to więc tak: użyłam AdwCleaner zrobiłam skan mbam i usunęłam infekcję i teraz tu przesyłam logi OTL
OTL Extras logfile created on: 2013-08-16 02:14:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\lenovo\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,87 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 56,82% Memory free
4,68 Gb Paging File | 2,61 Gb Available in Paging File | 55,81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 884,18 Gb Total Space | 779,44 Gb Free Space | 88,15% Space Free | Partition Type: NTFS
Drive D: | 25,00 Gb Total Space | 4,89 Gb Free Space | 19,56% Space Free | Partition Type: NTFS
Computer Name: KASIEK | User Name: lenovo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\ & lt; extension & gt; ]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [open] -- " %1 " %*
cmdfile [open] -- " %1 " %*
comfile [open] -- " %1 " %*
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- " %1 " %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
htmlfile [opennew] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
htmlfile [print] -- " %systemroot%\system32\rundll32.exe " " %systemroot%\system32\mshtml.dll " ,PrintHTML " %1 "
http [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
https [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
InternetShortcut [open] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\ieframe.dll " ,OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\mshtml.dll " ,PrintHTML " %1 " (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- " C:\Users\lenovo\AppData\Roaming\File Scout\filescout.exe " /open " %1 "
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- " C:\Program Files\Internet Explorer\iexplore.exe " (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [open] -- " %1 " %*
cmdfile [open] -- " %1 " %*
comfile [open] -- " %1 " %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe " %1 " ,%* (Microsoft Corporation)
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- " %1 " %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
htmlfile [opennew] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
htmlfile [print] -- " %systemroot%\system32\rundll32.exe " " %systemroot%\system32\mshtml.dll " ,PrintHTML " %1 "
http [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
https [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- " C:\Users\lenovo\AppData\Roaming\File Scout\filescout.exe " /open " %1 "
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
[color=#E56717]========== Security Center Settings ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
" cval " = 1
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
" VistaSp1 " = CE 37 E6 AF FF 6A CD 01 [binary data]
" AntiVirusOverride " = 0
" AntiSpywareOverride " = 0
" FirewallOverride " = 0
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {0055CB53-09E9-46EC-ADBF-160D2EFE61D9} " = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {0DE92C6B-2D82-4D47-999A-0045419BD23D} " = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
" {1518979C-719D-4BE5-987D-E639CF075601} " = rport=445 | protocol=6 | dir=out | app=system |
" {191DEB1E-1E27-4B5F-B95D-915BAA1252CA} " = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {2C3426E8-195D-4A9C-BFAC-A4C553B86269} " = lport=10243 | protocol=6 | dir=in | app=system |
" {3A98A44A-4577-4017-A969-A535A2F52824} " = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe |
" {4D3A18AB-D054-4023-B53A-A808270019E3} " = lport=2869 | protocol=6 | dir=in | app=system |
" {505AEA26-35F1-494B-9088-08D775E9DC59} " = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {7F3970C1-D181-4717-8727-B6C449AEBEC1} " = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {8B4062EF-A660-40AB-AC53-E460078292C8} " = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {A06C1224-18E1-4EE6-857B-C4541DEA0E41} " = rport=137 | protocol=17 | dir=out | app=system |
" {A28AD658-6348-4D06-8A2F-3D5E41BD44E9} " = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
