OTL Extras logfile created on: 20.09.2019 18:17:16 - Run 5 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kinga\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.18362.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy 3,92 Gb Total Physical Memory | 1,23 Gb Available Physical Memory | 31,40% Memory free 4,60 Gb Paging File | 1,63 Gb Available in Paging File | 35,52% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 420,98 Gb Total Space | 300,33 Gb Free Space | 71,34% Space Free | Partition Type: NTFS Drive D: | 25,00 Gb Total Space | 23,03 Gb Free Space | 92,12% Space Free | Partition Type: NTFS Computer Name: LAPTOP-22SPELCT | User Name: Kinga | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av] "DataMigrated" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}] "GUID" = {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} "DISPLAYNAME" = Avast Antivirus "STATE" = 262144 "PRODUCTEXE" = C:\Program Files\AVAST Software\Avast\wsc_proxy.exe -- (AVAST Software) "REPORTINGEXE" = C:\Program Files\AVAST Software\Avast\wsc_proxy.exe -- (AVAST Software) [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}] "GUID" = {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} "DISPLAYNAME" = Windows Defender "STATE" = 397568 "PRODUCTEXE" = windowsdefender:// "REPORTINGEXE" = %ProgramFiles%\Windows Defender\MsMpeng.exe -- (Microsoft Corporation) [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw] "DataMigrated" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 8B A5 B2 79 0A 5E D5 01 [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{42B44A09-9260-4122-BB62-699E60C4B949}" = rport=55255 | protocol=17 | dir=out | app=c:\program files (x86)\lenovo\connect2\connect2.exe | "{CEFD235B-3CF9-43E1-AB10-2908E666F05C}" = lport=51689 | protocol=6 | dir=in | app=c:\program files (x86)\lenovo\connect2\connect2.exe | "{D6732931-B21C-4806-ADD7-D3C85E25EB4F}" = rport=55255 | protocol=17 | dir=in | app=c:\program files (x86)\lenovo\connect2\connect2.exe | "{E3E945A6-A2D0-46F1-A617-82D87D2F1D50}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe | "{FB945A95-495C-457C-AE67-9527382A2FBC}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0074ECA1-0872-45E8-BF7B-556E024BEC51}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{0091B7D3-0D1F-42A6-9D4D-FDB3B52FDB09}" = dir=out | name=@{microsoft.windowsstore_11909.1002.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{0210A64C-408B-4B28-ABC0-41C681C1CF95}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.11901.20184.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{03088047-26D6-47A0-A801-DFEB59E8CDDC}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.18362.329.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{03AF7EC8-BDDB-41C7-B730-92F8B9DACA14}" = dir=out | name=@{microsoft.win32webviewhost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | "{041732AC-58BE-4FF2-8D30-CA9FBFC90F08}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{04FE5535-2C95-4421-94C6-5C8033A650A4}" = dir=out | name=@{microsoft.connectivitystore_1.1604.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.connectivitystore/mswifiresources/appstorename} | "{0797559A-5D4C-40DC-B93B-177E7FEA11F2}" = dir=out | name=3d builder | "{091BE8E7-9B7D-47C3-80A5-0FB478C568FE}" = protocol=17 | dir=in | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{0A75B808-2EB7-4E62-BE0B-A7D91B38E425}" = dir=in | name=@{microsoft.oneconnect_5.1906.1791.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} | "{0FCF0FF5-E3BE-44EB-B87F-057AC7C61052}" = dir=in | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{119638D1-C4F2-4245-9F16-F85EE121230E}" = dir=out | name=xbox tcui | "{123D36F5-276C-415F-8776-3BE00CE0A175}" = protocol=17 | dir=out | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{12D93F83-953C-4325-9BF9-F67BD9AA6B29}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | "{1919096F-C058-4BDA-8FEC-9F9A2DB41904}" = dir=in | name=@{microsoft.windowsstore_11909.1002.