Witam, Mam problem z działaniem laptopa ASUS K50IJ. Podczas odtwarzania jakichkolwiek multimediów komputer zawiesza się (przestaje reagować na cokolwiek) i słychać charakterystyczne buczenie (ułamek sekundy ostatnio odtwarzanego dźwięku powtarzany w pętli). Zjawisko występuje nieregularnie - czasem co kilka minut, a czasem raz dziennie. Trwa zazwyczaj od kilku sekund do nawet kilku minut. Niezależnie od tego z jakiego źródła pochodzi materiał audio/wideo - różne przeglądarki, Flash Player, Microsoft Silverlight, czy Windows Media. Problem zaczął się (jak twierdzi właścicielka) jakiś rok temu. Laptop ma 4 lata. Zupełnie nie wiem co może być tego przyczyną. Podejrzewałem sterownik audio. Proces audiodg.exe przy występowaniu tego efektu zachowuje się dosyć dziwnie. Obserwowałem programem Process Explorer i podczas zawieszenia wzrasta mu bardzo wskaźnik I/O (R+O) z 4kB do ponad 200kB (screen poniżej). Znalazłem gdzieś radę by wyłączyć wszystkie "enhancements", wzbogacacze dźwięku itp, ale nie pomogło. Zaktualizowałem sterowniki grafiki, dźwięku VT1708S, BIOS najnowszy (wersja 218). Czy przyczyna może być po stronie Windowsa i jego obsługi audio? http://obrazki.elektroda.pl/7046694300_1420714718_thumb.jpg Laptop sam w sobie nie daje żadnych innych oznak - nie przegrzewa się, był czyszczony niedawno. Sprawdzałem pamięć różnymi memtestami i nic nie wykryły. Dane komputera: ASUS K50IJ Procesor: Pentium T4500 2,3GHz 64-bit Pamięć: DDR2 2GB 667 MHz Grafika: Intel GMA X4500M Mostek północny: Intel Cantiga GL40 Dźwięk: VIA VT1708S @ Intel 82801IB ICH9 - High Definition Audio Controller System operacyjny: Microsoft Windows 7 Home Premium 64-bit Załączam logi FRST i OTL. Może one w jakiś sposób pomogą. Proszę o wszystkie porady co jeszcze sprawdzić, zmienić, przestawić, bo bez działania audio/wideo laptop stracił praktycznie większość funkcjonalności. Szczerze mówiąc nie wiedziałem do jakiego działu dać ten temat, więc jeśli okaże się problemem hardware'owym proszę o przeniesienie.
OTL Extras logfile created on: 2015-01-07 12:33:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\era\Desktop\frst
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,97 Gb Total Physical Memory | 0,56 Gb Available Physical Memory | 28,55% Memory free
3,93 Gb Paging File | 1,57 Gb Available in Paging File | 40,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,52 Gb Total Space | 17,07 Gb Free Space | 22,91% Space Free | Partition Type: NTFS
Drive D: | 204,03 Gb Total Space | 146,41 Gb Free Space | 71,76% Space Free | Partition Type: NTFS
Computer Name: ERA-KOMPUTER | User Name: era | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\ & lt; extension & gt; ]
.html [@ = OperaStable] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [open] -- " %1 " %*
cmdfile [open] -- " %1 " %*
comfile [open] -- " %1 " %*
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- " C:\Program Files\Internet Explorer\IEXPLORE.EXE " %1 (Microsoft Corporation)
htmlfile [opennew] -- " C:\Program Files\Internet Explorer\IEXPLORE.EXE " %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
InternetShortcut [open] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\ieframe.dll " ,OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\mshtml.dll " ,PrintHTML " %1 " (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- " C:\Program Files (x86)\NapiProjekt\napisy.exe " " %1 " ()
Directory [napiprojekt0] -- " C:\Program Files (x86)\NapiProjekt\napisy.exe " " %1 " -pobierz_ang ()
Directory [Winamp.Enqueue] -- " C:\Program Files (x86)\Winamp\winamp.exe " /ADD " %1 " (Nullsoft, Inc.)
Directory [Winamp.Play] -- " C:\Program Files (x86)\Winamp\winamp.exe " " %1 " (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- " C:\Program Files\Internet Explorer\iexplore.exe " (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [open] -- " %1 " %*
cmdfile [open] -- " %1 " %*
comfile [open] -- " %1 " %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe " %1 " ,%* (Microsoft Corporation)
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- " C:\Program Files\Internet Explorer\IEXPLORE.EXE " %1 (Microsoft Corporation)
htmlfile [opennew] -- " C:\Program Files\Internet Explorer\IEXPLORE.EXE " %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- " C:\Program Files (x86)\NapiProjekt\napisy.exe " " %1 " ()
Directory [napiprojekt0] -- " C:\Program Files (x86)\NapiProjekt\napisy.exe " " %1 " -pobierz_ang ()
Directory [Winamp.Enqueue] -- " C:\Program Files (x86)\Winamp\winamp.exe " /ADD " %1 " (Nullsoft, Inc.)