" {A305B718-07E0-4F02-88C7-6862A8CEA692} " = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {A3842EB6-5C46-49F4-B300-396C27114C0F} " = lport=137 | protocol=17 | dir=in | app=system |
" {A6FCB2A7-8C11-4128-9568-4F1AFE3FF45A} " = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {C34F39EB-B16C-4ACD-978D-D33C139D535B} " = rport=139 | protocol=6 | dir=out | app=system |
" {DCCDCA4E-89FA-4C68-BDDE-A53941AAF02D} " = lport=138 | protocol=17 | dir=in | app=system |
" {DFD8BCFF-722F-4EC4-8C5D-010723C57F41} " = lport=139 | protocol=6 | dir=in | app=system |
" {E3765306-7D18-48E2-BE44-599494FE95CF} " = rport=138 | protocol=17 | dir=out | app=system |
" {EBA9880B-A4B5-4498-A284-4AACD81D208C} " = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {F7E70D63-0C3A-4EB6-81B2-7D32FC5738FD} " = lport=445 | protocol=6 | dir=in | app=system |
" {F81E4BA3-2128-4726-94A5-13BE64225A41} " = rport=10243 | protocol=6 | dir=out | app=system |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {00DC64D0-6E41-4CEE-98F3-E1907229A27B} " = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
" {03587356-B4C8-47C8-9AA7-46271D4CFE9B} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
" {083FADE0-316C-4448-BC06-8B34F9FC5510} " = dir=out | name=evernote |
" {0892FDFC-43B8-446C-A3F3-36A20FE1F78F} " = dir=out | name=@{microsoft.bingweather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
" {0E8AF09D-C67B-42AE-BD98-13AC01E6759C} " = dir=out | name=piano8 |
" {0EC4373B-7F4B-473D-8C2D-06FED3794A0E} " = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
" {0F2E65B0-124E-42D1-A0DD-1486BFEC9013} " = dir=out | name=zinio |
" {11247722-82CF-48F5-93DF-9EE88DE4CA9B} " = dir=out | name=skype |
" {1397D1CB-FB13-4742-8A92-DFECD2FEF7A3} " = dir=out | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
" {1B72974C-B508-4DFA-88D3-889294C33EE8} " = dir=out | name=bubble blast 2 |
" {24CE24E5-A8E6-478E-B378-A99CB13078A0} " = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {27BE4675-7D6C-4CD6-A187-82C9EE50E411} " = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
" {28AB5F94-FAE9-4F76-B548-6AC6EDC697F1} " = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd10.exe |
" {2CF2F783-F45D-4900-A11C-62DCEF782FC4} " = dir=in | app=c:\users\lenovo\appdata\local\microsoft\skydrive\skydrive.exe |
" {3C29DF72-8FB8-4F36-92FB-C3C6BA35C0B4} " = dir=out | name=windows_ie_ac_001 |
" {411D768B-34FA-41FB-8C91-8DA8A598B1D6} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
" {452B247E-27E3-48CC-8600-3E6BCFA93EA3} " = protocol=17 | dir=in | app=c:\windows\system32\lxdrcoms.exe |
" {465D592D-F524-4CB1-8C2F-7617CD60A256} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {46FA3C4F-7115-474A-B3A3-5256A51FA4D7} " = dir=out | name=lenovo support |
" {477C33BD-AD9C-4EA9-916F-7E84DAA7F75B} " = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
" {47F392D2-783F-447C-86F5-E63A8F5263C9} " = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
" {4AE73F17-0B8C-4488-B500-7AD1FB8C49EA} " = dir=out | name=@{microsoft.bingtravel_1.2.0.145_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
" {4BA41C0D-3346-466D-A3CD-15D6CAF8A8F4} " = protocol=6 | dir=in | app=c:\program files (x86)\lexmark 4900 series\frun.exe |
" {4DCA81D0-EAF8-4B48-9300-07E3B0D2642E} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
" {4DE2E340-8F02-4026-98A5-F8B9319FDFEA} " = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd cinema\powerdvdcinema10.exe |
" {4E63A180-1C52-4279-96D8-963C370212A5} " = dir=out | name=@{microsoft.bingmaps_1.2.0.136_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
" {4E70B87A-6AEF-49D0-94D9-0804C84F7694} " = protocol=6 | dir=in | app=c:\windows\syswow64\lxdrcoms.exe |
" {52409FD9-E877-4F3F-AA84-20DF35EF0A04} " = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
" {538C92B7-9BE8-481B-B8DB-90FEC7988350} " = protocol=17 | dir=in | app=c:\users\lenovo\appdata\roaming\utorrent\utorrent.exe |
" {542C4CF5-CE6E-405E-AA38-56AA8F28D462} " = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
" {5AED904C-B4F6-4D7C-AF04-CA809C59C52A} " = dir=out | name=mcafee security advisor for lenovo |
" {5C934371-9B7F-47DD-8D39-EF302D03F4AA} " = dir=in | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
