OTL Extras logfile created on: 2016-03-01 20:27:20 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Tymuś\Downloads
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18098)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,89 Gb Total Physical Memory | 1,90 Gb Available Physical Memory | 48,75% Memory free
5,20 Gb Paging File | 3,00 Gb Available in Paging File | 57,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 473,23 Gb Total Space | 406,02 Gb Free Space | 85,80% Space Free | Partition Type: NTFS
Drive E: | 225,06 Gb Total Space | 217,60 Gb Free Space | 96,68% Space Free | Partition Type: NTFS

Computer Name: GIENIU | User Name: Tymuś | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-998297695-2332797061-9300069-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = AC 1C AE C5 46 9F CE 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1F878D3A-4620-4B38-B364-C174857CA841}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{627794A7-7DCC-4DD3-A283-8A28E13D3E7D}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{7436A3EE-4A4B-4ED3-B21A-687923DC0BD3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0F5CEB9F-CEC1-4D05-8A54-79E52A94D1EB}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.322_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
"{178AD723-C24B-4ADE-AAF9-1D17A3DF710B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\risk of rain\risk of rain.exe |
"{184F4E22-AC82-402A-9378-46BE6FFB1D47}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{19CFA59F-09FD-4028-9556-CB3B61263018}" = dir=out | name=@{microsoft.bingfinance_3.0.4.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
"{1B16A902-47D4-47FF-AA26-B28C949C5448}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{1EC6CB18-CEF6-49A9-AE28-7A7819BCDFD6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\clicker heroes\clicker heroes.exe |
"{23117A2C-B212-4043-8B79-3BB0BEC52172}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{2408B1D4-51F5-4EA9-AAD9-388BC048217E}" = dir=out | name=windows phone |
"{265854B7-17EB-4936-BDBD-B6F9CC77480F}" = dir=out | name=skype |
"{28FB54B4-6E7B-46FF-9603-488BC8CEE1A9}" = dir=in | name=windows phone |
"{30F80D6F-628F-4BC7-AA61-2F4CC168553D}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{31A9A2E7-FB9A-4012-9CF8-00AB5C8DC3C7}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{3D6FFA02-604D-4E29-923E-868DB13D08C4}" = dir=out | name=@{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{40D248CE-949D-4C14-A35E-453040C7C278}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\risk of rain\risk of rain.exe |
"{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn |
"{47F94278-567E-483C-A8BF-ED0101E341EF}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.322_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
"{483770DD-49D3-4F01-9CCD-739DD0BF9C5B}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect |
"{593530FD-1AFF-4137-ACCC-EFC424A736A5}" = dir=out | name=windows_ie_ac_001 |
"{5C82F573-AA57-44C5-9F63-D360DE65731C}" = dir=in | name=skype |
"{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect |
"{6641A271-FC31-460D-A512-3B685E7A5343}" = dir=out | name=@{microsoft.bingnews_3.0.4.322_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
"{7C1F19EA-3C10-4F8E-ABD1-C4E7BA5DE4B4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{81A57F03-1072-4EB7-95D0-92AA700236A5}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{87D6BADF-7064-4ED5-915E-5CA09853BCDF}" = dir=out | name=@{microsoft.zunevideo_2.6.441.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{88948898-BA57-445D-9BA2-9B0EEBB81504}" = dir=out | name=@{microsoft.bingsports_3.0.4.322_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
"{88FAB247-9633-4540-9067-10BA0621638B}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{8CC8113B-46FC-4A43-85B7-8135DF175F1A}" = dir=out | name=onenote |
"{92114B07-D5BF-41B5-A345-B7408ED41987}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{9C8E6AAA-29D3-4BDE-AC6A-1A925BB4DD62}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{9EF96D9A-EFB8-4C82-B2F8-95A168AFEB36}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{A3F761EB-1CBB-45E4-95FF-74608CEF28FB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{A63557C4-CA2F-40CF-9F2F-8C03935F135E}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{BDC5FA5F-4175-49D3-B73C-93D2A9DD2654}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{C170A25B-2653-434A-8C9F-5BF9AFDCE460}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{CA04137B-1431-42BC-B10E-FB0F677A6279}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{CCC19362-2FF4-4599-995F-40575A4A8B41}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\clicker heroes\clicker heroes.exe |
"{D36D05D1-BB65-499C-ACFE-F418D3A07655}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn |
"{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn |
"{EBDA3FE7-1F7B-41A8-BEEE-5126C9EA1FD6}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn |
"{F28BEC84-6DF7-4779-9AB6-28886B75E617}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{F4B30A6E-694B-44B1-9D0D-94D83517927D}" = dir=in | name=onenote |
"{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client |
"{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client |
"{FAE5833D-1DE8-4315-90D1-52AE58627872}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{FFD24972-5914-41C9-A3D0-EE5B44B600FF}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"TCP Query User{1155D3ED-3E00-40BF-A3EF-06C7AC6A7FDD}C:\users\tymuś\desktop\aw\theforgottenserverv8.2 64bit.exe" = protocol=6 | dir=in | app=c:\users\tymuś\desktop\aw\theforgottenserverv8.2 64bit.exe |
"TCP Query User{3BB65DCA-8328-4D32-977F-CAE0F3256FB9}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{500B6762-04C8-49BB-8A28-5BF62548D18F}C:\program files (x86)\connectify\connectify.exe" = protocol=6 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"TCP Query User{548CB669-3DAB-4647-A213-E8FE34C5CAAF}C:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"TCP Query User{C42C4EB1-5355-47B4-B957-B2ED6BCE26E2}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{FD2E1916-994E-4D3E-8709-6FB2AAC23BE1}C:\users\tymuś\desktop\otsoft.pl-theforgottenserver023-wingui\theforgottenserver023-wingui\theforgottenserver.exe" = protocol=6 | dir=in | app=c:\users\tymuś\desktop\otsoft.pl-theforgottenserver023-wingui\theforgottenserver023-wingui\theforgottenserver.exe |