Directory [Winamp.Play] -- " C:\Program Files (x86)\Winamp\winamp.exe " " %1 " (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- " C:\Program Files\Internet Explorer\iexplore.exe " %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
[color=#E56717]========== Security Center Settings ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
" cval " = 0
" AutoUpdateDisableNotify " = 1
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
" VistaSp1 " = 28 4D B2 76 41 04 CA 01 [binary data]
" AntiVirusOverride " = 0
" AntiSpywareOverride " = 0
" FirewallOverride " = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {021BB1D3-836B-405F-BA6C-B9B96B5476E0} " = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
" {086D4A6C-42B5-448F-B7E2-EC0FEA94D662} " = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {0E212DAA-9E2B-4060-8997-6F537A5A6A81} " = lport=445 | protocol=6 | dir=in | app=system |
" {1EADD1CE-F7F1-4E51-B53F-E36C22F5992A} " = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
" {247A04E7-0356-4A8B-8EC2-D8E7D5BA849C} " = rport=445 | protocol=6 | dir=out | app=system |
" {2A534562-35C3-49DB-96D7-BFB1BD8E3175} " = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {2D0B9A1D-DFE7-46B9-B324-83BBD2C15BE4} " = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {31AF53F5-FA63-42ED-86DE-8BED97499BB9} " = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
" {321969E2-77B0-4FC6-9723-FB3E799253AB} " = lport=5353 | protocol=17 | dir=in | name=java(tm) platform se binary |
" {3E4713AF-4662-4AA0-BDC7-4A9FA660695C} " = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
" {5690B241-BA27-4BE2-B56C-F9461FF7CEAE} " = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
" {59A0C1CB-A4D7-4DD0-B4AC-7A1D5609C996} " = lport=138 | protocol=17 | dir=in | app=system |
" {5BD738E4-AD47-4BDF-87A1-62A533002E51} " = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {5E7A09F7-CCCB-4E01-9A62-F77594799C85} " = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
" {64FD6B02-7053-4884-BF7B-082EF5721F49} " = rport=139 | protocol=6 | dir=out | app=system |
" {79474438-79E8-4780-9E20-16099C5C81DE} " = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
" {855FFD86-B0A8-4663-902C-8406A2E468CA} " = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
" {8FB90C44-0DFB-491F-A12C-61C1A74242CB} " = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
" {99072E14-E348-470A-8793-09D3C06DEB17} " = lport=137 | protocol=17 | dir=in | app=system |
" {9B2543A6-7F3D-4409-83AE-1829AA8D3CB1} " = rport=137 | protocol=17 | dir=out | app=system |
" {B55469FF-5532-4CF6-B441-D911F3824ECA} " = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
" {B711AB98-2E77-48D5-95A2-CA07EF478AD4} " = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
" {C8A2A854-0F94-492D-B2E7-43D80F291B86} " = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {CB420201-1DD0-412B-8686-E305B1034E70} " = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
" {CE4747C4-3999-4AC7-96A0-568F175BBECD} " = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
" {CF9F38F2-B5C2-4BA8-9C04-EABF00CF0051} " = lport=8182 | protocol=6 | dir=in | name=java(tm) platform se binary |
" {DF291B23-A8B4-4ED6-A3B8-F432E96D8C56} " = lport=139 | protocol=6 | dir=in | app=system |
" {E55EDC9A-92E5-4188-93E7-6CEBB80C3BB1} " = rport=138 | protocol=17 | dir=out | app=system |
" {F590CD38-295D-45E5-A8A6-1E76AB34B316} " = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
" {FD105F30-5E2B-4345-89A1-6D06A9C6D67D} " = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {0BF28DA6-6937-490B-B8F7-B4CEDDCDEAC8} " = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
" {29B1E3C7-36EB-4F20-8881-1C0E0660FA51} " = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
" {3743C189-EBBD-4B8B-92CB-6918CF228501} " = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
" {39714303-0340-44C8-A3FC-133724B95BE5} " = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
" {409DF257-1955-402C-9405-26E02738C50E} " = protocol=17 | dir=in | app=c:\users\era\appdata\roaming\utorrent\utorrent.exe |
" {59C9D2C7-4069-4F84-A23C-5F89FE8AF1E8} " = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
" {673CE783-4034-44EA-AE04-B045545DBBE8} " = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
" {730692D8-5182-48B5-9D0B-B603A9E7871E} " = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
" {82934466-4B07-43CF-97DA-9E3030CB790F} " = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
" {84F17B13-EB9C-4427-B239-F3DE0F0B4960} " = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
" {8DEEB12F-43A4-4174-A066-09B8B413EC93} " = protocol=6 | dir=in | app=c:\users\era\appdata\roaming\utorrent\utorrent.exe |
