OTL Extras logfile created on: 2012-05-08 16:45:49 - Run 1
OTL by OldTimer - Version 3.2.42.3     Folder = D:\
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,24 Gb Total Physical Memory | 1,08 Gb Available Physical Memory | 48,17% Memory free
4,48 Gb Paging File | 2,89 Gb Available in Paging File | 64,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 48,73 Gb Total Space | 1,80 Gb Free Space | 3,69% Space Free | Partition Type: NTFS
Drive D: | 547,34 Gb Total Space | 6,95 Gb Free Space | 1,27% Space Free | Partition Type: NTFS
 
Computer Name: KOKOS-PC | User Name: KOKOS | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-1053722034-1444107339-3191604711-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UpdatesDisableNotify" = 0
"UacDisableNotify" = 0
"AntiVirusOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"UacDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe" = C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA)
"C:\Users\KOKOS\Desktop\GTA Sa\setup.exe" = C:\Users\KOKOS\Desktop\GTA Sa\setup.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\windoehsi.exe" = C:\Users\KOKOS\AppData\Local\Temp\windoehsi.exe:*:Enabled:ipsec
"C:\Program Files\Bluetooth Suite\AthBtTray.exe" = C:\Program Files\Bluetooth Suite\AthBtTray.exe:*:Enabled:ipsec -- (Atheros Commnucations)
"C:\Program Files\ASUS\Splendid\ACMON.exe" = C:\Program Files\ASUS\Splendid\ACMON.exe:*:Enabled:ipsec -- (ASUS)
"C:\Windows\Explorer.EXE" = C:\Windows\Explorer.EXE:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\Program Files\ASUS\SmartLogon\smartlogon.exe" = C:\Program Files\ASUS\SmartLogon\smartlogon.exe:*:Enabled:ipsec
"C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe" = C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe:*:Enabled:ipsec -- (France Telecom SA)
"C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" = C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe:*:Enabled:ipsec -- (Trend Micro Inc.)
"C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe" = C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe:*:Enabled:ipsec -- (Trend Micro Inc.)
"C:\Program Files\DAEMON Tools Lite\DTLite.exe" = C:\Program Files\DAEMON Tools Lite\DTLite.exe:*:Enabled:ipsec -- (DT Soft Ltd)
"C:\Program Files\NapiProjekt\napisy.exe" = C:\Program Files\NapiProjekt\napisy.exe:*:Enabled:ipsec -- ()
"C:\Users\KOKOS\AppData\Local\Temp\winmqycy.exe" = C:\Users\KOKOS\AppData\Local\Temp\winmqycy.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wingxhv.exe" = C:\Users\KOKOS\AppData\Local\Temp\wingxhv.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winsbmqok.exe" = C:\Users\KOKOS\AppData\Local\Temp\winsbmqok.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winymykv.exe" = C:\Users\KOKOS\AppData\Local\Temp\winymykv.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winglbjc.exe" = C:\Users\KOKOS\AppData\Local\Temp\winglbjc.exe:*:Enabled:ipsec
"C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" = C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe:*:Enabled:ipsec -- (ASUS)
"C:\Program Files\P4G\BatteryLife.exe" = C:\Program Files\P4G\BatteryLife.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\mnjs.exe" = C:\Users\KOKOS\AppData\Local\Temp\mnjs.exe:*:Enabled:ipsec
"C:\Program Files\ASUS\FaceLogon\smartlogon.exe" = C:\Program Files\ASUS\FaceLogon\smartlogon.exe:*:Enabled:ipsec -- (ASUS)
"C:\Program Files\ASUS\P4G\BatteryLife.exe" = C:\Program Files\ASUS\P4G\BatteryLife.exe:*:Enabled:ipsec -- (ASUS)
"C:\Users\KOKOS\AppData\Local\Temp\wkult.exe" = C:\Users\KOKOS\AppData\Local\Temp\wkult.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\alswl.exe" = C:\Users\KOKOS\AppData\Local\Temp\alswl.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wingmmnqe.exe" = C:\Users\KOKOS\AppData\Local\Temp\wingmmnqe.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\windjknwx.exe" = C:\Users\KOKOS\AppData\Local\Temp\windjknwx.exe:*:Enabled:ipsec
"C:\Program Files\ASUS\FaceLogon\sensorsrv.exe" = C:\Program Files\ASUS\FaceLogon\sensorsrv.exe:*:Enabled:ipsec -- (ASUS)
"C:\Users\KOKOS\AppData\Local\Temp\beyntr.exe" = C:\Users\KOKOS\AppData\Local\Temp\beyntr.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winuagour.exe" = C:\Users\KOKOS\AppData\Local\Temp\winuagour.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\pfxf.exe" = C:\Users\KOKOS\AppData\Local\Temp\pfxf.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winmykc.exe" = C:\Users\KOKOS\AppData\Local\Temp\winmykc.exe:*:Enabled:ipsec
"C:\Windows\system32\taskhost.exe" = C:\Windows\system32\taskhost.exe:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\Users\KOKOS\AppData\Local\Temp\wyktg.exe" = C:\Users\KOKOS\AppData\Local\Temp\wyktg.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winkceso.exe" = C:\Users\KOKOS\AppData\Local\Temp\winkceso.exe:*:Enabled:ipsec
"C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe" = C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe:*:Enabled:ipsec -- (ASUSTeK Computer Inc.)