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{19229055-6D89-492C-B6BC-2618A433E505}" = dir=out | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{1930E61F-4BE4-4B15-90AE-26D74A7A9B1E}" = dir=out | name=@{microsoft.accountscontrol_10.0.18362.329_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{1A36E0B6-66A7-4634-A227-2D3764D00D16}" = protocol=17 | dir=in | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{1A770304-3CC3-473C-B93C-E5561117392B}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{1B5CBB4A-04AB-4DAE-B1AF-8B530676632B}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.18362.329.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{1B88FBD7-CDF6-4AC9-929E-02623B7D2AFE}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe | "{1C64BC2E-97FA-42AA-A5DE-3A33EE7901FE}" = dir=out | name=skype | "{21E2155C-D8AE-449B-881B-8C5F0A110DCC}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{22BE6806-18F4-4A67-A3CB-62D6BD0CBCF2}" = protocol=6 | dir=out | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{28BB4680-3F3E-49DF-B9C8-66808EF63E33}" = dir=in | name=@{microsoft.microsoftedge_44.18362.329.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{28F3037D-78A1-4A05-9726-3F7EF8DB3D49}" = dir=in | name=onenote | "{290BD3EB-7049-41BE-A7C0-4D5D3493C859}" = dir=out | name=@{microsoft.ppiprojection_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{2E85803C-FB12-48DA-8835-428C4FB1642F}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{2EF9F38B-929B-4668-95BB-87FA8478735F}" = dir=out | name=@{microsoft.windows.photos_2019.19061.18920.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{303B516B-96FF-41AA-8C25-84AC3C723E88}" = dir=in | name=print 3d | "{3135966A-F11C-4840-87D8-0EC1A0A9B12E}" = dir=in | name=lenovo settings | "{333BC335-2E75-459C-B2E4-95001AFAFCE4}" = dir=out | name=windows_ie_ac_001 | "{34B1F3BD-7DB9-403F-91AF-E18EC61BF10A}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1903.2331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{34F6E0B5-2387-46AF-B78A-902DFEED73B3}" = protocol=17 | dir=in | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{35D1B850-AE9C-4517-AF48-32706600B493}" = dir=out | name=@{microsoft.microsoft3dviewer_7.1908.9012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | "{35DD9B28-A7F2-41B8-9661-83AA77CDE54A}" = dir=out | name=@{microsoft.windowscalculator_10.1906.53.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | "{3604DD5A-34B3-44AE-99CF-B1B04B2D7404}" = protocol=6 | dir=in | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{3833276A-881A-47F2-B3DE-4F61C6DE0D56}" = dir=out | name=microsoft sticky notes | "{387F169E-CFCA-4FCB-B8DE-BCE6E442B10A}" = dir=out | name=windows_ie_ac_001 | "{3EBB14B2-3E05-411D-8904-E662BD712317}" = dir=out | name=onenote | "{3F51A236-3AE0-4F90-8BF4-373B62C0F03A}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.18362.329_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | "{40104587-F12E-4D5B-908A-159FE4E8EC33}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{408B6DF3-A19C-455B-BBF2-38B9C00CF735}" = dir=out | name=candy crush soda saga | "{4256A3BF-B55D-4DA9-AC00-E2FD7EFA3069}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} | "{42A540FB-DAF0-4BAC-A070-1F3A98D761C4}" = dir=in | name=skype | "{42AC4357-5304-4759-8F61-2141B8C72622}" = dir=out | name=@{microsoft.mspaint_6.1907.18017.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | "{4467655D-4E9D-469F-ADF9-2EC5C870F992}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} | "{4B1379DA-BB40-44AF-80DE-4384EC3284F2}" = dir=in | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{4C0A4001-D783-48EA-B4BF-2B210DFCD173}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1903.2331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{4F1400FF-00DA-45D9-94D3-AD64854DD3DD}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{4F930948-7260-46EF-9DA7-1F821D411A9F}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.18362.329.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{51605FC6-EBBB-4953-ADFC-2E060DA9645D}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.18362.329.