" {8E2EA35C-A7F9-4BD3-BFB0-92D9C0D1A7CD} " = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
" {930AFC87-8335-49C6-9450-798A741F0C19} " = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
" {BC7EE2B9-EEEF-4222-9E01-05A38BD4D193} " = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
" {BF117F14-61DC-4A60-8E44-3A9B4273A16E} " = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
" {CBFDB82B-2479-4564-B27A-4E09FFB3E4FE} " = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
" {E6560728-01B4-46C5-AC30-EA8C111F08EB} " = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
" {FAEDBE38-6868-4C16-B0BC-416B04E4F45F} " = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
" TCP Query User{3B194BC0-7F95-490B-B722-D26212B44627}C:\program files (x86)\java\jre7\bin\java.exe " = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
" TCP Query User{BBE60949-1EA9-490F-84AC-D0E68F4E29EC}C:\program files (x86)\winamp\winamp.exe " = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
" UDP Query User{DA4C1082-99B7-4254-807E-ABA852D10831}C:\program files (x86)\winamp\winamp.exe " = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
" UDP Query User{F202A721-6678-4EEE-9478-BBB4D256E558}C:\program files (x86)\java\jre7\bin\java.exe " = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {45F1F774-38B4-3CC3-BAAF-051E6D19E48E} " = Microsoft .NET Framework 4.5.1 (PLK)
" {7811654C-9701-4347-B9DD-7DDB6B47F56A} " = STATISTICA PL 10 (64-bit)
" {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} " = Microsoft .NET Framework 4.5.1
" {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} " = Microsoft Silverlight
" {90120000-002A-0000-1000-0000000FF1CE} " = Microsoft Office Office 64-bit Components 2007
" {90120000-002A-0415-1000-0000000FF1CE} " = Microsoft Office Shared 64-bit MUI (Polish) 2007
" {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033 " = Microsoft .NET Framework 4.5.1
" {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045 " = Microsoft .NET Framework 4.5.1 (Polski)
" {95120000-00B9-0409-1000-0000000FF1CE} " = Microsoft Application Error Reporting
" {CE52672C-A0E9-4450-8875-88A221D5CD50} " = Windows Live ID Sign-in Assistant
" {E9FA781F-3E80-4399-825A-AD3E11C28C77} " = MSVCRT110_amd64
" CCleaner " = CCleaner
" GIMP-2_is1 " = GIMP 2.8.10
" STATNOVAPDF_is1 " = STATNOVAPDF (novaPDF 7.4 printer)
" USB 2.0 1.3M UVC WebCam " = USB 2.0 1.3M UVC WebCam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} " = PDFCreator
" {03D562B5-C4E2-4846-A920-33178788BE00} " = Windows Live Communications Platform
" {0F929651-F516-4956-90F2-FFBD2CD5D30E} " = Photo Gallery
" {0FF9CC94-EF23-401E-BDBD-37403D1A2B38} " = Windows Live SOXE Definitions
" {1111706F-666A-4037-7777-210328764D10} " = JavaFX 2.1.0
" {207DA277-6A6D-4863-B535-129931D2BB21} " = Galeria fotografii
" {20D4A895-748C-4D88-871C-FDB1695B0169} " = Platform
" {26A24AE4-039D-4CA4-87B4-2F83217009FF} " = Java 7 Update 9
" {2F2363F9-102C-448B-8E3E-02FCFE78A28D} " = Movie Maker
" {45898170-E68C-4F02-AA35-C2186BF347A3} " = Movie Maker
" {46BC55A2-B4CE-46B5-8303-A2076B899505} " = Windows Live UX Platform Language Pack
" {4A03706F-666A-4037-7777-5F2748764D10} " = Java Auto Updater
" {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} " = Skype™ 6.11
" {57752979-A1C9-4C02-856B-FBB27AC4E02C} " = QuickTime
" {5A0EE0F0-E909-4F3B-B437-AAD9252427CB} " = Windows Live Installer
" {6B6923B9-8719-425B-916C-CD2908F31AAF} " = Windows Live SOXE
" {7C05592D-424B-46CB-B505-E0013E8E75C9} " = ATK Hotkey
" {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} " = MSVCRT
" {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} " = MSVCRT110
" {90120000-0015-0415-0000-0000000FF1CE} " = Microsoft Office Access MUI (Polish) 2007
" {90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0016-0415-0000-0000000FF1CE} " = Microsoft Office Excel MUI (Polish) 2007
" {90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0018-0415-0000-0000000FF1CE} " = Microsoft Office PowerPoint MUI (Polish) 2007
" {90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0019-0415-0000-0000000FF1CE} " = Microsoft Office Publisher MUI (Polish) 2007
" {90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001A-0415-0000-0000000FF1CE} " = Microsoft Office Outlook MUI (Polish) 2007
" {90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001B-0415-0000-0000000FF1CE} " = Microsoft Office Word MUI (Polish) 2007
" {90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001F-0407-0000-0000000FF1CE} " = Microsoft Office Proof (German) 2007
" {90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-001F-0409-0000-0000000FF1CE} " = Microsoft Office Proof (English) 2007