"UDP Query User{0B610D74-0AA8-447B-86E0-94BC161748D4}C:\users\tymuś\desktop\otsoft.pl-theforgottenserver023-wingui\theforgottenserver023-wingui\theforgottenserver.exe" = protocol=17 | dir=in | app=c:\users\tymuś\desktop\otsoft.pl-theforgottenserver023-wingui\theforgottenserver023-wingui\theforgottenserver.exe |
"UDP Query User{4022BF43-C38D-4A59-8778-487AAD6DE498}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{604B681B-8C18-46A4-8469-F7BC0ADEB402}C:\users\tymuś\desktop\aw\theforgottenserverv8.2 64bit.exe" = protocol=17 | dir=in | app=c:\users\tymuś\desktop\aw\theforgottenserverv8.2 64bit.exe |
"UDP Query User{C9E419EE-E80E-4C23-A682-B8D285E23AF6}C:\program files (x86)\connectify\connectify.exe" = protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"UDP Query User{E2AD4FDA-7999-4B71-84CD-676C905130DB}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{E842C010-C086-4F4B-8270-DEF5399AA906}C:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{B16BB34E-B7BF-47DF-8658-BEABCF40CD6A}" = Corel Graphics - Windows Shell Extension
"_{BDBFAC49-8877-472F-876B-75ADB7DBC955}" = CorelDRAW Graphics Suite X6 (64-Bit)
"{0AB3CCB3-5C0B-4C65-9FA4-CFEF6283F7F1}" = FMW 1
"{0CEA94E0-E6F4-4F2D-AA98-D0EFD6833754}" = Corel Graphics - Windows Shell Extension 32 Bit
"{0D3E9E15-DE7A-300B-96F1-B4AF12B96488}" = Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.23026
"{10762393-1B90-4AC2-AF1A-4C0C04AE303F}" = CorelDRAW Graphics Suite X6 - VBA (x64)
"{1967EF95-E00B-4669-8B1C-A589BE8BF24F}" = CorelDRAW Graphics Suite X6 - Capture (x64)
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1E3A578C-0A7D-4820-990F-B7545C0B2303}" = CorelDRAW Graphics Suite X6 - VSTA (x64)
"{26A24AE4-039D-4CA4-87B4-2F86418060F0}" = Java 8 Update 60 (64-bit)
"{27AE72A4-B217-4CDC-B82B-3311E9D7460E}" = CorelDRAW Graphics Suite X6 - Draw (x64)
"{35869A6C-BA31-4F23-B52D-BC1B1E41EC1B}" = CorelDRAW Graphics Suite X6 - Common (x64)
"{3933C06C-8239-432B-87FC-F2BDC5B49A10}" = CorelDRAW Graphics Suite X6 - FontNav (x64)
"{4F5C2F9B-9FE1-4C4D-8B2D-B74CAD82BAEB}" = CorelDRAW Graphics Suite X6 - PL (x64)
"{6099F026-0A98-4D40-9B3D-ED2123A8CBD0}" = CorelDRAW Graphics Suite X6 - Redist (x64)
"{7386B5FA-8715-481D-821F-7785110506DF}" = CorelDRAW Graphics Suite X6 - Custom Data (x64)
"{7B79AE44-9B76-4815-84E5-ACAC3F0F0278}" = CorelDRAW Graphics Suite X6 - VideoBrowser (x64)
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{90120064-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x64)
"{90150000-0015-0415-1000-0000000FF1CE}" = Microsoft Access MUI (Polish) 2013
"{90150000-0016-0415-1000-0000000FF1CE}" = Microsoft Excel MUI (Polish) 2013
"{90150000-0018-0415-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (Polish) 2013
"{90150000-0019-0415-1000-0000000FF1CE}" = Microsoft Publisher MUI (Polish) 2013
"{90150000-001A-0415-1000-0000000FF1CE}" = Microsoft Outlook MUI (Polish) 2013
"{90150000-001B-0415-1000-0000000FF1CE}" = Microsoft Word MUI (Polish) 2013
"{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-0415-1000-0000000FF1CE}" = Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski
"{90150000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2013
"{90150000-0044-0415-1000-0000000FF1CE}" = Microsoft InfoPath MUI (Polish) 2013
"{90150000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2013
"{90150000-0090-0415-1000-0000000FF1CE}" = Microsoft DCF MUI (Polish) 2013
"{90150000-00A1-0415-1000-0000000FF1CE}" = Microsoft OneNote MUI (Polish) 2013
"{90150000-00BA-0415-1000-0000000FF1CE}" = Microsoft Groove MUI (Polish) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2013
"{90150000-00E1-0415-1000-0000000FF1CE}" = Microsoft Office OSM MUI (Polish) 2013
"{90150000-00E2-0415-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (Polish) 2013
"{90150000-012B-0415-1000-0000000FF1CE}" = Microsoft Lync MUI (Polish) 2013
"{90F60409-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) English
"{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{96AAAB95-AEBE-437A-B7CA-37C7BE13FFE9}" = CorelDRAW Graphics Suite X6 - Connect (x64)
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{B16BB34E-B7BF-47DF-8658-BEABCF40CD6A}" = Corel Graphics - Windows Shell Extension
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 331.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 331.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.15.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.15.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6DF7031-2843-44FD-9CAB-DECAB4257456}" = CorelDRAW Graphics Suite X6 - IPM
"{BB65D262-3EBC-4F10-89D9-67A320E94EAA}" = CorelDRAW Graphics Suite X6 - EN (x64)
"{BC958BD2-5DAC-3862-BB1A-C1BE0790438D}" = Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23026
"{BDBFAC49-8877-472F-876B-75ADB7DBC955}" = CorelDRAW Graphics Suite X6 - Setup Files (x64)
"{CCE7423E-1D84-4CD3-9E32-220EC9358D97}" = CorelDRAW Graphics Suite X6 (x64)
"{CEDC1C27-A73A-4779-9121-DB77A8AE2003}" = AVG Zen
"{D181BF91-057A-4889-BF0B-812D1BC2410C}" = AVG 2016
"{D7C2687D-924E-4485-B367-C7D95CBF8DDD}" = CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x64)
"{DDE82E3D-20C4-48E1-AE1D-B1F10E42CA44}" = CorelDRAW Graphics Suite X6 - Writing Tools (x64)
"{E699230D-4B5E-411E-9F45-FF50789B18DD}" = CorelDRAW Graphics Suite X6 - Filters (x64)
"742CB358F87FA11D4CD0F0C896AF9565DEB26B11" = Pakiet sterowników systemu Windows - Realtek Semiconduct Corp. (RSBASTOR) MTD  (02/28/2014 6.3.9600.27048)
"AVG" = AVG Protection
"AvgZen" = AVG
"Office15.PROPLUSR" = Microsoft Office Professional Plus 2013
"Pen Tablet Driver" = Wacom
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Wacom WebTabletPlugin for Internet Explorer and Netscape" = WebTablet FB Plugin 64 bit

