000,463,080 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
341. [2018-07-18 10:28:56 | 000,381,584 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
342. [2018-07-18 10:28:56 | 000,211,160 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
343. [2018-07-18 10:28:56 | 000,159,640 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
344. [2018-07-18 10:28:56 | 000,085,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
345. [2018-07-18 10:28:56 | 000,046,976 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
346. [2018-07-18 10:28:55 | 000,378,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
347. [2018-07-18 10:28:55 | 000,197,160 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswArPot.sys
348. [2018-07-18 10:28:55 | 000,111,872 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
349. [2018-07-18 10:28:53 | 001,142,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
350. [2018-07-18 10:28:53 | 001,001,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
351. [2018-07-18 10:28:45 | 001,027,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
352. [2018-07-18 10:28:42 | 000,239,680 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHdsKe.sys
353. [2018-07-18 10:28:41 | 000,346,664 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbloga.sys
354. [2018-07-18 10:28:41 | 000,201,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbidsha.sys
355. [2018-07-18 10:28:41 | 000,059,592 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbuniva.sys
356. [2018-07-18 10:28:40 | 000,229,392 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys
357. [2018-07-18 10:18:53 | 000,842,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
358. [2018-07-18 10:18:53 | 000,175,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
359. [2018-07-06 11:46:57 | 000,422,152 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
360. [2018-07-05 21:04:30 | 000,000,292 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
361. [2018-07-05 17:16:57 | 006,981,240 | ---- | M] (ESET spol. s r.o.) -- C:\Users\Agnieszka\Desktop\esetonlinescanner_enu.exe
362. [2018-07-05 10:18:14 | 000,000,002 | ---- | M] () -- C:\Users\Agnieszka\AppData\Local\WMI.ini
363. [2018-07-05 10:06:29 | 000,000,853 | ---- | M] () -- C:\Users\Agnieszka\Desktop\µTorrent.lnk
364. [2018-07-05 09:28:29 | 000,043,520 | ---- | M] () -- C:\Windows\SysWow64\CmdLineExt03.dll
365. [1 C:\Users\Agnieszka\Desktop\*.tmp files -> C:\Users\Agnieszka\Desktop\*.tmp -> ]
366.  
367. [color=#E56717]========== Files Created - No Company Name ==========[/color]
368.  
369. [2018-07-19 16:10:46 | 000,001,268 | ---- | C] () -- C:\Users\Agnieszka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
370. [2018-07-19 13:22:21 | 000,000,114 | ---- | C] () -- C:\Windows\wininit.ini
371. [2018-07-19 12:26:33 | 000,001,391 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
372. [2018-07-19 12:26:33 | 000,001,379 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
373. [2018-07-18 10:49:57 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
374. [2018-07-18 10:30:44 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
375. [2018-07-05 10:18:14 | 000,000,002 | ---- | C] () -- C:\Users\Agnieszka\AppData\Local\WMI.ini
376. [2018-07-05 10:06:29 | 000,000,853 | ---- | C] () -- C:\Users\Agnieszka\Desktop\µTorrent.lnk
377. [2018-07-05 09:28:29 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll
378. [2018-02-02 15:43:47 | 000,001,320 | ---- | C] () -- C:\Users\Agnieszka\Freemake Video Converter.lnk
379. [2017-09-01 17:08:02 | 000,013,312 | ---- | C] () -- C:\Windows\SDL_net.dll
380. [2017-09-01 17:04:58 | 000,448,231 | ---- | C] () -- C:\Windows\sdl.dll
381. [2016-06-22 13:27:00 | 000,227,365 | ---- | C] () -- C:\Users\Agnieszka\13509576_1132322483476306_2078620343_o(1).jpg
382. [2016-05-08 15:05:35 | 000,164,757 | ---- | C] () -- C:\Users\Agnieszka\13177595_1101458853229336_236600193053475177_n.jpg
383. [2015-05-13 13:16:35 | 001,728,113 | ---- | C] () -- C:\Users\Agnieszka\Łubińska Agnieszka.pdf
384. [2015-03-02 23:28:55 | 000,070,691 | ---- | C] () -- C:\Users\Agnieszka\hgh.jpg
385. [2014-04-20 18:18:49 | 000,112,241 | ---- | C] () -- C:\Users\Agnieszka\pandzia.jpg
386. [2014-02-14 20:28:41 | 000,004,608 | ---- | C] () -- C:\Users\Agnieszka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
387. [2013-09-04 19:04:48 | 001,536,596 | ---- | C] () -- C:\Users\Agnieszka\Sherry Argov - Dlaczego mezczyzni kochaja zolzy [PL] [.pdf].pdf
388. [2013-09-01 21:36:31 | 000,000,860 | ---- | C] () -- C:\Users\Agnieszka\CCleaner.lnk
389. [2013-05-05 19:46:17 | 004,598,588 | ---- | C] () -- C:\Users\Agnieszka\IMG_0013.JPG
390. [2013-05-04 15:35:13 | 000,000,017 | ---- | C] () -- C:\Users\Agnieszka\AppData\Local\resmon.resmoncfg
391. [2013-05-04 15:24:52 | 000,000,387 | ---- | C] () -- C:\Users\Agnieszka\AppData\Roaming\sp_data.sys
392.  