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | "{526CCBA2-6491-48BD-B20D-C56D22A22721}" = dir=in | name=microsoft sticky notes | "{52A24A15-C9A3-44EE-A6B9-540761ECA9BE}" = dir=out | name=@{microsoft.microsoftedge_44.18362.329.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{534C661B-716C-420A-A6FE-FB053AFF474F}" = dir=in | name=@{microsoft.win32webviewhost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | "{5A992C96-B2D5-4433-BF63-F06D831CBAD6}" = dir=in | name=@{microsoft.windows.shellexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{5ADD29DB-F973-4326-9560-8686CE76723E}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.18362.329_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | "{5B182C27-322A-4C01-A72E-E511C14CFCF4}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{5C2146D3-DD0C-4D2A-8AF5-FD30045ECC5C}" = dir=out | name=@{microsoft.xboxapp_48.55.30001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | "{5D139751-4C18-4D36-92AE-2FD39C6DC27F}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{5D352542-A7D0-4995-8A2D-79ACAF00E620}" = dir=out | name=@{microsoft.storepurchaseapp_11909.1002.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | "{5EFD1C75-8FF2-4F20-BE7B-32D1502F4295}" = dir=out | name=@{microsoft.gethelp_10.1706.22112.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | "{605A979F-C74C-41E4-B033-5A3F8EDB1D32}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.31351.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{60D55E36-1B49-4B64-ABBD-29BD70AC0116}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{626CC166-A03E-4A9F-99F2-BBE72A13F865}" = dir=out | name=@{microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{63DDE79B-8367-4AE8-B3BA-D102B92CAE94}" = dir=out | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{67B67C3D-B69E-4953-BD05-AE725FFFC96C}" = dir=in | app=c:\program files (x86)\lenovo\lenovo photo master\photoplus.exe | "{682E8D3D-63B3-4C51-856D-3CA4D3D2B315}" = protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\ucmapi.exe | "{6C1ABC6A-A6BA-4402-9A89-AA22967499FF}" = dir=out | name=@{microsoft.bingweather_4.32.12463.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{6CEB0384-1592-4808-B797-7BD62DF46D2D}" = dir=out | name=@{microsoft.xboxgamingoverlay_3.32.20003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} | "{6D854D1C-D77C-415D-8954-3CEB11C8254E}" = dir=in | name=@{microsoft.messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{6ED2E099-EC13-4A07-88F9-E2E5FD20940C}" = dir=out | name=@{microsoft.getstarted_8.0.22132.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | "{731B7956-41E1-4FC9-8251-78AD4950B836}" = dir=out | name=@{lenovocorporation.lenovoid_2.0.37.0_x86__4642shxvsv8s2?ms-resource://lenovocorporation.lenovoid/resources/displayname} | "{734EDF99-9870-4B67-9CBF-A907A646E675}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{73B3D9ED-7267-4799-A7DD-D56FEA1E05A0}" = dir=in | name=autodesk sketchbook | "{78955C38-93EC-4353-AFD7-F2BEFA9AA494}" = dir=in | name=@{microsoft.windows.photos_2019.19061.18920.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{7906DDED-535E-4054-8AE3-23C0AEFAECF1}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{7955F4DA-9A3D-4A44-8B96-41E074091CF7}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.11901.20184.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{79D5E172-D000-410E-8114-6EEF35074EA7}" = dir=out | name=@{microsoft.bingfinance_4.31.11905.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | "{7CAF0459-76D3-402C-B6AF-C8A07BAD4DB3}" = dir=out | name=lenovo settings | "{7D981AF9-FEEA-454E-A591-5B6006326165}" = dir=out | name=lenovo settings | "{7F391CEF-E9B6-4E24-9D1B-F7EE23EFE090}" = protocol=6 | dir=in | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{7FB66ECA-CDD2-4A8D-99CC-D610DD443631}" = dir=out | name=@{microsoft.mixedreality.portal_2000.19071.1302.