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}" = PDF Settings CC
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}" = Adobe Photoshop CC
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AC76BA86-0804-1033-1959-001824166751}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1045-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Polish
"{C3592426-531E-4110-911D-BFECE2CE284B}" = puush
"{D2437C5C-2D8C-40D2-8059-689AD7239FA3}" = Intel(R) C++ Redistributables for Windows* on Intel(R) 64
"{e46eca4f-393b-40df-9f49-076faf788d83}" = Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"Adobe Flash Player NPAPI" = Adobe Flash Player 20 NPAPI
"Adobe Shockwave Player" = Adobe Shockwave Player 12.1
"ALLPlayer_is1" = ALLPlayer V6.X
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"Dev-C++" = Dev-C++
"Google Chrome" = Google Chrome
"Kingdom_is1" = Kingdom
"Mozilla Firefox 43.0.3 (x86 pl)" = Mozilla Firefox 43.0.3 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"Steam" = Steam
"Steam App 248820" = Risk of Rain
"Steam App 363970" = Clicker Heroes
"Steam App 730" = Counter-Strike: Global Offensive
"Uplay" = Uplay
"Wacom WebTabletPlugin for Internet Explorer and Netscape" = WebTablet FB Plugin 32 bit
"WinRAR archiver" = WinRAR 5.11 (32-bitowy)
"winscp3_is1" = WinSCP 5.7.4