393. [color=#E56717]========== ZeroAccess Check ==========[/color]
394.  
395. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
396.  
397. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
398.  
399. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
400.  
401. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
402.  
403. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
404.  
405. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
406. "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
407. "ThreadingModel" = Apartment
408.  
409. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
410. "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
411. "ThreadingModel" = Apartment
412.  
413. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
414. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
415. "ThreadingModel" = Free
416.  
417. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
418. "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
419. "ThreadingModel" = Free
420.  
421. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
422. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
423. "ThreadingModel" = Both
424.  
425. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
426.  
427. < End of report >
428.  
429. Extras
430.  
431. OTL Extras logfile created on: 2018-07-19 16:19:00 - Run 1
432. OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Agnieszka\Downloads
433. 64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
434. Internet Explorer (Version = 9.0.8112.16421)
435. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
436.  
437. 7,89 Gb Total Physical Memory | 5,53 Gb Available Physical Memory | 70,16% Memory free
438. 15,77 Gb Paging File | 13,43 Gb Available in Paging File | 85,14% Paging File free
439. Paging file location(s): ?:\pagefile.sys [binary data]
440.  
441. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
442. Drive C: | 227,68 Gb Total Space | 62,78 Gb Free Space | 27,57% Space Free | Partition Type: NTFS
443. Drive D: | 238,08 Gb Total Space | 213,99 Gb Free Space | 89,88% Space Free | Partition Type: NTFS
444.  
445. Computer Name: LAPTOP | User Name: Agnieszka | Logged in as Administrator.
446. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
447. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
448.  
449. [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
450.  
451.  
452. [color=#E56717]========== File Associations ==========[/color]
453.  
454. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
455. .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
456.  
457. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
458. .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
459.  
460. [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
461. .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
462.  
463. [color=#E56717]========== Shell Spawning ==========[/color]
464.  
465. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
466. batfile [open] -- "%1" %*
467. cmdfile [open] -- "%1" %*
468. comfile [open] -- "%1" %*
469. exefile [open] -- "%1" %*
470. helpfile [open] -- Reg Error: Key error.
471. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
472. InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
473. InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
474. piffile [open] -- "%1" %*
475. regfile [merge] -- Reg Error: Key error.
476. scrfile [config] -- "%1"
477. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
478. scrfile [open] -- "%1" /S
479. txtfile [edit] -- Reg Error: Key error.
480. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
481. Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
482. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
483. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
484. Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
485. Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
486. Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
487. Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
488. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
489. Folder [explore] -- Reg Error: Value error.
490. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
491.  
492. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
493. batfile [open] -- "%1" %*
494. cmdfile [open] -- "%1" %*
495. comfile [open] -- "%1" %*
496. cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
497. exefile [open] -- "%1" %*
498. helpfile [open] -- Reg Error: Key error.
499. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
500. piffile [open] -- "%1" %*
501. regfile [merge] -- Reg Error: Key error.
502. scrfile [config] -- "%1"
503. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
504. scrfile [open] -- "%1" /S
505. txtfile [edit] -- Reg Error: Key error.
506. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
507. Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
508. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
509. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
510. Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
511. Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
512. Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
513. Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
514. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
515. Folder [explore] -- Reg Error: Value error.
516. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
517.  
518. [color=#E56717]========== Security Center Settings ==========[/color]
519.  
520. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
521. "cval" = 1
522.  
523. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
524.  
525. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
526. "VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
527. "AntiVirusOverride" = 0
528. "AntiSpywareOverride" = 0
529. "FirewallOverride" = 0
530.  
531. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
532.  
533. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
534.  
535. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
536.  
537. [color=#E56717]========== Firewall Settings ==========[/color]
538.  
539. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
540. "DisableNotifications" = 0
541. "EnableFirewall" = 1
542.  
543. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
544. "DisableNotifications" = 0
545. "EnableFirewall" = 1
546.  
547. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
548. "DisableNotifications" = 0
549. "EnableFirewall" = 1
550.  
551. [color=#E56717]========== Authorized Applications List ==========[/color]
552.  
553. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
554. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.)
555. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
556. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
557. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
558. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.)
559. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
560. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
561. "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
562.  
563.  
564. [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
565.  
566. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
567. "{06455A94-E7E3-445F-BF09-20791838C2AB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
568. "{06ECF59F-658F-49C3-ADFE-2D3BA4EC50DF}" = lport=139 | protocol=6 | dir=in | app=system |
569. "{182F7726-303D-43DF-BF3A-4F9D74E5409A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
570. "{1E11EA80-75A7-47DE-843E-A93AB9D3A8C2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
571. "{2094A525-4E92-4410-8D0D-5132384DDF58}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
572. "{243C93D2-2C14-4A1B-8524-3BA5E3935B26}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
573. "{2FB166BE-294C-46FB-B6C6-FBF200E60E15}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
574. "{36DDCF61-8F4D-4F75-A553-5261E56511E2}" = lport=445 | protocol=6 | dir=in | app=system |
575. "{3FED752E-6211-4AD7-86C1-52C300526825}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
576. "{422D2FE4-95CB-48AB-9FBE-043F6DD63F20}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
577. "{5243676D-7000-497D-BF35-4B9909912650}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
578. "{6B72C46F-449C-4566-A700-023A0DF11694}" = rport=10243 | protocol=6 | dir=out | app=system |
579. "{70C7E9FA-92B2-4E54-B0BE-EAD50DDA86BA}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
580. "{7E340CD0-9251-43C8-A90F-8CACB4126141}" = rport=445 | protocol=6 | dir=out | app=system |
581. "{7E5C3FC3-3D18-47C3-B2F3-72561A9D47C7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
582. "{800BF457-3C72-4D8F-83A1-F99FD255CF52}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
583. "{91122527-71E8-42B7-B2E0-3E89ED4BED07}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
584. "{92482748-5928-4B26-9650-367D572F5FBD}" = lport=11155 | protocol=17 | dir=in | name=11155 \udp |
585. "{93108E78-3181-4E7D-B0B2-F1383582CF53}" = rport=138 | protocol=17 | dir=out | app=system |
586. "{95C23585-D99B-4A8C-A1CE-729B70F7DCC2}" = rport=137 | protocol=17 | dir=out | app=system |
587. "{AFB92AFD-A061-446A-B5CC-AD93E5D199BA}" = lport=2869 | protocol=6 | dir=in | app=system |
588. "{B3934B62-FB9B-49AB-BCC3-F91D6AE4E4DC}" = lport=137 | protocol=17 | dir=in | app=system |
589. "{C79BB746-948F-4465-9771-D27E203FEB1E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
590. "{E94E7A77-F431-409A-B2CA-751E7C2974F4}" = lport=10243 | protocol=6 | dir=in | app=system |
591. "{EB7F9817-F695-46D7-BDB9-E866DF9F96A0}" = lport=138 | protocol=17 | dir=in | app=system |
592. "{F0E0F9D4-AA60-426C-A7F2-21C72149442B}" = lport=11155 | protocol=6 | dir=in | name=11155 \tcp |
593. "{F6B2CC4A-F6B2-4F8D-AB9A-68A8A46CBDED}" = rport=139 | protocol=6 | dir=out | app=system |
594.  
595. [color=#E56717]========== Vista Active Application Exception List ==========[/color]
596.  
597. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
598. "{022591E1-3CB7-4AF2-93AB-F0D804F77450}" = dir=in | app=c:\users\agnieszka\oinefmlyeniag.exe |
599. "{03C6624E-0A26-4AED-ABF0-88F229F09D39}" = protocol=17 | dir=in | app=c:\users\agnieszka\appdata\roaming\utorrent\utorrent.exe |
600. "{07279CB7-ACC2-4A63-B51B-D1694F0FDC6A}" = dir=in | app=c:\windows\syswow64\svchost.exe |
601. "{07482B67-4D10-42EA-AAAB-ED3614E0388D}" = dir=in | app=c:\windows\syswow64\svchost.exe |
602. "{09DE66C7-B947-41F2-8193-504B3CBAD6F3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
603. "{0A46A35D-AD87-4024-AF9C-E12C711D9BE1}" = dir=in | app=c:\windows\syswow64\svchost.exe |
604. "{0B9385DF-B481-49BC-BCF9-825704A02A13}" = dir=in | app=c:\windows\syswow64\svchost.exe |
605. "{0CBA28F0-5E51-46E2-BC83-0F6E58E0E041}" = protocol=17 | dir=in | app=c:\program files\ccleaner\ccupdate.exe |
606. "{0D422189-05F4-42BF-A1F4-3F1E2B85ACC8}" = protocol=6 | dir=in | app=c:\users\agnieszka\appdata\roaming\utorrent\utorrent.exe |
607. "{0E91E4A1-9598-46AC-BEE6-3C44A5575963}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
608. "{10AE8020-6EE9-4BBE-97A9-AC933CDA2883}" = protocol=6 | dir=in | app=c:\program files\avast software\avast\avemupdate.exe |
609. "{112D5403-603F-4750-B5A2-9C861108523F}" = dir=in | app=c:\windows\syswow64\svchost.exe |
610. "{13C2F1FF-B1EE-442A-AA0F-DD2773C2D9C2}" = dir=in | app=c:\windows\syswow64\svchost.exe |
611. "{14482028-9636-4D9F-9BD1-F16C537A105D}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
612. "{19C020EC-6AC7-45A6-9424-59CC49F142CB}" = dir=in | app=c:\windows\syswow64\svchost.exe |
613. "{1D2DFC62-F4B0-462C-B4AF-03AAC4552F7A}" = protocol=1 | dir=out | [email protected],-28544 |
614. "{250A23D3-57DB-48F6-9F83-597890661AC5}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
615. "{26AF1E2F-B0EE-4187-9983-653FDF22CA58}" = protocol=6 | dir=out | app=system |
616. "{27DC0601-A103-48D8-9D3D-CD106063EBD3}" = dir=in | app=c:\windows\syswow64\svchost.exe |
617. "{31C2FBA1-73E5-49FF-85EF-5F42857EEA7F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
618. "{3732F758-558F-4785-90E9-4CA965AB206F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
619. "{391C73EB-3A9D-4171-AC2D-2B745FD2171A}" = dir=in | app=c:\windows\syswow64\svchost.exe |
620. "{4345382A-28DC-4E3A-A7A8-9C37D774E9E1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
621. "{45BD1B89-B547-4EBD-96A5-0556FB655CA1}" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\s.t.a.l.k.e.r. - shadow of chernobyl\bin\xr_3da.exe |
622. "{48B037B8-4528-4527-82CA-499374AC219C}" = protocol=17 | dir=in | app=c:\program files (x86)\napiprojekt\napisy.exe |
623. "{4EBFA56E-6B3F-4286-B906-0FEA0E3B7FEE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
624. "{502E34DE-4175-48E5-9691-373370026D80}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
625. "{509F12E6-6A95-4A58-A3AA-FCEA05566C69}" = dir=in | app=c:\windows\syswow64\svchost.exe |
626. "{517BFEEB-7EAD-4E94-B585-A61C6458D7DC}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
627. "{536EFA19-D693-4B50-B212-1D5BD61BD55A}" = dir=in | app=c:\windows\syswow64\svchost.exe |
628. "{590DD259-BCFC-473B-B8FF-BFD75E8434A3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
629. "{595935CA-EEA4-4999-8626-9A0B1B8F400F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
630. "{599CD80B-FC4A-4C3A-AFC0-616CBC56AB74}" = protocol=58 | dir=in | [email protected],-28545 |
631. "{5D8BA1E9-14EC-4A38-8560-1FD4FB088542}" = dir=in | app=c:\windows\syswow64\gvstey.exe |
632. "{62DAB257-5448-476C-A713-6B33699A51FE}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe |