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mixedreality.portal/resources/pkgdisplayname} | "{839A704E-773D-408C-96C3-E476E24F3414}" = dir=out | name=lenovo settings | "{852DC98D-7BE5-4A20-A47A-EA0257E4DE28}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{85615E50-FDF5-4202-81A2-68CEAACB0227}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | "{8A2BB61F-A6FE-416C-A5E6-44CEEE39EC0F}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe | "{8BD6F56B-D258-4E6B-9B9F-88F9D1A0C5F0}" = dir=out | name=@{hotger.com.youtubeconverterbywww.flvto.com_2.0.58.0_x64__cg7p2qfgefa1a?ms-resource://hotger.com.youtubeconverterbywww.flvto.com/resources/flvtodownloader} | "{8C9984F4-2809-4751-8ABB-35071F368650}" = dir=out | name=sway | "{8CE84235-929B-4E1C-8AC6-6CB61401C086}" = protocol=6 | dir=in | app=c:\program files\microsoft office 15\root\office15\lync.exe | "{8CF0BF1C-DC2E-4C1B-BD56-F1B0B359E8F4}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{8D1273CC-C8DB-4069-BCE2-5CEC3ADC306A}" = dir=out | name=@{microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{90712B52-29EF-4182-81CD-EFE2A522E809}" = dir=in | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{945B1852-A207-4646-B679-87DE6461DBE2}" = protocol=6 | dir=in | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{974F90CC-03A1-493C-928E-9BCA7CA8F095}" = protocol=17 | dir=out | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{993BC6E8-05BC-478E-969B-FF27ED62EB34}" = dir=in | name=@{microsoft.windows.startmenuexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | "{99F7CCDD-5120-4BC9-BB28-53672E0E7D06}" = dir=out | name=@{microsoft.bingnews_4.32.12463.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithtagline} | "{9A078448-B3C3-49D7-8DFA-F23B195F3B48}" = dir=in | name=3d builder | "{9B52C697-BF98-43A4-B515-491CC0F4D80D}" = dir=in | name=@{microsoft.windows.cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{9D83F28B-0588-41BD-9176-19F37DF8E6CB}" = dir=in | name=@{hotger.com.youtubeconverterbywww.flvto.com_2.0.58.0_x64__cg7p2qfgefa1a?ms-resource://hotger.com.youtubeconverterbywww.flvto.com/resources/flvtodownloader} | "{9E3F8802-B9C2-40F7-83DA-4DFD39E847A8}" = protocol=6 | dir=in | app=c:\program files\microsoft office 15\root\office15\ucmapi.exe | "{A149BF98-0AAF-4682-B03B-07F5A728AAF4}" = dir=out | name=lenovo vantage | "{A2FDE716-B25E-4D38-9C32-7C5A16BD96D1}" = dir=out | name=@{microsoft.zunevideo_10.19072.12011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{A33AA79C-C785-46DE-B675-EAA6642044D5}" = dir=in | app=c:\program files (x86)\lenovo\lenovo photo master\subsys\advphotoeditor\photodirector5.exe | "{A35CBF4E-E854-43C7-949F-3C9B528253DF}" = protocol=6 | dir=in | app=c:\program files\ccleaner\ccupdate.exe | "{A5BD1DD2-4DFF-4892-B9FF-F0037489F186}" = dir=out | name=@{microsoft.bingsports_4.31.11905.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | "{A5CF5149-CA45-4126-9A28-1FCC971D2DC7}" = dir=out | name=microsoft pay | "{A84C098C-9C7D-4371-A02B-1BC172D0FF03}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{AAB36D77-4035-4691-B53E-366080262F77}" = protocol=17 | dir=in | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{AADB6889-C64A-47B4-BF07-70DD94A31DB0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{AB98E24C-60C8-4EBB-8C35-1E7C5A05901C}" = dir=in | app=c:\program files\itunes\itunes.exe | "{AD14A81F-89F0-408E-9FC7-292F91D53FAC}" = dir=out | name=shell input application | "{AEBB9D4E-D6C0-4E83-BE17-BEA5E72F7390}" = dir=out | name=xbox game bar plugin | "{B05B2D10-5724-4ADC-AB0D-92478AE6F036}" = dir=in | name=@{microsoft.zunevideo_10.19072.12011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{B065E5D7-E9CD-42D6-8461-5F968E6BD935}" = dir=out | name=@{microsoft.windows.startmenuexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | "{B094048E-9CF1-4B3F-87E2-0C0301477230}" = dir=out | name=@{microsoft.oneconnect_5.1906.1791.