" {90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-001F-0415-0000-0000000FF1CE} " = Microsoft Office Proof (Polish) 2007
" {90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-002A-0415-1000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-002C-0415-0000-0000000FF1CE} " = Microsoft Office Proofing (Polish) 2007
" {90120000-0030-0000-0000-0000000FF1CE} " = Microsoft Office Enterprise 2007
" {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0044-0415-0000-0000000FF1CE} " = Microsoft Office InfoPath MUI (Polish) 2007
" {90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-006E-0415-0000-0000000FF1CE} " = Microsoft Office Shared MUI (Polish) 2007
" {90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-00A1-0415-0000-0000000FF1CE} " = Microsoft Office OneNote MUI (Polish) 2007
" {90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-00BA-0415-0000-0000000FF1CE} " = Microsoft Office Groove MUI (Polish) 2007
" {90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90140000-2005-0000-0000-0000000FF1CE} " = Microsoft Office File Validation Add-In
" {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} " = Google Update Helper
" {C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7} " = Windows Live Photo Common
" {E09C4DB7-630C-4F06-A631-8EA7239923AF} " = D3DX10
" {E3445598-4424-4EE2-B71C-C23325F7FB71} " = Windows Live PIMT Platform
" {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} " = Microsoft SQL Server 2005 Compact Edition [ENU]
" {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} " = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
" {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} " = Intel(R) Graphics Media Accelerator Driver
" {F0E58739-2B4C-498F-9B0D-FF0F2FD52B61} " = Windows Live UX Platform
" {F4BF5F6B-F695-4762-AEB2-D095A4C34D89} " = Alcor Micro USB Card Reader
" {F8A9085D-4C7A-41a9-8A77-C8998A96C421} " = Intel(R) Control Center
" {FA12037C-B6FA-4825-86BC-D58AA6A9CC24} " = Podstawowe programy Windows Live
" {FBA73805-0F67-428B-8E4F-FAE16A452685} " = Photo Common
" Adobe Flash Player ActiveX " = Adobe Flash Player 11 ActiveX
" Adobe Flash Player Plugin " = Adobe Flash Player 15 Plugin
" ALLPlayer_is1 " = ALLPlayer V5.X
" Dokumentacja sanitarna według zasad Dobrej Prakt~96166698_is1 " = Dokumentacja sanitarna według zasad Dobrej Praktyki Higieniczne
" ENTERPRISE " = Microsoft Office Enterprise 2007
" ESET Online Scanner " = ESET Online Scanner v3
" Foxit Reader_is1 " = Foxit Reader
" Google Chrome " = Google Chrome
" InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169} " = VIA Platform Device Manager
" InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89} " = Alcor Micro USB Card Reader
" KLiteCodecPack_is1 " = K-Lite Codec Pack 8.1.0 (Full)
" Mozilla Firefox 34.0.5 (x86 pl) " = Mozilla Firefox 34.0.5 (x86 pl)
" NapiProjekt_is1 " = NapiProjekt 2.0.0 (build 2151)
" Roczne rozliczenie podatku dochodowego - PIT Gofin 2013_is1 " = Program Pit 2013 - wersja 7.0.22.52
" Winamp " = Winamp
" WinLiveSuite " = Podstawowe programy Windows Live
" WinRAR archiver " = Archiwizator WinRAR
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" Google Chrome " = Google Chrome
" uTorrent " = µTorrent
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2015-01-04 09:13:07 | Computer Name = era-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
sygnatura czasowa: 0x5475dd5d Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
34.0.5.5443, sygnatura czasowa: 0x5475d664 Kod wyjątku: 0x80000003 Przesunięcie błędu:
0x00001425 Identyfikator procesu powodującego błąd: 0xf18 Godzina uruchomienia aplikacji
powodującej błąd: 0x01d0281ef4dd0350 Ścieżka aplikacji powodującej błąd: C:\Program
Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd:
C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: 6bd3f533-9413-11e4-9a03-20cf301b1584
Error - 2015-01-04 09:44:31 | Computer Name = era-Komputer | Source = SideBySide | ID = 16842832
Description = Nie można wygenerować kontekstu aktywacji dla „c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe”. Błąd w pliku manifestu lub w pliku zasad
„” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną
wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik
1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Składnik
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error - 2015-01-04 09:45:17 | Computer Name = era-Komputer | Source = SideBySide | ID = 16842832
Description = Nie można wygenerować kontekstu aktywacji dla „c:\Users\era\downloads\esetsmartinstaller_plk.exe”.
Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana
przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna.