633. "{6371CB51-1C0B-4B84-AD9C-749D519D0D6A}" = dir=in | app=c:\windows\syswow64\svchost.exe |
634. "{63DCA7C8-0F8C-43C6-9686-62FE6AEA638F}" = dir=in | app=c:\windows\syswow64\svchost.exe |
635. "{67048F4A-7C86-48CC-9689-3EF1944AD785}" = protocol=6 | dir=in | app=c:\program files (x86)\napiprojekt\napisy.exe |
636. "{6ACCE22B-16FC-4FB5-B93F-8EECFB7E032C}" = dir=in | app=c:\windows\syswow64\svchost.exe |
637. "{71446AC3-A42F-4BEB-8980-8CBE169A50EB}" = dir=in | app=c:\windows\syswow64\svchost.exe |
638. "{7C9BD599-78D1-4BD5-8931-34E07E78D95B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
639. "{7FE6F024-BE2D-4F78-96C2-BB061AA86F8C}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
640. "{80D69F94-D058-4C5C-850F-485E89799CDD}" = dir=in | app=c:\windows\syswow64\svchost.exe |
641. "{8AC83572-E7FB-4EC9-86D7-21885559F7B6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
642. "{8CA3C0D7-60E0-4188-B7A2-C2B4980DC8FC}" = dir=in | app=c:\windows\syswow64\svchost.exe |
643. "{95FD78F6-D6A3-45D5-ABB2-B3BF9D0A96CD}" = dir=in | app=c:\program files (x86)\3cxphone\3cxphone.exe |
644. "{9D5CD730-F811-4AD3-A19D-A269559EDACB}" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\s.t.a.l.k.e.r. - shadow of chernobyl\bin\xr_3da.exe |
645. "{A6033299-B2D4-4BAB-85C5-94FE4BA442FA}" = protocol=17 | dir=in | app=c:\program files\avast software\avast\avemupdate.exe |
646. "{ACB20B78-BDFD-4E4F-BC99-F0FD70D7FA13}" = dir=in | app=c:\windows\syswow64\svchost.exe |
647. "{AD84E723-2AB5-4A53-9D54-F1D69B6B8E13}" = protocol=6 | dir=in | app=c:\program files\ccleaner\ccupdate.exe |
648. "{AF965D2A-B1F8-40C5-A00B-8446C6252E17}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe |
649. "{B42F9553-AB26-4CA7-9873-A5482F3E72A0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
650. "{B52F6973-BEBB-45EA-8D0A-9EE74C994479}" = dir=in | app=c:\windows\syswow64\svchost.exe |
651. "{B687E29B-D9F4-46B6-A238-114EFCA9B8FE}" = protocol=1 | dir=in | [email protected],-28543 |
652. "{B99B80C8-1BC8-42F2-AE6B-0009E214DFFD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
653. "{BE57F5E5-3E00-4B9B-A63F-D829CAF4618A}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
654. "{C7D428F0-54E9-4533-9E64-812B9D20B0DF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
655. "{D453F2E5-EE17-4FB5-923E-AE7DB5F674C9}" = dir=in | app=c:\windows\syswow64\svchost.exe |
656. "{E37EC7D9-C019-4919-92F6-6F892751D839}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
657. "{E5B76B56-9171-4BA7-8649-5D4F45F1DDE0}" = dir=in | app=c:\windows\syswow64\svchost.exe |
658. "{E6DBEC35-3D50-44A9-A42F-564FFAD4C963}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
659. "{E723476A-F6F2-4784-B964-3FAB6FC339A1}" = dir=in | app=c:\windows\syswow64\msiexec.exe |
660. "{ED7A3E9A-418F-47C9-94AB-036FB8F0DE2B}" = protocol=58 | dir=out | [email protected],-28546 |
661. "{F4633F24-117B-4FC1-A6FE-0C533F536871}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
662. "TCP Query User{02C313C3-5AFE-4A13-B665-7BE197BA037E}C:\gierki świniaka ;v\crashday\crashday -steam.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\crashday\crashday -steam.exe |
663. "TCP Query User{1F82E831-02C2-4FAF-9FD1-093F543175E3}C:\gierki świniaka ;v\c&c\twisted insurrection 0.7\game.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\c&c\twisted insurrection 0.7\game.exe |
664. "TCP Query User{310F9E84-C4EC-4F1E-B175-DBAE0CBBB9F5}D:\gierki\test drive unlimited\testdriveunlimited.exe" = protocol=6 | dir=in | app=d:\gierki\test drive unlimited\testdriveunlimited.exe |
665. "TCP Query User{3C2D20C7-5656-4DC7-BD14-093CE9CBA5DB}C:\gierki świniaka ;v\crashday\crashday.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\crashday\crashday.exe |