" {613C4F2F-CC80-4FBE-AE1F-A86A2D8FFD16} " = protocol=17 | dir=in | app=c:\program files (x86)\lexmark 4900 series\frun.exe |
" {61D89443-83A8-4EEC-A550-007ABFC9FD4B} " = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
" {64667046-F15A-4318-971A-185B000D62D8} " = dir=out | name=@{microsoft.bingnews_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
" {64B85A2C-5943-4972-A255-54748FC63426} " = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
" {6525BDF3-5005-4084-86F3-EFA49CA9284F} " = dir=out | name=ipla |
" {6B2A178C-583C-4BBF-8698-38DF523DEE85} " = dir=out | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
" {6D071B05-2088-4BA8-A88F-30A4288507D2} " = dir=in | name=evernote |
" {717B6599-4887-4F1B-89E4-4FF3887720D4} " = dir=out | name=@{microsoft.bingsports_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
" {7405CF83-EB74-4BA3-AE35-A06BD00C2924} " = protocol=6 | dir=in | app=c:\users\lenovo\appdata\roaming\utorrent\utorrent.exe |
" {75EABAD0-3BB1-40DC-9495-C125D3E86DA7} " = dir=out | name=@{microsoft.zunemusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
" {7750AD1D-B979-4B35-81CD-0E0637F6F92B} " = dir=out | name=powerdvd for lenovo idea |
" {7813EDD4-CD80-4F3D-8D63-E14710F5AB78} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {7D1A8C3F-9ED5-4BAC-AF07-98960933F5CD} " = protocol=6 | dir=out | app=system |
" {7D9DD274-3F8D-4AB3-8DE7-04191DB27136} " = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {808F1451-4108-46FD-ADBB-F17324B5F0BD} " = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
" {878C926A-0FB1-45E8-B09B-53D92B6AB404} " = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
" {88505145-54AA-4C03-A9E8-F14F9FDED449} " = protocol=17 | dir=in | app=c:\program files (x86)\abbyy finereader 6.0 sprint\scan\scanman6.exe |
" {8AE2C0FD-D222-4369-AC93-03C86B53C6DD} " = protocol=17 | dir=in | app=c:\windows\syswow64\lxdrcoms.exe |
" {8CA7AD61-49D7-48B1-BEAE-165E3A2E0B6E} " = dir=in | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
" {8E34E6CB-68DE-45A5-B97D-AF658C6C0C31} " = dir=out | name=accuweather for windows 8 |
" {8EFFCBC7-9269-4B88-8DC5-68AFEF42775C} " = dir=out | name=@{microsoft.xboxlivegames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
" {92C26542-098C-4205-9BE4-060BE4D1D581} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
" {9ADF3E4B-378D-4597-97B7-56EA969C28EF} " = protocol=6 | dir=in | app=c:\windows\system32\lxdrcoms.exe |
" {9C60272C-06FD-4AB2-9319-7BBEDC4C6A6A} " = protocol=6 | dir=in | app=c:\program files (x86)\abbyy finereader 6.0 sprint\scan\scanman6.exe |
" {9C8B5A29-D642-40BC-95AB-190DF243612A} " = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
" {A0517509-9450-4DF5-87F0-15F2AEDDF7CE} " = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
" {A07F7B09-8566-41F1-B251-D0C003004855} " = dir=out | name=@{microsoft.microsoftskydrive_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
" {A8D025CC-1EFB-4FA7-9086-A761CE2324C2} " = dir=out | name=lenovo companion |
" {A8FC8188-BB0D-4AFA-84B2-8E07D352AB76} " = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
" {AB58B3A1-D76B-4035-91A4-64BFC6144722} " = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
" {ABB5F4CB-4EF2-4946-9B56-D2B7D9478710} " = dir=out | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
" {B79BCB91-FAA0-407F-A1A1-7AEB0EE05BED} " = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe |
" {BB1AA9C8-125F-4991-AD2E-6D82659F2BFD} " = protocol=6 | dir=in | app=c:\program files (x86)\lexmark 4900 series\lxdramon.exe |
" {BC1AB753-47AE-4EFE-A366-B47116A7961F} " = dir=in | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
" {C329426B-BBA9-481E-B2BA-D01449E8AB98} " = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
" {D81DFD72-6088-4E90-8987-21394F5D1A2F} " = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {DB295E8D-C4C2-4F72-B82A-2984DE619E74} " = dir=in | name=skype |
" {DFC2F7CD-60E2-4D4E-927F-DBB4B74E1993} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {E051FBF6-310B-4DAF-B7C4-5AF84FDB9D58} " = protocol=17 | dir=in | app=c:\program files (x86)\lexmark 4900 series\lxdramon.exe |