Składniki
powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Składnik
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error - 2015-01-04 15:04:05 | Computer Name = era-Komputer | Source = Application Hang | ID = 1002
Description = Program firefox.exe w wersji 34.0.5.5443 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: 7b0 Godzina rozpoczęcia: 01d0282030b86f69 Godzina zakończenia:
56 Ścieżka aplikacji: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Identyfikator
raportu: 70e8fd66-9444-11e4-9a03-20cf301b1584
Error - 2015-01-04 15:04:05 | Computer Name = era-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
sygnatura czasowa: 0x5475dd5d Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
34.0.5.5443, sygnatura czasowa: 0x5475d664 Kod wyjątku: 0x80000003 Przesunięcie błędu:
0x00001425 Identyfikator procesu powodującego błąd: 0x1d0 Godzina uruchomienia aplikacji
powodującej błąd: 0x01d0284786b77cc4 Ścieżka aplikacji powodującej błąd: C:\Program
Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd:
C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: 736b6bee-9444-11e4-9a03-20cf301b1584
Error - 2015-01-04 15:04:07 | Computer Name = era-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
sygnatura czasowa: 0x5475dd5d Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
34.0.5.5443, sygnatura czasowa: 0x5475d664 Kod wyjątku: 0x80000003 Przesunięcie błędu:
0x00001425 Identyfikator procesu powodującego błąd: 0xd64 Godzina uruchomienia aplikacji
powodującej błąd: 0x01d028482bf763e2 Ścieżka aplikacji powodującej błąd: C:\Program
Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd:
C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: 74bf680c-9444-11e4-9a03-20cf301b1584
Error - 2015-01-06 15:55:14 | Computer Name = era-Komputer | Source = Application Hang | ID = 1002
Description = Program firefox.exe w wersji 34.0.5.5443 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: 274 Godzina rozpoczęcia: 01d029245f35e6f7 Godzina zakończenia:
477 Ścieżka aplikacji: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Identyfikator
raportu: e9d20ff5-95dd-11e4-9a03-20cf301b1584
Error - 2015-01-06 15:55:14 | Computer Name = era-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
sygnatura czasowa: 0x5475dd5d Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
34.0.5.5443, sygnatura czasowa: 0x5475d664 Kod wyjątku: 0x80000003 Przesunięcie błędu:
0x00001425 Identyfikator procesu powodującego błąd: 0x1254 Godzina uruchomienia aplikacji
powodującej błąd: 0x01d029df422971c5 Ścieżka aplikacji powodującej błąd: C:\Program
Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd:
C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: ed98c30c-95dd-11e4-9a03-20cf301b1584
Error - 2015-01-06 15:55:17 | Computer Name = era-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
sygnatura czasowa: 0x5475dd5d Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
34.0.5.5443, sygnatura czasowa: 0x5475d664 Kod wyjątku: 0x80000003 Przesunięcie błędu:
0x00001425 Identyfikator procesu powodującego błąd: 0x13bc Godzina uruchomienia aplikacji
powodującej błąd: 0x01d029d3c99cbb57 Ścieżka aplikacji powodującej błąd: C:\Program
Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd:
C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: efb3467e-95dd-11e4-9a03-20cf301b1584
Error - 2015-01-07 07:22:13 | Computer Name = era-Komputer | Source = SideBySide | ID = 16842832
Description = Nie można wygenerować kontekstu aktywacji dla „C:\Users\era\Downloads\esetsmartinstaller_plk.exe”.
Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana
przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna.
Składniki
powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Składnik
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
[ Media Center Events ]
Error - 2011-11-08 05:15:50 | Computer Name = era-Komputer | Source = MCUpdate | ID = 0
Description = 10:15:49 - Błąd podczas nawiązywania połączenia z Internetem. 10:15:49
- Nie można skontaktować się z serwerem..
Error - 2011-11-08 05:16:10 | Computer Name = era-Komputer | Source = MCUpdate | ID = 0
Description = 10:15:55 - Błąd podczas nawiązywania połączenia z Internetem. 10:15:55
- Nie można skontaktować się z serwerem..
Error - 2011-11-14 19:01:30 | Computer Name = era-Komputer | Source = MCUpdate | ID = 0
Description = 00:01:30 - Nie można pobrać pakietu Directory (Błąd: Połączenie podstawowe
zostało zakończone: Nie można ustanowić relacji zaufania dla bezpiecznego kanału
SSL/TLS.)
Error - 2012-01-21 18:12:27 | Computer Name = era-Komputer | Source = MCUpdate | ID = 0
Description = 23:12:26 - Nie można pobrać pakietu MCESpotlight (Błąd: Połączenie
podstawowe zostało zakończone: Wystąpił nieoczekiwany błąd przy odbiorze.)
[ OSession Events ]
Error - 2010-12-10 15:30:44 | Computer Name = era-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5254
seconds with 3360 seconds of active time. This session ended with a crash.