666. "TCP Query User{4CC13FB4-D5D9-4338-8D6C-899E7FC73EA7}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
667. "TCP Query User{523F56A3-3392-4F4F-829E-C5229CD42E02}D:\gierki\crossout\launcher.exe" = protocol=6 | dir=in | app=d:\gierki\crossout\launcher.exe |
668. "TCP Query User{5720E2B3-86E3-40B0-9FC3-10A8E15A00D7}D:\gierki\test drive unlimited\testdriveunlimited.exe" = protocol=6 | dir=in | app=d:\gierki\test drive unlimited\testdriveunlimited.exe |
669. "TCP Query User{83A0E1F3-2C2F-4913-A265-B02F9B6D83D3}C:\gierki świniaka ;v\c&c\dta\game.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\c&c\dta\game.exe |
670. "TCP Query User{A32F6C0E-C526-46E7-AC6A-AFD751247F64}C:\gierki świniaka ;v\aerial destruction\binaries\win32\udk.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\aerial destruction\binaries\win32\udk.exe |
671. "TCP Query User{D1C83E02-CADC-46DF-B226-2E995CEA0854}C:\gierki świniaka ;v\c&c\ts client\game.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\c&c\ts client\game.exe |
672. "TCP Query User{E6234540-62FE-4D36-9D29-E443825A609B}C:\gierki świniaka ;v\enemy engaged 2\cohokum\ee2.exe" = protocol=6 | dir=in | app=c:\gierki świniaka ;v\enemy engaged 2\cohokum\ee2.exe |
673. "TCP Query User{ECD982A3-3803-41AE-816F-30E6B735945A}C:\windows\syswow64\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
674. "UDP Query User{09D45FA5-B40F-4F81-A24C-0F88BE233E6A}C:\gierki świniaka ;v\crashday\crashday.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\crashday\crashday.exe |
675. "UDP Query User{1FDF57B8-5FA7-4138-97CE-727FE176E0E3}D:\gierki\crossout\launcher.exe" = protocol=17 | dir=in | app=d:\gierki\crossout\launcher.exe |
676. "UDP Query User{3F5C0608-1672-43F4-9814-8E068CC5E501}C:\gierki świniaka ;v\c&c\dta\game.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\c&c\dta\game.exe |
677. "UDP Query User{42D92E73-9108-4F7E-8A62-6EFD5233B5F2}C:\gierki świniaka ;v\c&c\ts client\game.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\c&c\ts client\game.exe |
678. "UDP Query User{62E354D2-2AC3-4548-862B-0BEA57204B72}D:\gierki\test drive unlimited\testdriveunlimited.exe" = protocol=17 | dir=in | app=d:\gierki\test drive unlimited\testdriveunlimited.exe |
679. "UDP Query User{8D6AB85D-5366-492C-BE84-5031EE1A5B05}C:\gierki świniaka ;v\crashday\crashday -steam.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\crashday\crashday -steam.exe |
680. "UDP Query User{AD7905A6-84C0-4FCA-95AB-390F949F2DFD}C:\windows\syswow64\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
681. "UDP Query User{B388D9C2-3E08-4E4C-9B6B-2E8122E52C95}C:\gierki świniaka ;v\enemy engaged 2\cohokum\ee2.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\enemy engaged 2\cohokum\ee2.exe |
682. "UDP Query User{B8863803-9ED6-4F86-AF44-AB0F7E01F967}C:\gierki świniaka ;v\aerial destruction\binaries\win32\udk.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\aerial destruction\binaries\win32\udk.exe |
683. "UDP Query User{CF139E3E-8D60-45D1-AD64-159F8897F3F9}D:\gierki\test drive unlimited\testdriveunlimited.exe" = protocol=17 | dir=in | app=d:\gierki\test drive unlimited\testdriveunlimited.exe |
684. "UDP Query User{CF72C22B-36D0-4F07-8E94-03C3A67FD1F6}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
685. "UDP Query User{ECDC248B-4E15-4BBF-B76D-AF57B7E461A0}C:\gierki świniaka ;v\c&c\twisted insurrection 0.7\game.exe" = protocol=17 | dir=in | app=c:\gierki świniaka ;v\c&c\twisted insurrection 0.7\game.exe |
686.  
687. [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
688.  
