Witam. Od jakiegoś czasu mam takie coś i nie wiem, jak się z tym uporać. Przeskanowane na wszystkie sposoby, od antywirusa, przez malware/adware/inneware.
OTL Extras logfile created on: 2016-01-08 20:19:14 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = E:\
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18124)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
7,92 Gb Total Physical Memory | 4,56 Gb Available Physical Memory | 57,59% Memory free
15,84 Gb Paging File | 11,98 Gb Available in Paging File | 75,63% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 78,03 Gb Total Space | 10,53 Gb Free Space | 13,49% Space Free | Partition Type: NTFS
Drive D: | 2,13 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive E: | 931,51 Gb Total Space | 649,94 Gb Free Space | 69,77% Space Free | Partition Type: NTFS
Computer Name: GROCHU | User Name: PSYCHO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
[color=#E56717]========== Extra Registry (All) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html[@ = OperaStable] -- e:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
.inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.bat [@ = batfile] -- " %1 " %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- " %1 " %*
.com [@ = comfile] -- " %1 " %*
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.exe [@ = exefile] -- " %1 " %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html [@ = OperaStable] -- e:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
.inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- " %1 " %*
.reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- " %1 " /S
.txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-3080954066-1883005936-171845699-1001\SOFTWARE\Classes\ & lt; extension & gt; ]
.html [@ = OperaStable] -- e:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
[color=#E56717]========== Shell Spawning ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- " %1 " %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- " %SystemRoot%\hh.exe " %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- " %1 " %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- " %1 " %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe " %1 " ,%* (Microsoft Corporation)
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe " %1 " %* (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- " %systemroot%\system32\rundll32.exe " " %systemroot%\system32\mshtml.dll " ,PrintHTML " %1 "
http [open] -- " e:\Program Files (x86)\Opera\launcher.exe " -noautoupdate -- " %1 " (Opera Software)
https [open] -- " e:\Program Files (x86)\Opera\launcher.exe " -noautoupdate -- " %1 " (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\ieframe.dll " ,OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\mshtml.dll " ,PrintHTML " %1 " (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe " %1 " %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe " %1 " %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe " %1 " (Microsoft Corporation)
regfile [open] -- regedit.exe " %1 " (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p " %1 " (Microsoft Corporation)
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt " %1 " " %2 " " %3 " " %4 " (Microsoft Corporation)
vbefile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
vbefile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
vbefile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
vbsfile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
vbsfile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
vbsfile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
wsffile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
wsffile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
wsffile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
wshfile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- " E:\Program Files (x86)\VLC\vlc.exe " --started-from-file --playlist-enqueue " %1 " (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~3\Office12\ONENOTE.EXE " %L "
Directory [PlayWithVLC] -- " E:\Program Files (x86)\VLC\vlc.exe " --started-from-file --no-playlist-enqueue " %1 " (VideoLAN)
Directory [Winamp.Bookmark] -- " E:\Program Files (x86)\Winamp\winamp.exe " /BOOKMARK " %1 " (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- " E:\Program Files (x86)\Winamp\winamp.exe " /ADD " %1 " (Nullsoft, Inc.)