Error - 2014-05-05 13:45:08 | Computer Name = era-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session
lasted 933 seconds with 300 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 2015-01-07 07:43:01 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:44:32 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:45:02 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:45:02 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
Error - 2015-01-07 07:45:02 | Computer Name = era-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie
można uruchomić z powodu następującego błędu: %%1058
& lt; End of report & gt;
OTL logfile created on: 2015-01-07 12:33:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\era\Desktop\frst
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,97 Gb Total Physical Memory | 0,56 Gb Available Physical Memory | 28,55% Memory free
3,93 Gb Paging File | 1,57 Gb Available in Paging File | 40,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,52 Gb Total Space | 17,07 Gb Free Space | 22,91% Space Free | Partition Type: NTFS
Drive D: | 204,03 Gb Total Space | 146,41 Gb Free Space | 71,76% Space Free | Partition Type: NTFS
Computer Name: ERA-KOMPUTER | User Name: era | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2015-01-07 12:32:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\era\Desktop\frst\OTL.exe
PRC - [2014-12-14 10:31:10 | 000,337,520 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014-12-06 02:50:53 | 000,856,904 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2009-08-12 22:20:46 | 000,178,816 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
PRC - [2009-06-19 18:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2009-06-16 01:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008-12-23 01:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
PRC - [2008-08-14 05:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008-08-14 04:59:56 | 000,301,624 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2014-12-14 10:31:09 | 003,758,192 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014-12-06 02:50:50 | 009,009,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
MOD - [2014-12-06 02:50:46 | 001,077,064 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
MOD - [2014-12-06 02:50:45 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
MOD - [2014-12-06 02:50:44 | 001,677,128 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2014-06-19 01:24:12 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013-10-23 07:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-09-11 20:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-16 01:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - [2013-02-12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2012-12-13 16:41:10 | 000,028,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dfx11_1x64.sys -- (DFX11_1)
DRV:[b]64bit:[/b] - [2012-11-14 16:57:06 | 010,629,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-01-11 18:05:20 | 001,290,752 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:43 | 000,158,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039unic.sys -- (s1039unic)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:43 | 000,137,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039obex.sys -- (s1039obex)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:43 | 000,034,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039nd5.sys -- (s1039nd5)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:41 | 000,141,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mgmt.sys -- (s1039mgmt)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:40 | 000,161,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdm.sys -- (s1039mdm)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:39 | 000,019,568 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdfl.sys -- (s1039mdfl)
DRV:[b]64bit:[/b] - [2009-11-19 14:06:38 | 000,127,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039bus.sys -- (s1039bus)
DRV:[b]64bit:[/b] - [2009-10-15 10:23:19 | 000,117,760 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:[b]64bit:[/b] - [2009-10-05 02:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-08-23 06:08:07 | 000,056,320 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E)
DRV:[b]64bit:[/b] - [2009-08-21 07:48:17 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:[b]64bit:[/b] - [2009-08-06 22:24:13 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2009-07-20 10:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-05 11:15:55 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:[b]64bit:[/b] - [2009-05-13 02:07:19 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2008-05-24 01:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & form=ASUTDF & pc=MAAU & src=IE-SearchBox
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: " URL " = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: " URL " = http://www.searchqu.com/web?src=ieb & appid=102 & systemid=406 & sr=0 & q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: " URL " = http://www.google.com/search?sourceid=ie7 & q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: " URL " = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7
IE - HKLM\..\SearchScopes\{889BD0D8-0665-4289-9649-44BEA04D0CAD}: " URL " = http://www.bing.com/search?q={searchTerms} & form=ASUTDF & pc=MAAU & src=IE-SearchBox
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: " URL " = http://www.searchqu.com/web?src=ieb & appid=102 & systemid=406 & sr=0 & q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: " URL " = http://search.conduit.com/ResultsExt.aspx?q={searchTerms} & SearchSource=4 & ctid=CT3031817
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://startsear.ch/?aff=1 & src=sp & cf=f4d4eb14-79de-11e1-a53c-20cf301b1584 & q={searchTerms}
IE - HKCU\..\SearchScopes\{889BD0D8-0665-4289-9649-44BEA04D0CAD}: " URL " = http://www.bing.com/search?FORM=WLETDF & PC=WLEM & q={searchTerms} & src=IE-SearchBox
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: " URL " = http://www.searchqu.com/web?src=ieb & appid=102 & systemid=406 & sr=0 & q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: " URL " = http://search.conduit.com/ResultsExt.aspx?q={searchTerms} & SearchSource=4 & ctid=CT3031817
IE - HKCU\..\SearchScopes\{B41E3D3E-0791-4946-9A59-F4716BBE2A36}: " URL " = http://websearch.ask.com/custom/java/redirect?client=ie & tb=ORJ & o=100000026 & src=crm & q={searchTerms} & locale= & apn_ptnrs=U3 & apn_dtid=OSJ000
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyOverride " = www; & lt; local & gt;
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyServer " = wnoz2.up.wroc.pl:8080
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " AutoConfigURL " = wnoz2.up.wroc.pl
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..extensions.enabledAddons: firegestures%40xuldev.org:1.8.7
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:34.0.5
FF - user.js - File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\era\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\era\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 34.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-02-04 14:05:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 34.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-01-29 17:41:26 | 000,000,000 | ---D | M]
[2014-11-01 00:30:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\era\AppData\Roaming\mozilla\Extensions
[2014-12-04 17:06:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\era\AppData\Roaming\mozilla\Firefox\Profiles\fg16bcg4.default\extensions
[2014-11-05 11:00:29 | 000,394,918 | ---- | M] () (No name found) -- C:\Users\era\AppData\Roaming\mozilla\firefox\profiles\fg16bcg4.default\extensions\firegestures@xuldev.org.xpi
[2014-11-12 18:56:49 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\era\AppData\Roaming\mozilla\firefox\profiles\fg16bcg4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012-02-04 14:05:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2014-11-01 00:29:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014-12-14 10:31:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011-12-31 20:56:40 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[color=#E56717]========== Chrome ==========[/color]
CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\adlghgifgkapabijdmenlghpcjhaojnp\5.11_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.8_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.9_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.15_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlajhhigpcohfpjjmnbifacfbdoponci\2_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2014.1119.433.4_0\
CHR - Extension: No name found = C:\Users\era\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (no name) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - No CLSID value found.