" {E7985E1D-C36F-4787-80A8-6350D07E9266} " = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
" {ED4652CD-B12E-4370-901D-8A0082B3E8A6} " = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
" {EF6A310E-8622-406F-B81A-A07452B9EF41} " = dir=out | name=@{microsoft.bingfinance_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
" {F7096791-A416-4659-B5F6-E9EF0FC435BF} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
" {F7768C3A-CCAC-450B-9F7A-EE0B569C00CB} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {FA15DD7E-BA8C-40E7-98DB-326C7FDDE4DB} " = dir=in | app=c:\users\lenovo\appdata\local\facebook\video\skype\facebookvideocalling.exe |
" {FD3517B2-06E2-48AB-A81A-199DC09B9EA6} " = dir=out | name=@{microsoft.zunevideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {1D8E6291-B0D5-35EC-8441-6616F567A0F7} " = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
" {1E939186-B443-4262-A278-3C82949EA7AC} " = Lenovo Solution Center
" {46F4D124-20E5-4D12-BE52-EC177A7A4B42} " = Lenovo OneKey Recovery
" {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} " = Microsoft Silverlight
" {90150000-008F-0000-1000-0000000FF1CE} " = Office 15 Click-to-Run Licensing Component
" {A84A4FB1-D703-48DB-89E0-68B6499D2801} " = Qualcomm Atheros Bluetooth Suite (64)
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel " = Panel sterowania NVIDIA 307.45
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver " = NVIDIA Sterownik graficzny 307.45
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus " = NVIDIA Optimus 1.10.8
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update " = Aktualizacje NVIDIA 1.10.8
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer " = NVIDIA Install Application
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update " = NVIDIA Update Components
" {EF79C448-6946-4D71-8134-03407888C054} " = Shared C Run-time for x64
" {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B} " = Intel® Trusted Connect Service Client
" 71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42 " = Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1)
" 8A223E56FB1ED4F697B54E5BF96F1EB63B512684 " = Pakiet sterowników systemu Windows - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733)
" CCleaner " = CCleaner
" CNXT_AUDIO_HDA " = Conexant HD Audio
" Elantech " = Lenovo pointing device
" GIMP-2_is1 " = GIMP 2.8.4
" Lexmark 4900 Series " = Lexmark 4900 Series
" O365HomePremRetail - pl-pl " = Microsoft Office 365 Premium dla Użytkowników Domowych - pl-pl
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {01FB4998-33C4-4431-85ED-079E3EEFE75D} " = Lenovo YouCam
" {0A5B39D2-7ED6-4779-BCC9-37F381139DB3} " = Adobe AIR
" {0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6} " = Amazon Browser App
" {28006915-2739-4EBE-B5E8-49B25D32EB33} " = Qualcomm Atheros Client Installation Program
" {3108C217-BE83-42E4-AE9E-A56A2A92E549} " = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
" {3AC8457C-0385-4BEA-A959-E095F05D6D67} " = Battlefield: Bad Company™ 2
" {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} " = Intel(R) Rapid Storage Technology
" {3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} " = FIFA 11
" {40BF1E83-20EB-11D8-97C5-0009C5020658} " = Power2Go
" {65153EA5-8B6E-43B6-857B-C6E4FC25798A} " = Intel(R) Management Engine Components
" {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} " = Microsoft Visual C++ 2005 Redistributable
" {7204BDEE-1A48-4D95-A964-44A9250B439E} " = Facebook Messenger 2.1.4814.0
" {837b34e3-7c30-493c-8f6a-2b0f04e2912c} " = Microsoft Visual C++ 2005 Redistributable
" {8B922CF8-8A6C-41CE-A858-F1755D7F5D29} " = NVIDIA PhysX
" {90150000-008C-0000-0000-0000000FF1CE} " = Office 15 Click-to-Run Extensibility Component
" {90150000-008C-0415-0000-0000000FF1CE} " = Office 15 Click-to-Run Localization Component
" {96AE7E41-E34E-47D0-AC07-1091A8127911} " = Realtek USB 2.0 Card Reader
" {9A25302D-30C0-39D9-BD6F-21E6EC160475} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