Directory [Winamp.Play] -- " E:\Program Files (x86)\Winamp\winamp.exe " " %1 " (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- " %1 " %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- " %SystemRoot%\hh.exe " %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- " %1 " %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- " %1 " %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe " %1 " ,%* (Microsoft Corporation)
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe " %1 " %* (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- " %systemroot%\system32\rundll32.exe " " %systemroot%\system32\mshtml.dll " ,PrintHTML " %1 "
http [open] -- " e:\Program Files (x86)\Opera\launcher.exe " -noautoupdate -- " %1 " (Opera Software)
https [open] -- " e:\Program Files (x86)\Opera\launcher.exe " -noautoupdate -- " %1 " (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\ieframe.dll " ,OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- " C:\Windows\System32\rundll32.exe " " C:\Windows\System32\mshtml.dll " ,PrintHTML " %1 " (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe " %1 " %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe " %1 " %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- " %1 " %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe " %1 " (Microsoft Corporation)
regfile [open] -- regedit.exe " %1 " (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p " %1 " (Microsoft Corporation)
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt " %1 " " %2 " " %3 " " %4 " (Microsoft Corporation)
vbefile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
vbefile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
vbefile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
vbsfile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
vbsfile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
vbsfile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
wsffile [edit] -- " %SystemRoot%\System32\Notepad.exe " %1 (Microsoft Corporation)
wsffile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
wsffile [print] -- " %SystemRoot%\System32\Notepad.exe " /p %1 (Microsoft Corporation)
wshfile [open] -- " %SystemRoot%\System32\WScript.exe " " %1 " %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- " E:\Program Files (x86)\VLC\vlc.exe " --started-from-file --playlist-enqueue " %1 " (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~3\Office12\ONENOTE.EXE " %L "
Directory [PlayWithVLC] -- " E:\Program Files (x86)\VLC\vlc.exe " --started-from-file --no-playlist-enqueue " %1 " (VideoLAN)
Directory [Winamp.Bookmark] -- " E:\Program Files (x86)\Winamp\winamp.exe " /BOOKMARK " %1 " (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- " E:\Program Files (x86)\Winamp\winamp.exe " /ADD " %1 " (Nullsoft, Inc.)
Directory [Winamp.Play] -- " E:\Program Files (x86)\Winamp\winamp.exe " " %1 " (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
[color=#E56717]========== Security Center Settings ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
" cval " = 1
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
" VistaSp1 " = 28 4D B2 76 41 04 CA 01 [binary data]
" AntiVirusOverride " = 0
" AntiSpywareOverride " = 0
" FirewallOverride " = 0
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
" DefaultOutboundAction " = 0
" DefaultInboundAction " = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
" EnableFirewall " = 1
" DisableNotifications " = 0
" DefaultOutboundAction " = 0
" DefaultInboundAction " = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {0511AD47-E14D-491F-8013-AFEE0238640D} " = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
" {05E7114F-FA32-4D68-86EF-31A097CEE588} " = lport=445 | protocol=6 | dir=in | app=system |
" {19E5CE29-8957-4E19-AF93-289615A91DC1} " = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {2EBC6D21-2EBA-414C-935F-DEA8B3636F22} " = rport=138 | protocol=17 | dir=out | app=system |
" {35DF281A-61D6-4E72-83E8-0800DC27F64F} " = rport=139 | protocol=6 | dir=out | app=system |
" {36421936-2C4D-443D-AC24-50AC4CAA8A04} " = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {37BD9710-97E3-4440-8604-318471EFBEE1} " = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe |
" {3A07B4DA-ED85-47E1-B23F-E7D69621EAEA} " = lport=35043 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
" {3BE82A09-30E5-4160-BA6A-BA6DB2BE875D} " = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamuseragent.exe |
" {41B91C5A-41C9-4C93-8DA6-1CD388DCEADA} " = lport=139 | protocol=6 | dir=in | app=system |
" {4ECF3A1E-4CCC-4FBC-A81D-E847722F318F} " = rport=137 | protocol=17 | dir=out | app=system |
" {58CD3CEB-0214-41C7-B843-51C33199D48F} " = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {59FF0F2B-C860-4C0B-B8CA-DE54C5F3703B} " = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
" {5F5809C7-5780-40BD-9FA3-CEF99F5DB68E} " = rport=10243 | protocol=6 | dir=out | app=system |
" {65510B1D-9525-4F78-9D9A-071A582617D0} " = lport=137 | protocol=17 | dir=in | app=system |
" {6826C657-032A-45F2-A04C-FEA7C501C6FC} " = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
" {6E8234CD-CAD2-4AF8-A01A-0A8F55C01515} " = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
" {73BFAF06-27AD-4A05-8BAE-53C968D15819} " = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {84BFB6EE-C93B-4146-ABF2-209A0AAF5C35} " = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
" {86EF7C91-CEEB-4C41-A42F-3232BA1B5C60} " = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
" {9676EF83-A669-4976-A6C4-0E074DF68999} " = lport=10243 | protocol=6 | dir=in | app=system |
" {A27A3C95-BCDF-4D80-ABCD-39A5E644C06D} " = lport=2869 | protocol=6 | dir=in | app=system |
" {A6A93E2B-34E4-4D47-97EF-20B5639125F2} " = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
" {A71CBA80-49A7-43DB-9D91-6024FB14ED81} " = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {AB6C7229-2610-4460-A6ED-2F16065AF43C} " = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
" {ABA11DD8-A9A3-4DE9-8C19-7B9658259F43} " = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe |
" {B2FF7F4B-564D-4791-8528-830CB9627559} " = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {CB22184F-1FE2-4A90-9315-711740CD6CD9} " = rport=445 | protocol=6 | dir=out | app=system |
" {D45597F5-9818-4E63-B501-F9059DFD05D3} " = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
" {E7280B4C-19A4-4844-8BF1-3B437C5789DD} " = lport=138 | protocol=17 | dir=in | app=system |
" {EBE15323-2530-4944-AD45-A31CBC225918} " = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
" {F08BBD12-0575-49DB-962C-F9D7BED48734} " = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {00EF5E50-EA4D-45CD-A174-D7EF3732177E} " = protocol=6 | dir=in | app=c:\program files (x86)\ralink\common\raui.exe |
" {076EE7A4-54BB-4074-9D67-8508DE4F6D18} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
" {0E5DBD3E-3AC5-409E-91A6-D02740FFA2FC} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
" {1BBDE2DF-4481-47EF-9DDC-FA7D9C59B4E1} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\payday the heist\payday_win32_release.exe |
" {1EABDA73-0C2B-44CE-8944-124A2EBD097B} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe |
" {1F916334-6996-43CB-8C89-27EDC00F11E0} " = dir=out | name=blocksgp |
" {2706D9AB-FE69-44D7-A88F-5976553FF8F4} " = protocol=17 | dir=in | app=c:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe |
" {2ED248C9-F259-40DC-A06A-E6DF2368DEE3} " = protocol=6 | dir=out | app=system |
" {2FAA5ABA-9BFF-48A0-AD2D-31849C21F406} " = dir=out | name=blockdxb |
" {35BA4A76-5B4F-460C-BD68-227731789580} " = protocol=17 | dir=in | app=e:\program files (x86)\origin games\battlefield 3\bf3.exe |
" {37D00E51-E964-4C68-A377-B42F91902635} " = protocol=6 | dir=in | app=e:\program files (x86)\maxthon\bin\mxup.exe |
" {3CE1E7F7-7E6B-4A53-BD4F-62E54F9FEC5F} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
" {41079C51-5F1C-43D5-8914-A0646044F4D2} " = protocol=17 | dir=in | app=e:\program files (x86)\winamp\winamp.exe |
" {4375967A-2384-43A2-8306-E1A209E8FAEF} " = protocol=6 | dir=in | app=e:\program files (x86)\gtx box team\dying light\dyinglightgame.exe |
" {495BDC67-BBA5-40CA-8D9F-F03AE49A7D78} " = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
" {4E58AB4E-3090-458C-B231-AD5CCDFD2F9E} " = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
" {52946E24-0A79-4CA5-99E5-DF78EF7C3568} " = dir=out | name=blockeuw |