O2 - BHO: (no name) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - !{30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - !{5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKCU..\Run: [GoogleChromeAutoLaunch_DD0E8D5AFD93E2863089CFEE88FBE941] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKCU..\Run: [GoogleDriveSync] " C:\Program Files (x86)\Google\Drive\googledrivesync.exe " /autostart File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.61 62.179.1.63
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C2F960BA-F67D-4142-8779-B5F4C0B99156}: DhcpNameServer = 62.179.1.61 62.179.1.63
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\SEARCH~1\datamngr.dll) - File not found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 0
O33 - MountPoints2\{2fb65d1b-6a71-11e3-bdfa-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{2fb65d1b-6a71-11e3-bdfa-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{2fb65d43-6a71-11e3-bdfa-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{2fb65d43-6a71-11e3-bdfa-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{3870fa22-cd75-11df-ac78-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{3870fa22-cd75-11df-ac78-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{3870fa33-cd75-11df-ac78-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{3870fa33-cd75-11df-ac78-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{39ea6499-ad53-11e0-9bd7-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{39ea6499-ad53-11e0-9bd7-20cf301b1584}\Shell\AutoRun\command - " " = H:\Startme.exe
O33 - MountPoints2\{4a53f30a-0171-11e2-b8a2-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{4a53f30a-0171-11e2-b8a2-20cf301b1584}\Shell\AutoRun\command - " " = F:\iLinker.exe
O33 - MountPoints2\{6722f9ee-0d35-11e0-8a26-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{6722f9ee-0d35-11e0-8a26-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7cb99fcf-13f2-11e0-ae64-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7cb99fcf-13f2-11e0-ae64-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b3e-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b3e-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b40-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b40-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b42-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b42-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b44-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b44-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b46-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b46-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b48-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b48-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{7dd96b4b-3ffc-11e0-a894-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{7dd96b4b-3ffc-11e0-a894-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{9f30a29d-6bb5-11e3-9f90-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{9f30a29d-6bb5-11e3-9f90-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{a42959f6-ce49-11df-9674-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{a42959f6-ce49-11df-9674-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\{ca480e97-a1e7-11e3-bc83-20cf301b1584}\Shell - " " = AutoRun
O33 - MountPoints2\{ca480e97-a1e7-11e3-bc83-20cf301b1584}\Shell\AutoRun\command - " " = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - " " = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - " " = F:\iLinker.exe
O33 - MountPoints2\G\Shell - " " = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - " " = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- " %1 " %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- " %1 " %*
O35 - HKLM\..comfile [open] -- " %1 " %*
O35 - HKLM\..exefile [open] -- " %1 " %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- " %1 " %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- " %1 " %*
O37 - HKLM\...com [@ = comfile] -- " %1 " %*
O37 - HKLM\...exe [@ = exefile] -- " %1 " %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2015-01-07 12:23:26 | 000,000,000 | ---D | C] -- C:\Users\era\Desktop\frst
[2015-01-07 12:20:15 | 000,000,000 | ---D | C] -- C:\FRST
[2015-01-04 10:44:51 | 000,000,000 | ---D | C] -- C:\Users\era\AppData\Local\DFX
[2015-01-03 18:59:38 | 000,000,000 | ---D | C] -- C:\Users\era\Desktop\Sylwester 2015
[2015-01-03 12:27:04 | 000,000,000 | ---D | C] -- C:\Users\era\AppData\Roaming\vlc
[2015-01-02 22:51:26 | 001,290,752 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\drivers\viahduaa.sys