689. 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
690. "{1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1}" = Microsoft .NET Framework 4.5
691. "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
692. "{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Atheros Bluetooth Suite (64)
693. "{23170F69-40C1-2702-1805-000001000000}" = 7-Zip 18.05 (x64 edition)
694. "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
695. "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
696. "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
697. "{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
698. "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
699. "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Polski pakiet językowy dla programu Microsoft .NET Framework 4.5 PLK
700. "{94C42BE9-B62A-3558-A793-AD49B354F7AA}" = Microsoft .NET Framework 4.5 PLK Language Pack
701. "{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
702. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 296.67
703. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 296.67
704. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.7.13
705. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.7.13
706. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
707. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
708. "{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
709. "747C94D329BB5CCC3231C84E4D319B6CEC7BBAB3" = Pakiet sterowników systemu Windows - ASUS (ATP) Mouse  (07/08/2012 1.0.0.93)
710. "8461-7759-5462-8226" = Vuze
711. "CCleaner" = CCleaner
712. "DAEMON Tools Lite" = DAEMON Tools Lite
713. "Mozilla Firefox 61.0.1 (x64 pl)" = Mozilla Firefox 61.0.1 (x64 pl)
714. "OpenVPN" = OpenVPN 2.3.11-I601
715. "SKIDROW - Air Missions HIND" = Air Missions HIND
716. "TAP-Windows" = TAP-Windows 9.21.2
717. "YWVyaWFsZGVzdHJ1Y3Rpb24_is1" = Aerial Destruction Frontline Assault
718.  
719. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
720. "{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
721. "{0DF8FA4D-299C-4250-9F09-C14E47E12224}" = 3CXPhone
722. "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
723. "{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
724. "{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
725. "{42A4EC40-09BC-427C-B657-67978B784058}" = Rally Trophy
726. "{4CA7F8A0-DB20-11D4-8B30-000021015D1C}" = Need for Speed 5 Porsche Unleashed
727. "{4D3286A6-F6AB-498A-82A4-E4F040529F3D}" = ASUS Smart Gesture
728. "{5172E572-C175-4F80-A6D5-5CB45826AD61}" = SceneSwitch
729. "{5CB6A112-DA36-486B-9B1C-6341CB95DE37}" = Enemy Engaged 2 Speech
730. "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
731. "{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS FaceLogon
732. "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
733. "{749F674B-2674-47E8-879C-5626A06B2A91}" = InstantOn for NB
734. "{78B1279E-7DFB-4289-B6E1-7C62A1A455A1}_is1" = STALKERSOUP 1.1.0016
735. "{7D916FA5-DAE9-4A25-B089-655C70EAF607}" = Qualcomm Atheros WiFi Driver Installation Program
736. "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
737. "{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
738. "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
739. "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
740. "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
741. "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
742. "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
743. "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
744. "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
745. "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
746. "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
747. "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
748. "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
749. "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
750. "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
751. "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
752. "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
753. "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
754. "{9C27ADE1-EAFB-4BB7-9FE3-5DD9BA9A3DD2}" = Crashday
755. "{A48A1FF5-3393-481E-BEC1-3C705184816C}_is1" = Test Drive Unlimited ReincarnaTion, версия 1
756. "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
757. "{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}" = ASUS USB Charger Plus
758. "{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
759. "{AC76BA86-0804-1033-1959-001824272646}" = Adobe Refresh Manager
760. "{AC76BA86-7AD7-1045-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Polish
761. "{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
762. "{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
763. "{DD1865F0-AD73-40FB-B23E-1822E02396FF}" = NVIDIA PhysX
764. "{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
765. "{EF0D610C-92BE-4D8F-BD33-9F658F8754F1}" = GTI Racing
766. "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