" {53D61F40-A4EB-43BD-8E44-5DD4EF3A544B} " = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
" {57F7FD0F-AAD7-40DE-8C84-74CEB4AF5E78} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
" {5857FFC4-DC10-464F-9AE6-758013D47B5E} " = protocol=17 | dir=in | app=c:\program files (x86)\ralink\common\raui.exe |
" {58926228-6906-440E-8B35-D66D4B984972} " = dir=out | name=blockbrz |
" {5950E562-E759-492B-8ADD-00F0076A2270} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\bin\steamwebhelper.exe |
" {5A2235E2-3BCF-4CCC-BCF5-D5121565CDD2} " = dir=out | name=blockeue |
" {652D76FC-9B73-4905-BDA1-BCD4DB9E5199} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
" {65D8DD3B-E34A-43AB-AE52-556A80720C18} " = protocol=17 | dir=in | app=e:\program files (x86)\gtx box team\dying light\dyinglightgame.exe |
" {6784FB5D-C8EE-48D1-8269-64C8A175E43D} " = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {6A2D1035-0A62-4DDB-9458-EC01A9B35584} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
" {73998E82-7A19-422A-9A1A-E0342F3DCF78} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\sniper elite v2\launcher\sniperv2launcher.exe |
" {75C06D9C-921C-4498-995E-4F8F464C2065} " = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
" {774F51BF-7C7A-48DD-AD9B-6034CBEA4472} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steam.exe |
" {776B144F-709C-4290-AF15-A8FF62E16C40} " = protocol=17 | dir=in | app=e:\program files (x86)\maxthon\bin\mxup.exe |
" {78683FE1-BAE2-4693-8473-0BA517D765BC} " = dir=out | name=blockcpt |
" {791F0DDD-104D-42FE-A546-DB4DB3F5C2AA} " = protocol=6 | dir=in | app=c:\program files (x86)\ralink\common\raui.exe |
" {7BAC8DFA-B1B2-48EA-A963-45382CDC20A0} " = protocol=6 | dir=in | app=c:\users\psycho\appdata\roaming\bittorrent\bittorrent.exe |
" {7F00220C-3431-440B-A6EB-D7DDF8594992} " = protocol=6 | dir=in | app=e:\program files (x86)\maxthon\bin\maxthon.exe |
" {80B7DE79-F34C-4813-882E-8203DA5211DF} " = protocol=17 | dir=in | app=e:\program files (x86)\maxthon\bin\maxthon.exe |
" {82E8CB94-85BE-45A6-9D07-5AE3FB74A1B9} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {85F74994-167A-4F1D-AF5F-289CFC9CCA86} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steam.exe |
" {90647D56-749B-4709-B786-D1C4FF5A2852} " = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
" {920FBFE5-11F1-4114-9863-DBBB33F00123} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
" {9527A056-F5D3-4C44-B0B4-56A215C5B7C4} " = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
" {955C2C87-C0DB-43E7-96C4-F02B4EAEF110} " = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
" {9A6A3914-85C4-4BF0-BEF1-4768B13D0CE5} " = dir=out | name=blockusw |
" {9CCBF367-8125-48DC-ACFD-8CEB412696F8} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {9D997220-EF86-4C74-826A-3FDCED76A8BF} " = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {9DB315D8-D447-423E-957F-B0F0A8AAA918} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
" {9EA532F4-CC51-482A-A94B-F0E5AD796AE5} " = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
" {A5204C89-FD20-4F62-8F83-49FFE0CCD852} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {A7714F65-C791-4EFC-959A-BFEC00669E75} " = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
" {AB09CF5B-1A2D-40B8-92A5-FAC45E814D7F} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\sniper elite v2\launcher\sniperv2launcher.exe |
" {AC1C1F2A-15AD-4629-B5A5-A53915681982} " = protocol=6 | dir=in | app=e:\program files (x86)\winamp\winamp.exe |
" {ADB5E011-4554-4F18-888F-9121F324A264} " = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
" {AEC7B75A-CEBC-457A-8B55-879B389AEB2C} " = protocol=6 | dir=in | app=e:\program files (x86)\origin games\battlefield 3\bf3.exe |
" {B139A2D2-786C-41F3-9E6F-B20E304D3E59} " = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
" {B2C08C3A-E5BC-463F-9E71-111E52FBECF2} " = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
" {B55AA6FA-199D-4D61-8DBD-27DC656563DE} " = dir=out | name=blockind |
" {B6FD45A4-0ADE-4B8D-9322-B3F0C5147B9F} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\launchgtaiv.exe |
" {BAC031AC-AB3F-4AA6-A96D-D90380BDDAD0} " = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