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} | "{B1646844-3F2A-4484-B6A2-E698A1B1C248}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{B23814B7-46CB-4AE4-9310-ADA376D53199}" = dir=out | name=@{microsoft.xboxidentityprovider_12.54.26001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | "{B62E20F1-9CF5-4966-993E-ED36062A051B}" = protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\lync.exe | "{BCE45E3C-E6B4-4AB6-B69D-9AE0BAA1F715}" = dir=out | name=@{microsoft.zunemusic_10.19072.14111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{BCFA639D-19FD-42DE-9197-747B066CE9F9}" = dir=out | name=office | "{BF6A72F7-6C7B-4566-B9C8-A5C1F5E646FB}" = dir=in | name=@{microsoft.xboxapp_48.55.30001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | "{BF725F64-FADC-4D1C-8A50-0456FD566900}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.18362.329.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{C3891C90-021D-4AD6-AA77-FF1639C2599A}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\apex\easyanticheat_launcher.exe | "{C4D2F5A9-38E4-4792-A98B-AF4A1854068A}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.18362.329_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} | "{C9A48E85-669A-4597-9346-50E2F3D9D3DE}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | "{C9D7859E-021B-4BD9-84E8-FD3F05FFED97}" = dir=out | name=@{microsoft.windowsmaps_5.1906.1972.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | "{CAA1037A-572A-4529-96BB-4364B6F6B0B8}" = dir=in | name=@{microsoft.ppiprojection_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{CCD88FF8-68C5-4F18-9C4F-8A161752EE98}" = protocol=17 | dir=in | app=c:\program files\ccleaner\ccupdate.exe | "{CDC386CB-DDDE-4BFD-9ABE-BC9A5F94BDEA}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{CE33A6DC-86D5-4790-B759-4D908F72BB68}" = dir=in | name=microsoft solitaire collection | "{CF3A1141-6466-485E-98A2-AF556110CFBA}" = dir=out | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{D38AD7D2-904B-4D0A-B576-A9CDE76E28CD}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe | "{D3D68803-79B1-42C5-9A4B-AE671D8FFD55}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} | "{D4803FA8-D42A-4056-B2BF-8271C71332DD}" = dir=out | name=@{microsoft.windowscamera_2019.821.30.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/lenssdk/resources/appstorename} | "{D4E5302C-18EB-4E10-9190-291FC01B466D}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | "{D8181E5E-3FF5-466A-936D-6A2F01B50863}" = dir=in | name=lenovo settings | "{DA6002A9-D08E-4A4A-B562-3CDD0C0E0162}" = dir=out | name=@{microsoft.messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{DAF64F55-782C-4227-8E1C-6C7DF91491FF}" = dir=out | name=@{microsoft.windows.cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{E0F99F77-F03B-49BE-97B8-E7488222C37A}" = dir=in | name=@{microsoft.xboxgamingoverlay_3.32.20003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} | "{E319D05C-EA91-42EF-823A-3FFC38A880CE}" = dir=out | name=autodesk sketchbook | "{E7F0F38F-DFBD-44C2-B8FF-6175467834F0}" = protocol=6 | dir=out | app=c:\users\kinga\appdata\roaming\utorrent\utorrent.exe | "{E8369780-47AE-4F5E-A216-F20BEEB89A3B}" = dir=in | name=@{microsoft.zunemusic_10.19072.14111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{EA7E62E7-5B58-411E-A76C-31A199C0BF14}" = protocol=6 | dir=in | app=c:\users\kinga\appdata\roaming\bittorrent\bittorrent.exe | "{ECC24BB7-8F67-450F-B430-93FF3112E63C}" = dir=out | name=print 3d | "{ED581EE1-A3BE-44CE-B524-7537B939B6F5}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{EE6DEB9F-56FC-4FE6-8E77-E2D151BD5061}" = dir=out | name=microsoft solitaire collection | "{EFA6C617-B9A4-480F-BA6A-D372468A45A5}" = dir=in | name=@{microsoft.yourphone_1.19082.1006.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | "{F1E3299A-94DF-42ED-940F-7E3B4B2078ED}" = dir=out | name=@{microsoft.people_10.1902.633.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | "{F3F9C11F-1E33-46B5-B200-3301039D49EB}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{F4B93236-2951-48B8-8F9B-29602E1C64BB}" = dir=out | name=@{microsoft.yourphone_1.19082.1006.