767. "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
768. "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
769. "{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
770. "{F8718F95-21A1-44B9-97EC-679C93020BAE}" = Colin McRae Rally 04
771. "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
772. "{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
773. "{FB83EAC4-E3F6-4666-B45B-44522F2344B6}" = Brother MFL-Pro Suite DCP-J315W
774. "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime
775. "Adobe Flash Player NPAPI" = Adobe Flash Player 30 NPAPI
776. "Adobe Shockwave Player" = Adobe Shockwave Player 12.3
777. "ASUS K5 Series ScreenSaver" = ASUS K5 Series ScreenSaver
778. "Avast Antivirus" = Avast Free Antivirus
779. "Cities XXL_R.G. Mechanics_is1" = Cities XXL
780. "Command and Conquer - Generals_R.G. Mechanics_is1" = Command and Conquer - Generals
781. "CrossOutLauncher_is1" = Crossout Launcher 1.0.3.61
782. "Enemy Engaged 2_is1" = Enemy Engaged 2
783. "ENTERPRISE" = Microsoft Office Enterprise 2007
784. "Freemake Video Converter_is1" = Freemake Video Converter wersja 4.1.10
785. "InstallShield_{EF0D610C-92BE-4D8F-BD33-9F658F8754F1}" = GTI Racing
786. "MozillaMaintenanceService" = Mozilla Maintenance Service
787. "NapiProjekt_is1" = NapiProjekt (2.2.0.2399)
788. "QWlyR3VhcmRpYW5z_is1" = Air Guardians
789. "S.T.A.L.K.E.R. - Shadow of Chernobyl_is1" = S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0005]
790. "Spintires_is1" = Spintires
791. "Strike Fighters 2" = Strike Fighters 2
792. "Strike Fighters 2 Europe" = Strike Fighters 2 Europe
793. "Strike Fighters 2 Expansion Pack 1" = Strike Fighters 2 Expansion Pack 1
794. "Strike Fighters 2 Expansion Pack 2" = Strike Fighters 2 Expansion Pack 2
795. "Strike Fighters 2 Extractor" = Strike Fighters 2 Extractor Jun 2011
796. "Strike Fighters 2 Guns Editor" = Strike Fighters 2 Guns Editor May 2011
797. "Strike Fighters 2 Israel" = Strike Fighters 2 Israel
798. "Strike Fighters 2 North Atlantic" = Strike Fighters 2 North Atlantic
799. "Strike Fighters 2 Vietnam" = Strike Fighters 2 Vietnam
800. "Strike Fighters 2 Weapons Editor" = Strike Fighters 2 Weapons Editor Aug 2011
801. "SumatraPDF" = SumatraPDF
802. "VLC media player" = VLC media player
803. "Zombie Driver HD - Complete Edition_is1" = Zombie Driver HD - Complete Edition
804.  
805. [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
806.  
807. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
808. "{a0a4ee0b-3284-483d-93ce-7bf190eacc8c}" = Citra
809. "Photoscape Packages" = Photoscape Packages
810. "ROTR Beta 1.85" = ROTR Beta 1.85
811. "ROTR Map Pack V2.0" = ROTR Map Pack V2.0
812. "uTorrent" = µTorrent
813.  
814. [color=#E56717]========== Last 20 Event Log Errors ==========[/color]
815.  
816. [ Application Events ]
817. Error - 2018-07-19 10:10:09 | Computer Name = laptop | Source = ESENT | ID = 455
818. Description = Windows (4016) Windows: Wystąpił błąd -1811 podczas otwierania pliku
819.  dziennika C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0059B.log.
820.  
821. Error - 2018-07-19 10:10:10 | Computer Name = laptop | Source = Windows Search Service | ID = 9000
822. Description =
823.  
824. Error - 2018-07-19 10:10:10 | Computer Name = laptop | Source = Windows Search Service | ID = 7040
825. Description =
826.  
827. Error - 2018-07-19 10:10:10 | Computer Name = laptop | Source = Windows Search Service | ID = 7042
828. Description =
829.  
830. Error - 2018-07-19 10:10:10 | Computer Name = laptop | Source = Windows Search Service | ID = 9002
831. Description =
832.  
833. Error - 2018-07-19 10:10:10 | Computer Name = laptop | Source = Windows Search Service | ID = 3029
834. Description =
835.  
836. Error - 2018-07-19 10:10:14 | Computer Name = laptop | Source = Windows Search Service | ID = 3029
837. Description =
838.  
839. Error - 2018-07-19 10:10:14 | Computer Name = laptop | Source = Windows Search Service | ID = 3028
840. Description =
841.  
842. Error - 2018-07-19 10:10:14 | Computer Name = laptop | Source = Windows Search Service | ID = 3058
843. Description =
844.  
845. Error - 2018-07-19 10:10:14 | Computer Name = laptop | Source = Windows Search Service | ID = 7010
846. Description =
847.  
848. [ System Events ]
849. Error - 2018-07-19 10:09:44 | Computer Name = laptop | Source = Service Control Manager | ID = 7000
850. Description = Nie można uruchomić usługi Spybot-S&D 2 Security Center Service z
851. powodu następującego błędu:   %%577
852.  
853. Error - 2018-07-19 10:10:15 | Computer Name = laptop | Source = Service Control Manager | ID = 7024
854. Description = Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla
855.  niej błąd %%-1073473535.
856.  
857. Error - 2018-07-19 10:10:15 | Computer Name = laptop | Source = Service Control Manager | ID = 7031
858. Description = Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło
859. to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna:
860.  Uruchom usługę ponownie.
861.  
862.  
863. < End of report >
864.