" {BD65DD46-28C6-4DC8-9679-BC85E054735A} " = dir=out | name=blockaus |
" {BEC5FC34-7542-4DB0-B03E-EED1E5C5B6C4} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
" {BF4CDF1A-109E-4BEE-85AF-5C7FB0A2D1CA} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe |
" {BFB7CD2A-F978-4D59-916D-7B539C363B5E} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\quake live\quakelive_steam.exe |
" {C8470162-57B0-4C9C-91B8-739A68CB6B04} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\launchgtaiv.exe |
" {CFA0B0E0-9677-4368-8B6A-5EF1569FA8FB} " = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
" {D0C0AD76-8B49-488E-93C6-55F48DA7D506} " = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
" {D2F55D1C-505C-4B8A-813C-92A758839A3E} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\quake live\quakelive_steam.exe |
" {D929AC4C-9D97-49DF-A4A7-507445EDD3EE} " = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
" {DFF4A8C1-5BDB-41E6-9090-CD92098D750B} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe |
" {E1DB8BD3-BD89-44DD-B021-E2D2BF77F7BC} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\bin\steamwebhelper.exe |
" {E329B05B-9F48-430A-A7D1-D6ED5BA328C5} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\payday the heist\payday_win32_release.exe |
" {E3C9CE33-2718-41F5-9796-4615311B507A} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
" {E9B0A2CF-446B-4566-B8AE-EC95122F76E6} " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
" {EA6456A9-CF92-4F38-823D-356D5F20E802} " = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
" {EB95B2A3-46FB-44CA-A15A-6EF9FA975200} " = protocol=17 | dir=in | app=c:\program files (x86)\ralink\common\raui.exe |
" {ECF61349-AFBA-4442-843A-0DF9185BD9E9} " = protocol=6 | dir=in | app=c:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe |
" {F1D3AC42-E513-495D-B1BD-A63322A1B59A} " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe |
" {F443107E-6776-4732-B913-6AC95C1449CB} " = protocol=17 | dir=in | app=c:\users\psycho\appdata\roaming\bittorrent\bittorrent.exe |
" {F7C4D812-8AA6-45ED-9BFA-3932FE3AA68B} " = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
" {FABDFD5C-2E7C-4F2B-8761-F8D2113E7F8D} " = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
" {FC433F23-7D69-4E36-A48B-74BFB82D76DE} " = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
" {FF6F8769-52AB-4DB6-A414-33BDADE2E414} " = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
" TCP Query User{52F92213-3BE8-4BD0-84E2-E51678CBC8CE}E:\program files (x86)\gtx box team\dying light\dyinglightgame.exe " = protocol=6 | dir=in | app=e:\program files (x86)\gtx box team\dying light\dyinglightgame.exe |
" TCP Query User{6DDED3A2-001D-4CA9-9755-EDC0493D1F9C}G:\gtav\grand theft auto v\gta5.exe " = protocol=6 | dir=in | app=g:\gtav\grand theft auto v\gta5.exe |
" TCP Query User{9FCAF5A8-D343-44BB-A612-53ABB2BEB5ED}C:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe " = protocol=6 | dir=in | app=c:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe |
" TCP Query User{A725E54D-E435-4BCA-B6FB-C953051753FA}E:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe " = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe |
" TCP Query User{C08B9732-C4C1-46E4-BE96-B98B0A98739E}E:\gta 5\gtav\grand theft auto v\gta5.exe " = protocol=6 | dir=in | app=e:\gta 5\gtav\grand theft auto v\gta5.exe |
" UDP Query User{4E9E060F-ECDE-4AD1-93F4-470AF86B9BAE}E:\gta 5\gtav\grand theft auto v\gta5.exe " = protocol=17 | dir=in | app=e:\gta 5\gtav\grand theft auto v\gta5.exe |
" UDP Query User{76635CCB-284B-468E-8CF8-025EE84D8B56}E:\program files (x86)\gtx box team\dying light\dyinglightgame.exe " = protocol=17 | dir=in | app=e:\program files (x86)\gtx box team\dying light\dyinglightgame.exe |
" UDP Query User{C48198C9-6CBD-485A-80F6-8B67A455DDD3}G:\gtav\grand theft auto v\gta5.exe " = protocol=17 | dir=in | app=g:\gtav\grand theft auto v\gta5.exe |
" UDP Query User{D5A0439C-47C8-42B7-9102-7D501E11DDDF}E:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe " = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe |
" UDP Query User{D7A80084-2673-4E95-A649-8375A7553271}C:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe " = protocol=17 | dir=in | app=c:\users\psycho\appdata\roaming\dropbox\bin\dropbox.exe |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {1D8E6291-B0D5-35EC-8441-6616F567A0F7} " = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
" {23170F69-40C1-2702-0920-000001000000} " = 7-Zip 9.20 (x64 edition)
" {409CB30E-E457-4008-9B1A-ED1B9EA21140} " = Intel(R) Rapid Storage Technology
" {44B72151-611E-429D-9765-9BA093D7E48A} " = Intel® Trusted Connect Service Client
" {54F2237F-018C-483B-8884-9FC0D88840C3} " = VC_CRT_x64
" {5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} " = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
" {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} " = Microsoft Silverlight
" {8E34682C-8118-31F1-BC4C-98CD9675E1C2} " = Microsoft .NET Framework 4 Extended
" {90120000-002A-0000-1000-0000000FF1CE} " = Microsoft Office Office 64-bit Components 2007
" {90120000-002A-0415-1000-0000000FF1CE} " = Microsoft Office Shared 64-bit MUI (Polish) 2007
" {929FBD26-9020-399B-9A7A-751D61F0B942} " = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
" {9B48B0AC-C813-4174-9042-476A887592C7} " = Windows Live ID Sign-in Assistant
" {A749D8E6-B613-3BE3-8F5F-045C84EBA29B} " = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
" {AB071C8B-873C-459F-ACA9-9EBE03C3E89B} " = MSVC90_x64
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision " = NVIDIA Sterownik 3D Vision 361.43
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel " = Panel sterowania NVIDIA 361.43
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver " = NVIDIA Sterownik graficzny 361.43
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience " = NVIDIA GeForce Experience 2.8.1.21
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB " = NVIDIA Sterownik kontrolera 3D Vision 352.65
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX " = NVIDIA Oprogramowanie systemu PhysX 9.15.0428
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update " = Aktualizacje NVIDIA 2.8.1.21
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer " = NVIDIA LED Visualizer 1.0
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv " = SHIELD Streaming
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService " = NVIDIA GeForce Experience Service
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver " = NVIDIA Sterownik dźwięku HD 1.3.34.4
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer " = NVIDIA Install Application
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service " = NVIDIA Network Service
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay " = NVIDIA ShadowPlay 2.8.1.21
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController " = SHIELD Wireless Controller Driver
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core " = NVIDIA Update Core
" {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver " = NVIDIA Virtual Audio 1.2.31
" {B4ED896A-2F5F-4FF4-B403-9DF832E1F21F} " = Intel(R) Network Connections 18.2.63.0
" {D000D1C0-6E80-4FC4-BE4E-A88872C0616F} " = Share64
" {D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6} " = Microsoft Security Client
" {DF41FA5F-9BC2-4267-98FB-067BB22C7333} " = Intel(R) Smart Connect Technology 4.1 x64
" {E83FDB2A-C81C-403D-8FD3-A816A89AF80C} " = Intel(R) Rapid Storage Technology
" {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} " = Microsoft .NET Framework 4 Client Profile
" ASRock App Charger_is1 " = ASRock App Charger v1.0.5
" ASRock XFast RAM_is1 " = ASRock XFast RAM v2.0.28
" Microsoft .NET Framework 4 Client Profile " = Microsoft .NET Framework 4 Client Profile
" Microsoft .NET Framework 4 Extended " = Microsoft .NET Framework 4 Extended
" Microsoft Security Client " = Microsoft Security Essentials
" PROSetDX " = Intel(R) Network Connections 18.2.63.0
" SteelSeries Engine 3 " = SteelSeries Engine 3.3.1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" _{1A1BD41E-9854-4957-8959-F9559A8862A7} " = Corel VideoStudio Ultimate X5
" {00203668-8170-44A0-BE44-B632FA4D780F} " = Adobe AIR
" {13A4EE12-23EA-3371-91EE-EFB36DDFFF3E} " = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
" {1A1BD41E-9854-4957-8959-F9559A8862A7} " = ICA
" {240C3DDD-C5E9-4029-9DF7-95650D040CF2} " = Intel(R) USB 3.0 eXtensible Host Controller Driver