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | "{F54000CA-1CCE-4CDE-841B-234D5E230481}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{F6980AB0-E5E1-4ABC-85D4-0126B3C0F733}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{F96AD7E3-FC91-49A3-8477-95598238ED16}" = dir=out | name=@{microsoft.lockapp_10.0.18362.329_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{FC206A60-9D0E-436A-B93F-1BE5E73DD297}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.31351.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{FC465E7E-B549-4796-88AC-A81EFAF7A4E9}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\apex\easyanticheat_launcher.exe | "{FD56F8EF-AB8B-418D-90AE-651F1B042AF6}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{FE4977DB-FD63-40B2-B3FC-CAD7B160D3AD}" = dir=out | name=twitter | "TCP Query User{53FF31C2-D1AE-4FB9-BEDE-73359083D8B3}C:\users\kinga\desktop\tcscda\scda-offline\system\splintercell4.exe" = protocol=6 | dir=in | app=c:\users\kinga\desktop\tcscda\scda-offline\system\splintercell4.exe | "TCP Query User{5EDBFC74-BBB0-4CA3-8B65-71BD2CAB3178}C:\gry\counter strike 1.6\cstrike.exe" = protocol=6 | dir=in | app=c:\gry\counter strike 1.6\cstrike.exe | "TCP Query User{A1F4DAC1-A784-47A7-B58B-EF9F54681CCA}C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe | "TCP Query User{AA35F1DF-5DFF-4D68-8EBD-D51BDC732811}C:\users\kinga\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\kinga\appdata\roaming\spotify\spotify.exe | "TCP Query User{CA30E402-C494-492C-9AB8-58D40BC1325C}C:\program files (x86)\r.g. mechanics\far cry 3\bin\farcry3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\r.g. mechanics\far cry 3\bin\farcry3.exe | "TCP Query User{E0259177-A2A9-4AB6-A954-7010708DB2B7}C:\program files (x86)\nfs mw 2012\nfs13.exe" = protocol=6 | dir=in | app=c:\program files (x86)\nfs mw 2012\nfs13.exe | "TCP Query User{E19EEC42-5EFC-44F5-B012-D6C2B360ADF5}C:\program files (x86)\origin games\apex\r5apex.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\apex\r5apex.exe | "TCP Query User{EC92D97A-C0F0-4012-8E33-87F8548B3214}C:\program files (x86)\mr dj\splinter cell conviction\src\system\conviction_game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mr dj\splinter cell conviction\src\system\conviction_game.exe | "TCP Query User{F985E214-41DC-4C5F-B7E8-423C68D5C1C6}C:\program files (x86)\gtx box team\wiedźmin 2 zabójcy królów\bin\witcher2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gtx box team\wiedźmin 2 zabójcy królów\bin\witcher2.exe | "UDP Query User{4C1B388E-EE4C-48E2-A682-A2415C184648}C:\program files (x86)\nfs mw 2012\nfs13.exe" = protocol=17 | dir=in | app=c:\program files (x86)\nfs mw 2012\nfs13.exe | "UDP Query User{58D5836A-A25F-462D-A72C-29CFA2E44365}C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe | "UDP Query User{6A30D7FD-A9F1-4325-A407-467FC91623BA}C:\program files (x86)\mr dj\splinter cell conviction\src\system\conviction_game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mr dj\splinter cell conviction\src\system\conviction_game.exe | "UDP Query User{A01A72EC-47C8-4C56-BEC6-800863E5E108}C:\users\kinga\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\kinga\appdata\roaming\spotify\spotify.exe | "UDP Query User{B13424D5-834F-4E69-A31F-EDC488445464}C:\gry\counter strike 1.6\cstrike.exe" = protocol=17 | dir=in | app=c:\gry\counter strike 1.6\cstrike.exe | "UDP Query User{B62901E3-DC8F-43D3-B556-A0382C8C5CF1}C:\program files (x86)\gtx box team\wiedźmin 2 zabójcy królów\bin\witcher2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gtx box team\wiedźmin 2 zabójcy królów\bin\witcher2.exe | "UDP Query User{C1F480BD-2054-402D-8175-99C5A7C9F09C}C:\program files (x86)\origin games\apex\r5apex.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\apex\r5apex.exe | "UDP Query User{C7C4B9FA-787F-4A59-9397-C64E7119273A}C:\users\kinga\desktop\tcscda\scda-offline\system\splintercell4.exe" = protocol=17 | dir=in | app=c:\users\kinga\desktop\tcscda\scda-offline\system\splintercell4.exe | "UDP Query User{E5E3CC20-66C5-4BF8-AC31-E26D04B0E416}C:\program files (x86)\r.g. mechanics\far cry 3\bin\farcry3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\r.g. mechanics\far cry 3\bin\farcry3.