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-998297695-2332797061-9300069-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{97ABEAC7-C6E1-46F1-957B-F395EA4662B5}_is1" = iMacros for Chrome File Access 1.0.0.805
"1d85483b1c982d8c" = IdleMaster

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2016-02-28 08:53:34 | Computer Name = Gieniu | Source = Office 2013 Licensing Service | ID = 0
Description =

Error - 2016-02-29 09:54:07 | Computer Name = Gieniu | Source = Office 2013 Licensing Service | ID = 0
Description =

Error - 2016-02-29 09:56:46 | Computer Name = Gieniu | Source = Application Hang | ID = 1002
Description = Program wwahost.exe w wersji 6.3.9600.17415 przestał współpracować
 z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
 informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania.    Identyfikator procesu: 99c    Godzina rozpoczęcia: 01d172ae763cee9e

Godzina
 zakończenia: 4294967295    Ścieżka aplikacji: C:\Windows\syswow64\wwahost.exe    Identyfikator
 raportu: 42341ed4-deec-11e5-8291-68172912c68a    Pełna nazwa pakietu powodującego błąd:
 Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c    Identyfikator aplikacji względem
 pakietu powodującego błąd: App

Error - 2016-03-01 04:11:57 | Computer Name = Gieniu | Source = Office 2013 Licensing Service | ID = 0
Description =

Error - 2016-03-01 12:09:57 | Computer Name = Gieniu | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 43.0.3.5835,
 sygnatura czasowa: 0x567b4c13  Nazwa modułu powodującego błąd: mozglue.dll, wersja:
 43.0.3.5835, sygnatura czasowa: 0x567b3f6a  Kod wyjątku: 0x80000003  Przesunięcie błędu:
 0x0000ed56  Identyfikator procesu powodującego błąd: 0x251c  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01d173d4705666e0  Ścieżka aplikacji powodującej błąd: C:\Program
 Files (x86)\Mozilla Firefox\plugin-container.exe  Ścieżka modułu powodującego błąd:
 C:\Program Files (x86)\Mozilla Firefox\mozglue.dll  Identyfikator raportu: 0a81a811-dfc8-11e5-8291-68172912c68a
Pełna
 nazwa pakietu powodującego błąd:   Identyfikator aplikacji względem pakietu powodującego
 błąd:

Error - 2016-03-01 12:12:26 | Computer Name = Gieniu | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: MustangSer110.exe, wersja: 1.0.0.6,
 sygnatura czasowa: 0x567001d1  Nazwa modułu powodującego błąd: MustangSer110.exe,
 wersja: 1.0.0.6, sygnatura czasowa: 0x567001d1  Kod wyjątku: 0xc0000409  Przesunięcie
 błędu: 0x00012d24  Identyfikator procesu powodującego błąd: 0x3acc  Godzina uruchomienia
 aplikacji powodującej błąd: 0x01d173d4dd96ac8b  Ścieżka aplikacji powodującej błąd:
 C:\ProgramData\TempMoudleSet\MustangSer110.exe  Ścieżka modułu powodującego błąd:
 C:\ProgramData\TempMoudleSet\MustangSer110.exe  Identyfikator raportu: 636c3819-dfc8-11e5-8291-68172912c68a
Pełna
 nazwa pakietu powodującego błąd:   Identyfikator aplikacji względem pakietu powodującego
 błąd:

Error - 2016-03-01 15:05:01 | Computer Name = Gieniu | Source = Application Hang | ID = 1002
Description = Program wwahost.exe w wersji 6.3.9600.17415 przestał współpracować
 z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
 informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania.    Identyfikator procesu: 3454    Godzina rozpoczęcia: 01d173ec8922d3cc

Godzina
 zakończenia: 4294967295    Ścieżka aplikacji: C:\Windows\syswow64\wwahost.exe    Identyfikator
 raportu: 7d9295e4-dfe0-11e5-8291-68172912c68a    Pełna nazwa pakietu powodującego błąd:
 Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c    Identyfikator aplikacji względem
 pakietu powodującego błąd: App

Error - 2016-03-01 15:37:05 | Computer Name = Gieniu | Source = MsiInstaller | ID = 10005
Description =

Error - 2016-03-01 15:46:54 | Computer Name = Gieniu | Source = Application Hang | ID = 1002
Description = Program wwahost.exe w wersji 6.3.9600.17415 przestał współpracować
 z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
 informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania.    Identyfikator procesu: 173c    Godzina rozpoczęcia: 01d173f2644a28e0

Godzina
 zakończenia: 4294967295    Ścieżka aplikacji: C:\Windows\syswow64\wwahost.exe    Identyfikator
 raportu: 588f71ae-dfe6-11e5-8292-68172912c68a    Pełna nazwa pakietu powodującego błąd:
 Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c    Identyfikator aplikacji względem
 pakietu powodującego błąd: App

Error - 2016-03-01 15:46:58 | Computer Name = Gieniu | Source = Application Hang | ID = 1002
Description = Program LiveComm.exe w wersji 17.5.9600.20856 przestał współpracować
 z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej
 informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum
akcji w Panelu sterowania.    Identyfikator procesu: 2fc    Godzina rozpoczęcia: 01d173f2644a9e3f

Godzina
 zakończenia: 4294967295    Ścieżka aplikacji: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\LiveComm.exe

Identyfikator
 raportu: 587bd300-dfe6-11e5-8292-68172912c68a    Pełna nazwa pakietu powodującego błąd:
 microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe    Identyfikator
 aplikacji względem pakietu powodującego błąd: ppleae38af2e007f4358a809ac99a64a67c1


[ System Events ]
Error - 2016-03-01 15:06:46 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7032
Description = Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom
 usługę ponownie) po nieoczekiwanym zakończeniu usługi Windows Search, ale ta akcja
 nie powiodła się przy następującym błędzie:   %%1056.

Error - 2016-03-01 15:07:29 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7031
Description = Usługa AVG Service niespodziewanie zakończyła pracę. Wystąpiło to
razy: 1. W przeciągu 0 milisekund zostanie podjęta następująca czynność korekcyjna:
 Uruchom usługę ponownie.

Error - 2016-03-01 15:07:29 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7031
Description = Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to
 razy: 2. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna:
 Uruchom usługę ponownie.

Error - 2016-03-01 15:07:29 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7031
Description = Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło
to razy: 2. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna:
 Uruchom usługę ponownie.

Error - 2016-03-01 15:07:30 | Computer Name = Gieniu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.

Error - 2016-03-01 15:07:42 | Computer Name = Gieniu | Source = DCOM | ID = 10010
Description =

Error - 2016-03-01 15:07:43 | Computer Name = Gieniu | Source = DCOM | ID = 10010
Description =

Error - 2016-03-01 15:12:09 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi atksgt z powodu następującego błędu:   %%577

Error - 2016-03-01 15:12:10 | Computer Name = Gieniu | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi lirsgt z powodu następującego błędu:   %%577

Error - 2016-03-01 15:12:10 | Computer Name = Gieniu | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Wystąpił błąd podczas próby odczytu lokalnego pliku hosts.


< End of report >