" {28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D} " = Ralink RT2870 Wireless LAN Card
" {2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77} " = Microsoft Games for Windows - LIVE
" {2F8BA3FD-1FA9-4279-B696-712ABB12F09F} " = SmartSound Quicktracks 5
" {42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D} " = Microsoft Games for Windows - LIVE Redistributable
" {46F044A5-CE8B-4196-984E-5BD6525E361D} " = Obsługa programów Apple
" {5454083B-1308-4485-BF17-1110000D8301} " = Grand Theft Auto IV
" {608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3} " = Intel(R) Update Manager
" {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} " = Google Update Helper
" {65153EA5-8B6E-43B6-857B-C6E4FC25798A} " = Intel(R) Management Engine Components
" {66C70B5F-730F-4C5D-9FC5-8E56D0FE7D53} " = IPM_VS_Pro
" {6A6D86CD-B004-46b7-8951-7BB75A776F8C} " = Intel(R) Small Business Advantage
" {6A6F7B28-E178-47AC-8654-A654ADA6C777} " = VSHelp
" {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} " = Microsoft Visual C++ 2005 Redistributable
" {7299052b-02a4-4627-81f2-1818da5d550d} " = Microsoft Visual C++ 2005 Redistributable
" {76285C16-411A-488A-BCE3-C83CB933D8CF} " = Battlefield 3™
" {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} " = Apple Software Update
" {7f51bdb9-ee21-49ee-94d6-90afc321780e} " = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
" {80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC} " = QuickTime 7
" {837b34e3-7c30-493c-8f6a-2b0f04e2912c} " = Microsoft Visual C++ 2005 Redistributable
" {8AA4F966-EF4B-44D8-99AA-C4EA93B46863} " = VSClassic
" {90120000-0015-0415-0000-0000000FF1CE} " = Microsoft Office Access MUI (Polish) 2007
" {90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0016-0415-0000-0000000FF1CE} " = Microsoft Office Excel MUI (Polish) 2007
" {90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0018-0415-0000-0000000FF1CE} " = Microsoft Office PowerPoint MUI (Polish) 2007
" {90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0019-0415-0000-0000000FF1CE} " = Microsoft Office Publisher MUI (Polish) 2007
" {90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001A-0415-0000-0000000FF1CE} " = Microsoft Office Outlook MUI (Polish) 2007
" {90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001B-0415-0000-0000000FF1CE} " = Microsoft Office Word MUI (Polish) 2007
" {90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-001F-0407-0000-0000000FF1CE} " = Microsoft Office Proof (German) 2007
" {90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-001F-0409-0000-0000000FF1CE} " = Microsoft Office Proof (English) 2007
" {90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-001F-0415-0000-0000000FF1CE} " = Microsoft Office Proof (Polish) 2007
" {90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619} " = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
" {90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-002A-0415-1000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-002C-0415-0000-0000000FF1CE} " = Microsoft Office Proofing (Polish) 2007
" {90120000-0030-0000-0000-0000000FF1CE} " = Microsoft Office Enterprise 2007
" {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-0044-0415-0000-0000000FF1CE} " = Microsoft Office InfoPath MUI (Polish) 2007
" {90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-006E-0415-0000-0000000FF1CE} " = Microsoft Office Shared MUI (Polish) 2007
" {90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-00A1-0415-0000-0000000FF1CE} " = Microsoft Office OneNote MUI (Polish) 2007
" {90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90120000-00BA-0415-0000-0000000FF1CE} " = Microsoft Office Groove MUI (Polish) 2007
" {90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4} " = Microsoft Office 2007 Service Pack 3 (SP3)
" {90140000-2005-0000-0000-0000000FF1CE} " = Microsoft Office File Validation Add-In
" {9A25302D-30C0-39D9-BD6F-21E6EC160475} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
" {9BE518E6-ECC6-35A9-88E4-87755C07200F} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
" {A48B9CD8-C2BA-4EC9-0081-7260D238C7CF} " = Need for Speed™ Most Wanted
" {A8887C7B-0BCC-4FBF-BCEB-9BB4D4B14999} " = Setup