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{12CB6BC1-4E71-4890-AA0E-26CED6AD7EDD}" = Intel(R) Chipset Device Software "{176E2755-0A17-42C6-88E2-192AB2131278}" = Intel(R) Trusted Execution Engine "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "{52753916-613B-4455-8022-A146CC17B1F6}" = Lenovo Solution Center "{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}" = Bonjour "{57FDCE53-64B7-48F3-AD5B-302A46C3080B}" = Intel(R) Trusted Execution Engine "{628988B4-3FA5-4EA6-BAA3-DA640F6718BD}" = Qualcomm Atheros Bluetooth Installer (64) "{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}" = Lenovo QuickOptimizer "{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component "{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 "{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 "{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}" = Apple Mobile Device Support "{B0169E83-757B-EF66-E2F0-391944D785BC}" = Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) "{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}" = Apple Application Support (64-bit) "{BAAE2AA9-513A-4658-A44F-9D6D607A9BC7}" = Intel(R) Trusted Execution Engine Driver "{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 "{F20396E5-D84E-3505-A7A8-7358F0155F6C}" = Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24212 "{F2A8CEEC-9DE9-4F4A-AC06-CE2A2FC629EC}" = iTunes "{FAAD7243-0141-3987-AA2F-E56B20F80E41}" = Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24212 "CCleaner" = CCleaner "DAEMON Tools Lite" = DAEMON Tools Lite "ProPlusRetail - pl-pl" = Microsoft Office Professional Plus 2013 - pl-pl "WinRAR archiver" = WinRAR 5.70 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 "{19589375-5C58-4AFA-842F-8B34744CCEAD}" = Apple Software Update "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20CA507E-24AA-4741-87CF-CC1B250790B7}" = Qualcomm Atheros 11ac Wireless LAN Installer "{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8 "{323dad84-0974-4d90-a1c1-e006c7fdbb7d}" = Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 "{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 "{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee WebAdvisor "{37B55901-995A-3650-80B1-BBFD047E2911}" = Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24212 "{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}" = Microsoft Games for Windows - LIVE Redistributable "{4532E4C5-C84D-4040-A044-ECFCC5C6995B}" = REACHit "{462f63a8-6347-4894-a1b3-dbfe3a4c981d}" = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 "{4B230374-6475-4A73-BA6E-41015E9C5013}" = Intel® Security Assist "{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8303}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8304}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8305}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8306}" = Grand Theft Auto IV "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5ECB4963-1089-457F-AE22-D08CDCF9D974}" = League of Legends "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}" = Microsoft Games for Windows Marketplace "{7042D952-EE42-4C09-A23D-E7AE4D047007}" = Instrukcje użytkownika "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7F9A97E6-E666-11E5-B582-B88687E82322}" = Hextech Repair Tool "{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{844ECB74-9B63-3D5C-958C-30BD23F19EE4}" = Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24212 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component "{90150000-008C-0415-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 "{B239B43B-3E99-40B0-80BF-1B1BCA868D4E}_is1" = Podatnik.info PIT pro 2018 wersja 2.5.9.0 "{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = Lenovo PowerDVD12 "{BC94C56A-3649-420C-8756-2ADEBE399D33}" = Lenovo Photo Master "{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 "{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}" = Metric