[2015-01-02 22:51:26 | 001,012,224 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\VIAPropPageExt.dll
[2015-01-02 22:51:26 | 000,532,480 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\VIASysFx.dll
[2014-12-29 12:24:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2014-12-28 21:23:33 | 000,000,000 | ---D | C] -- C:\Users\era\Desktop\cv piotr
[6 C:\Windows\SysWow64\*.tmp files - & gt; C:\Windows\SysWow64\*.tmp - & gt; ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2015-01-07 12:34:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1829307258-580294574-2700444711-1000UA.job
[2015-01-07 12:03:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015-01-07 09:55:51 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015-01-07 09:39:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015-01-06 20:34:01 | 000,000,998 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1829307258-580294574-2700444711-1000Core.job
[2015-01-06 16:56:50 | 001,670,590 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015-01-06 16:56:50 | 000,740,688 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2015-01-06 16:56:50 | 000,654,480 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015-01-06 16:56:50 | 000,156,230 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2015-01-06 16:56:50 | 000,122,352 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015-01-03 12:16:54 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015-01-03 12:16:54 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015-01-02 22:55:07 | 1583,153,152 | -HS- | M] () -- C:\hiberfil.sys
[2015-01-02 22:51:48 | 000,001,164 | ---- | M] () -- C:\Users\Public\Desktop\HD VDeck.lnk
[2015-01-02 22:26:15 | 000,014,776 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2014-12-29 10:37:55 | 000,020,481 | ---- | M] () -- C:\Users\era\Desktop\bilet_13732684.pdf
[2014-12-15 13:21:30 | 000,341,527 | ---- | M] () -- C:\Users\era\Desktop\wypowiedzenie-umowy-akademik.pdf
[2014-12-14 21:55:35 | 001,128,188 | ---- | M] () -- C:\Users\era\Desktop\20141214_213929.jpg
[2014-12-14 21:55:30 | 001,134,683 | ---- | M] () -- C:\Users\era\Desktop\20141214_213940.jpg
[2014-12-14 21:46:22 | 000,077,533 | ---- | M] () -- C:\Users\era\Desktop\Deklaracja OW aktualna.pdf
[2014-12-11 10:17:52 | 000,070,319 | ---- | M] () -- C:\Users\era\Desktop\Natalia Krępa - list motywacyjny.pdf
[2014-12-10 20:07:41 | 000,059,092 | ---- | M] () -- C:\Users\era\Desktop\letter ang.pdf
[2014-12-08 19:23:20 | 001,163,562 | ---- | M] () -- C:\Users\era\Desktop\almanach tom 5 produkcja piekarska.pdf
[2014-12-08 15:34:17 | 000,413,556 | ---- | M] () -- C:\Users\era\Desktop\upload_temp_AJvxkY.pdf
[6 C:\Windows\SysWow64\*.tmp files - & gt; C:\Windows\SysWow64\*.tmp - & gt; ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2015-01-02 22:51:48 | 000,001,164 | ---- | C] () -- C:\Users\Public\Desktop\HD VDeck.lnk
[2014-12-29 10:38:15 | 000,020,481 | ---- | C] () -- C:\Users\era\Desktop\bilet_13732684.pdf
[2014-12-15 13:21:30 | 000,341,527 | ---- | C] () -- C:\Users\era\Desktop\wypowiedzenie-umowy-akademik.pdf
[2014-12-14 21:56:49 | 001,134,683 | ---- | C] () -- C:\Users\era\Desktop\20141214_213940.jpg
[2014-12-14 21:56:06 | 001,128,188 | ---- | C] () -- C:\Users\era\Desktop\20141214_213929.jpg
[2014-12-14 21:50:04 | 000,077,533 | ---- | C] () -- C:\Users\era\Desktop\Deklaracja OW aktualna.pdf
[2014-12-10 20:05:11 | 000,059,092 | ---- | C] () -- C:\Users\era\Desktop\letter ang.pdf
[2014-12-08 19:24:15 | 001,163,562 | ---- | C] () -- C:\Users\era\Desktop\almanach tom 5 produkcja piekarska.pdf
[2014-12-08 19:21:28 | 000,413,556 | ---- | C] () -- C:\Users\era\Desktop\upload_temp_AJvxkY.pdf
[2014-04-17 05:31:14 | 000,000,896 | ---- | C] () -- C:\Users\era\Downloads.lnk
[2014-02-23 18:20:50 | 000,001,749 | ---- | C] () -- C:\Users\era\AppData\Local\recently-used.xbel
[2013-10-02 19:14:31 | 000,356,754 | ---- | C] () -- C:\Users\era\AppData\Local\metacrawler-speeddial.crx
[2010-10-01 18:56:04 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-07-15 21:07:12 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[color=#E56717]========== ZeroAccess Check ==========[/color]
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
" " = C:\Windows\SysNative\shell32.dll -- [2013-07-26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2014-12-01 14:01:10 | 000,124,319 | ---- | M] ()(C:\Users\era\Desktop\CV-Natalia Kre?pa ang.pdf) -- C:\Users\era\Desktop\CV-Natalia Krępa ang.pdf
[2014-12-01 14:01:08 | 000,124,319 | ---- | C] ()(C:\Users\era\Desktop\CV-Natalia Kre?pa ang.pdf) -- C:\Users\era\Desktop\CV-Natalia Krępa ang.pdf
& lt; End of report & gt;