" {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} " = Google Update Helper
" {AC76BA86-0804-1033-1959-001824161310} " = Adobe Refresh Manager
" {AC76BA86-7AD7-1045-7B44-AC0F074E4100} " = Adobe Acrobat Reader DC - Polish
" {AF111648-99A1-453E-81DD-80DBBF6DAD0D} " = MSVC90_x86
" {B8A2869E-30CA-40C5-9CF8-BD7354E57EF8} " = SmartSound Common Data
" {B991A1BC-DE0F-41B3-9037-B2F948F706EC} " = Intel(R) Update Manager
" {C717B4D4-2EFA-4DC3-8EDB-79543E43666C} " = VSUltimate
" {CA486743-5F44-40D5-A38B-77911FB27579} " = Contents
" {D6506521-0959-4FA3-875F-E2E28830B0D2} " = NEF Codec
" {DCDC6934-7428-489E-8651-90B53191488B} " = ISCOM
" {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} " = Windows Media Encoder 9 Series
" {EEBEF66A-70FD-4DF6-B173-82D07E61853E} " = Share
" {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} " = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
" {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} " = Realtek High Definition Audio Driver
" {f65db027-aff3-4070-886a-0d87064aabb1} " = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
" {F8A9085D-4C7A-41a9-8A77-C8998A96C421} " = Intel(R) Control Center
" {F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185} " = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
" Adobe AIR " = Adobe AIR
" Adobe Flash Player NPAPI " = Adobe Flash Player 20 NPAPI
" Adobe Flash Player PPAPI " = Adobe Flash Player 20 PPAPI
" Battlelog Web Plugins " = Battlelog Web Plugins
" CEVO CS:GO Client Beta_is1 " = CEVO CS:GO Client Beta version 1.0
" Dying Light_is1 " = Dying Light wersja 1.0.0.0
" ENTERPRISE " = Microsoft Office Enterprise 2007
" Fraps " = Fraps
" Google Chrome " = Google Chrome
" InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F} " = SmartSound Quicktracks 5
" InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8} " = SmartSound Common Data
" Maxthon3 " = Maxthon Cloud Browser
" NVIDIAStereo " = NVIDIA Stereoscopic 3D Driver
" Opera 34.0.2036.42 " = Opera Stable 34.0.2036.42
" Origin " = Origin
" PunkBusterSvc " = PunkBuster Services
" Rockstar Games Social Club " = Rockstar Games Social Club
" screenSHU " = screenSHU - the fastest screen capture ever.
" Steam " = Steam
" Steam App 11020 " = TrackMania Nations Forever
" Steam App 12210 " = Grand Theft Auto IV
" Steam App 24240 " = PAYDAY: The Heist
" Steam App 282440 " = Quake Live
" Steam App 63380 " = Sniper Elite V2
" Steam App 730 " = Counter-Strike: Global Offensive
" TeamSpeak 3 Client " = TeamSpeak 3 Client
" VLC media player " = VLC media player
" Winamp " = Winamp
" Windows Media Encoder 9 " = Windows Media Encoder 9 Series
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-3080954066-1883005936-171845699-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" BitTorrent " = BitTorrent
" Dropbox " = Dropbox
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2015-02-12 09:40:15 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-13 09:43:51 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-13 10:25:56 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-14 06:36:02 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-14 17:25:44 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-15 05:01:35 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-15 12:28:23 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-15 15:21:01 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-16 07:40:24 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
Error - 2015-02-17 09:08:20 | Computer Name = GROCHU | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 2016-01-08 15:18:03 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:18:03 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:40 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:40 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:40 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:40 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:41 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:41 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:41 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
Error - 2016-01-08 15:20:41 | Computer Name = GROCHU | Source = DCOM | ID = 10016
Description =
& lt; End of report & gt;