Collection SDK 35 "{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{D4C80B0C-CF67-43A7-90C3-466853543B54}" = Apple Application Support (32-bit) "{D7FBF176-382D-484E-863A-DFD1124A2A1C}" = Apex Legends "{ECD6D427-E105-4A89-A7EB-4A4D327BBED9}_is1" = GAMING MOUSE CYCLONE version 1.0 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 "{fb610cea-ba50-4d4b-a717-cf025419035c}" = Oprogramowanie mikroukładu Intel® "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "1436434037_is1" = Metro 2033 Redux "Avast Antivirus" = Avast Free Antivirus "Connect2_is1" = Connect2 "Counter Strike 1.6 CS 1.6" = Counter Strike 1.6 CS 1.6 "Google Chrome" = Google Chrome "InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8 "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "InstallShield_{7042D952-EE42-4C09-A23D-E7AE4D047007}" = User Manuals "InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = Lenovo PowerDVD12 "League of Legends 4.1.2" = League of Legends "Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281) "OpenAL" = OpenAL "Origin" = Origin "PunkBusterSvc" = PunkBuster Services "UltraISO_is1" = UltraISO Premium V9.65 "War in the North_is1" = 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-556459742-4047245046-1143622834-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "BitTorrent" = BitTorrent "Counter-Strike 1.6: New Era" = Counter-Strike 1.6: New Era "OneDriveSetup.exe" = Microsoft OneDrive "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 19.09.2019 15:51:00 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (11420,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 19.09.2019 16:51:09 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (8836,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 19.09.2019 22:52:57 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (4900,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 00:56:11 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (5056,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 10:37:50 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (11716,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 11:11:18 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (10192,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 11:45:52 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (4720,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 11:57:13 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (11320,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 12:17:01 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (5008,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error - 20.09.2019 12:27:06 | Computer Name = LAPTOP-22SPELCT | Source = ESENT | ID = 455 Description = svchost (3408,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. [ Parameters Events ] OTL encountered an error while reading this event log. It may be corrupt. [ State Events ] OTL encountered an error while reading this event log. It may be corrupt. Error - 11.09.2019 13:57:19 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7011 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi ClickToRunSvc. Error - 11.09.2019 14:05:08 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7022 Description = Usługa GDCAgent zawiesiła się podczas uruchamiania. Error - 13.09.2019 21:29:37 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error - 13.09.2019 21:29:37 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: %%1053 Error - 13.09.2019 21:38:29 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error - 13.09.2019 21:38:29 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: %%1053 Error - 20.09.2019 11:37:15 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error - 20.09.2019 11:37:15 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: %%1053 Error - 20.09.2019 11:44:57 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error - 20.09.2019 11:44:57 | Computer Name = LAPTOP-22SPELCT | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: %%1053 < End of report >