" {9BE518E6-ECC6-35A9-88E4-87755C07200F} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
" {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} " = Google Update Helper
" {AC76BA86-7AD7-1033-7B44-AB0000000001} " = Adobe Reader XI (11.0.03)
" {ACF60000-22B9-4CE9-98D6-2CCF359BAC07} " = ABBYY FineReader 6.0 Sprint
" {ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332} " = Lenovo EasyCamera
" {B92C5909-1D37-4C51-8397-A28BB28E5DC3} " = Facebook Video Calling 1.2.0.287
" {B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613} " = Dolby Advanced Audio v2
" {C05D8CDB-417D-4335-A38C-A0659EDFD6B8} " = The Sims™ 3
" {D0956C11-0F60-43FE-99AD-524E833471BB} " = Energy Management
" {D0A05794-48C2-4424-A15A-9F20FCFDD374} " = Call of Duty(R) 2
" {D2C5E510-BE6D-42CC-9F61-E4F939078474} " = Lexmark
" {DEC235ED-58A4-4517-A278-C41E8DAEAB3B} " = Lenovo PowerDVD10
" {E3E71D07-CD27-46CB-8448-16D4FB29AA13} " = Microsoft WSE 3.0 Runtime
" {F07C2CF8-4C53-4EC3-8162-A6221E36EB88} " = Podręcznik użytkownika
" {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} " = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
" {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} " = Intel(R) Processor Graphics
" {FCB3772C-B7D0-4933-B1A9-3707EBACC573} " = Intel(R) SDK for OpenCL - CPU Only Runtime Package
" Adobe AIR " = Adobe AIR
" AVI ReComp " = AVI ReComp 1.5.3
" Avisynth " = AviSynth 2.5
" DAEMON Tools Lite " = DAEMON Tools Lite
" EADM " = EA Download Manager
" ffdshow_is1 " = ffdshow v1.2.4422 [2012-04-09]
" Google Chrome " = Google Chrome
" HaaliMkx " = Haali Media Splitter
" InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} " = Lenovo YouCam
" InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42} " = Lenovo OneKey Recovery
" InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB} " = Energy Management
" InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374} " = Call of Duty(R) 2
" InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} " = Lenovo PowerDVD10
" InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88} " = UserGuide
" Intel AppUp(SM) center 33057 " = Intel AppUp(SM) center
" Mafia_is1 " = Mafia
" Malwarebytes' Anti-Malware_is1 " = Malwarebytes Anti-Malware wersja 1.75.0.1300
" MSC " = McAfee Internet Security
" Opera 15.0.1147.148 " = Opera Stable 15.0.1147.148
" Revo Uninstaller " = Revo Uninstaller 1.95
" SugarSync " = SugarSync Manager
" VobSub " = VobSub 2.23
" Xvid_is1 " = Xvid 1.3.0
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" Bandizip " = Bandizip
" SkyDriveSetup.exe " = Microsoft SkyDrive
" uTorrent " = µTorrent
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2013-08-08 09:29:50 | Computer Name = Kasiek | Source = Microsoft-Windows-Immersive-Shell | ID = 5973
Description = Aktywacja aplikacji MagmaMobile.BubbleBlast2_gw0p11e4f85d8!App nie
powiodła się. Błąd: -2144927142. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa.
Error - 2013-08-08 09:30:03 | Computer Name = Kasiek | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = Aplikacja MagmaMobile.BubbleBlast2_gw0p11e4f85d8!App nie została uruchomiona
w wyznaczonym czasie.
Error - 2013-08-08 09:30:39 | Computer Name = Kasiek | Source = Application Hang | ID = 1002
Description = Program BubbleBlast.Win8.Client.exe w wersji 1.0.0.0 przestał współpracować
z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania. Identyfikator procesu: 1130 Godzina rozpoczęcia: 01ce943b572ab0f0
Godzina
zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files\WindowsApps\MagmaMobile.BubbleBlast2_1.0.0.5_x64__gw0p11e4f85d8\BubbleBlast.Win8.Client.exe
Identyfikator
raportu: a194f7b5-002e-11e3-be81-208984421d63 Pełna nazwa pakietu powodującego błąd:
MagmaMobile.BubbleBlast2_1.0.0.5_x64__gw0p11e4f85d8 Identyfikator aplikacji względem
pakietu powodującego błąd: App
Error - 2013-08-08 09:30:39 | Computer Name = Kasiek | Source = Microsoft-Windows-Immersive-Shell | ID = 5973
Description = Aktywacja aplikacji MagmaMobile.BubbleBlast2_gw0p11e4f85d8!App nie
powiodła się. Błąd: -2144927142. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa.
Error - 2013-08-08 09:30:41 | Computer Name = Kasiek | Source = Application Hang | ID = 1002
Description = Program BubbleBlast.Win8.Client.exe w wersji 1.0.0.0 przestał współpracować
z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania. Identyfikator procesu: 1130 Godzina rozpoczęcia: 01ce943b572ab0f0
Godzina
zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files\WindowsApps\MagmaMobile.BubbleBlast2_1.0.0.5_x64__gw0p11e4f85d8\BubbleBlast.Win8.Client.exe
Identyfikator
raportu: b75552d6-002e-11e3-be81-208984421d63 Pełna nazwa pakietu powodującego błąd:
MagmaMobile.BubbleBlast2_1.0.0.5_x64__gw0p11e4f85d8 Identyfikator aplikacji względem
pakietu powodującego błąd: App
Error - 2013-08-08 09:42:25 | Computer Name = Kasiek | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: start.exe_MAFIA, wersja: 1.0.0.0,
sygnatura czasowa: 0x3f004aa7 Nazwa modułu powodującego błąd: LS3DF.dll, wersja:
0.0.0.0, sygnatura czasowa: 0x3ef851b2 Kod wyjątku: 0xc0000005 Przesunięcie błędu:
0x0005ac2e Identyfikator procesu powodującego błąd: 0xda4 Godzina uruchomienia aplikacji
powodującej błąd: 0x01ce943b732b3cae Ścieżka aplikacji powodującej błąd: D:\Gry\Mafia\Mafia\start.exe
Ścieżka
modułu powodującego błąd: D:\Gry\Mafia\Mafia\LS3DF.dll Identyfikator raportu: 5bc21c83-0030-11e3-be81-208984421d63
Pełna
nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego
błąd:
Error - 2013-08-08 16:00:43 | Computer Name = Kasiek | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: start.exe_MAFIA, wersja: 1.0.0.0,
sygnatura czasowa: 0x3f004aa7 Nazwa modułu powodującego błąd: LS3DF.dll, wersja:
0.0.0.0, sygnatura czasowa: 0x3ef851b2 Kod wyjątku: 0xc0000005 Przesunięcie błędu:
0x0005ac2e Identyfikator procesu powodującego błąd: 0x1988 Godzina uruchomienia aplikacji
powodującej błąd: 0x01ce946f2cf39f04 Ścieżka aplikacji powodującej błąd: D:\Gry\Mafia\Mafia\start.exe
Ścieżka
modułu powodującego błąd: D:\Gry\Mafia\Mafia\LS3DF.dll Identyfikator raportu: 3470a628-0065-11e3-be81-208984421d63
Pełna
nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego
błąd:
Error - 2013-08-09 18:20:41 | Computer Name = Kasiek | Source = Application Hang | ID = 1002
Description = Program SpyHunter4.exe w wersji 4.14.5.4268 przestał współpracować
z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania. Identyfikator procesu: 20bc Godzina rozpoczęcia: 01ce94fd67dcbee5
Godzina
zakończenia: 16 Ścieżka aplikacji: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
Identyfikator
raportu: dd866802-0141-11e3-be81-208984421d63 Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji względem pakietu powodującego błąd:
Error - 2013-08-09 19:20:58 | Computer Name = Kasiek | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 2013-08-11 11:05:29 | Computer Name = Kasiek | Source = Customer Experience Improvement Program | ID = 1008
Description =
[ System Events ]
Error - 2013-07-21 04:25:27 | Computer Name = Kasiek | Source = DCOM | ID = 10000
Description =
Error - 2013-07-26 06:13:48 | Computer Name = Kasiek | Source = DCOM | ID = 10010
Description =
Error - 2013-07-26 07:22:53 | Computer Name = Kasiek | Source = DCOM | ID = 10010
Description =
Error - 2013-07-26 07:25:27 | Computer Name = Kasiek | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:02:42 na ?2013-?07-?26 było
nieoczekiwane.
Error - 2013-07-26 07:25:38 | Computer Name = Kasiek | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą lxdrCATSCustConnectService.
Error - 2013-07-26 07:25:38 | Computer Name = Kasiek | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi lxdrCATSCustConnectService z powodu następującego
błędu: %%1053
Error - 2013-07-27 17:51:14 | Computer Name = Kasiek | Source = Service Control Manager | ID = 7034
Description = Usługa McAfee McShield niespodziewanie zakończyła pracę. Wystąpiło
to razy: 1.
Error - 2013-08-01 05:27:35 | Computer Name = Kasiek | Source = DCOM | ID = 10010
Description =
Error - 2013-08-02 08:49:19 | Computer Name = Kasiek | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą Instalator Windows.
Error - 2013-08-02 08:49:19 | Computer Name = Kasiek | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Instalator Windows z powodu następującego
błędu: %%1053
& lt; End of report & gt;