"C:\Users\KOKOS\AppData\Local\Temp\winxcmi.exe" = C:\Users\KOKOS\AppData\Local\Temp\winxcmi.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\xwml.exe" = C:\Users\KOKOS\AppData\Local\Temp\xwml.exe:*:Enabled:ipsec
"C:\Windows\TEMP\tkgckx.exe" = C:\Windows\TEMP\tkgckx.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\hcvn.exe" = C:\Users\KOKOS\AppData\Local\Temp\hcvn.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\usvh.exe" = C:\Users\KOKOS\AppData\Local\Temp\usvh.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winicvsp.exe" = C:\Users\KOKOS\AppData\Local\Temp\winicvsp.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\rrkk.exe" = C:\Users\KOKOS\AppData\Local\Temp\rrkk.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\cplvsk.exe" = C:\Users\KOKOS\AppData\Local\Temp\cplvsk.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winvgbm.exe" = C:\Users\KOKOS\AppData\Local\Temp\winvgbm.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhdcmn.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhdcmn.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhexw.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhexw.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winoojuu.exe" = C:\Users\KOKOS\AppData\Local\Temp\winoojuu.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winaxqeb.exe" = C:\Users\KOKOS\AppData\Local\Temp\winaxqeb.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winkvop.exe" = C:\Users\KOKOS\AppData\Local\Temp\winkvop.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wintcbsa.exe" = C:\Users\KOKOS\AppData\Local\Temp\wintcbsa.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winahawj.exe" = C:\Users\KOKOS\AppData\Local\Temp\winahawj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\lkjinn.exe" = C:\Users\KOKOS\AppData\Local\Temp\lkjinn.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\xkxy.exe" = C:\Users\KOKOS\AppData\Local\Temp\xkxy.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winqacq.exe" = C:\Users\KOKOS\AppData\Local\Temp\winqacq.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winljoqay.exe" = C:\Users\KOKOS\AppData\Local\Temp\winljoqay.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\uwtu.exe" = C:\Users\KOKOS\AppData\Local\Temp\uwtu.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\dmwk.exe" = C:\Users\KOKOS\AppData\Local\Temp\dmwk.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhpbfge.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhpbfge.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winweyxpw.exe" = C:\Users\KOKOS\AppData\Local\Temp\winweyxpw.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winkxotdp.exe" = C:\Users\KOKOS\AppData\Local\Temp\winkxotdp.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\windqasqt.exe" = C:\Users\KOKOS\AppData\Local\Temp\windqasqt.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\drexoi.exe" = C:\Users\KOKOS\AppData\Local\Temp\drexoi.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\lswgl.exe" = C:\Users\KOKOS\AppData\Local\Temp\lswgl.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winaxqhc.exe" = C:\Users\KOKOS\AppData\Local\Temp\winaxqhc.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\jisrve.exe" = C:\Users\KOKOS\AppData\Local\Temp\jisrve.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winoptu.exe" = C:\Users\KOKOS\AppData\Local\Temp\winoptu.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winnngsq.exe" = C:\Users\KOKOS\AppData\Local\Temp\winnngsq.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winijljj.exe" = C:\Users\KOKOS\AppData\Local\Temp\winijljj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\koeq.exe" = C:\Users\KOKOS\AppData\Local\Temp\koeq.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\cqkfi.exe" = C:\Users\KOKOS\AppData\Local\Temp\cqkfi.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\edxesj.exe" = C:\Users\KOKOS\AppData\Local\Temp\edxesj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\fosbj.exe" = C:\Users\KOKOS\AppData\Local\Temp\fosbj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winoybt.exe" = C:\Users\KOKOS\AppData\Local\Temp\winoybt.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winabpyxy.exe" = C:\Users\KOKOS\AppData\Local\Temp\winabpyxy.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\usyufl.exe" = C:\Users\KOKOS\AppData\Local\Temp\usyufl.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winnlgn.exe" = C:\Users\KOKOS\AppData\Local\Temp\winnlgn.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wingufs.exe" = C:\Users\KOKOS\AppData\Local\Temp\wingufs.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\hkyvd.exe" = C:\Users\KOKOS\AppData\Local\Temp\hkyvd.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winispi.exe" = C:\Users\KOKOS\AppData\Local\Temp\winispi.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\ncamj.exe" = C:\Users\KOKOS\AppData\Local\Temp\ncamj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhrwe.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhrwe.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winstxsq.exe" = C:\Users\KOKOS\AppData\Local\Temp\winstxsq.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\vgsmr.exe" = C:\Users\KOKOS\AppData\Local\Temp\vgsmr.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\gcvyf.exe" = C:\Users\KOKOS\AppData\Local\Temp\gcvyf.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winunmno.exe" = C:\Users\KOKOS\AppData\Local\Temp\winunmno.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wingajh.exe" = C:\Users\KOKOS\AppData\Local\Temp\wingajh.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winyqydqp.exe" = C:\Users\KOKOS\AppData\Local\Temp\winyqydqp.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wcdr.exe" = C:\Users\KOKOS\AppData\Local\Temp\wcdr.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winvlbw.exe" = C:\Users\KOKOS\AppData\Local\Temp\winvlbw.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winxcon.exe" = C:\Users\KOKOS\AppData\Local\Temp\winxcon.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\rced.exe" = C:\Users\KOKOS\AppData\Local\Temp\rced.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\yapno.exe" = C:\Users\KOKOS\AppData\Local\Temp\yapno.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winrmxx.exe" = C:\Users\KOKOS\AppData\Local\Temp\winrmxx.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winxowan.exe" = C:\Users\KOKOS\AppData\Local\Temp\winxowan.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winxfehg.exe" = C:\Users\KOKOS\AppData\Local\Temp\winxfehg.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhydtyn.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhydtyn.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winqjejjk.exe" = C:\Users\KOKOS\AppData\Local\Temp\winqjejjk.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winsetamx.exe" = C:\Users\KOKOS\AppData\Local\Temp\winsetamx.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winfexxf.exe" = C:\Users\KOKOS\AppData\Local\Temp\winfexxf.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\peqgb.exe" = C:\Users\KOKOS\AppData\Local\Temp\peqgb.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winrkgg.exe" = C:\Users\KOKOS\AppData\Local\Temp\winrkgg.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\xrncdy.exe" = C:\Users\KOKOS\AppData\Local\Temp\xrncdy.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\eaey.exe" = C:\Users\KOKOS\AppData\Local\Temp\eaey.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\pplvys.exe" = C:\Users\KOKOS\AppData\Local\Temp\pplvys.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\kesgra.exe" = C:\Users\KOKOS\AppData\Local\Temp\kesgra.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winhmum.exe" = C:\Users\KOKOS\AppData\Local\Temp\winhmum.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winopxtx.exe" = C:\Users\KOKOS\AppData\Local\Temp\winopxtx.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winwamjv.exe" = C:\Users\KOKOS\AppData\Local\Temp\winwamjv.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winsanjrj.exe" = C:\Users\KOKOS\AppData\Local\Temp\winsanjrj.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winyipig.exe" = C:\Users\KOKOS\AppData\Local\Temp\winyipig.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wingpwc.exe" = C:\Users\KOKOS\AppData\Local\Temp\wingpwc.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winmhwion.exe" = C:\Users\KOKOS\AppData\Local\Temp\winmhwion.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\nqpuvb.exe" = C:\Users\KOKOS\AppData\Local\Temp\nqpuvb.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\yture.exe" = C:\Users\KOKOS\AppData\Local\Temp\yture.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\oyfvif.exe" = C:\Users\KOKOS\AppData\Local\Temp\oyfvif.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\winraxth.exe" = C:\Users\KOKOS\AppData\Local\Temp\winraxth.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\amwwb.exe" = C:\Users\KOKOS\AppData\Local\Temp\amwwb.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\mqsq.exe" = C:\Users\KOKOS\AppData\Local\Temp\mqsq.exe:*:Enabled:ipsec
"C:\Windows\TEMP\winapbjd.exe" = C:\Windows\TEMP\winapbjd.exe:*:Enabled:ipsec
"C:\Users\KOKOS\AppData\Local\Temp\wincecnc.exe" = C:\Users\KOKOS\AppData\Local\Temp\wincecnc.exe:*:Enabled:ipsec
"C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe" = C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe:*:Enabled:ipsec -- (Realtek Semiconductor)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:ipsec -- (BitTorrent, Inc.)
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{047249A8-0A0B-4939-B2E5-E112157C3354}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{0840A689-0BAA-478A-A858-8E7700D0B888}" = lport=137 | protocol=17 | dir=in | app=system | 
"{08C3FAF2-4BE8-4AD3-94DB-6D15CB6FB0E9}" = lport=139 | protocol=6 | dir=in | app=system | 
"{1AE81358-3B31-4344-8E7B-8474C94900AF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{53C915C6-57F1-41C9-ADBA-7BA0E175E89B}" = lport=445 | protocol=6 | dir=in | app=system | 
"{59BF1109-2371-49BF-99F2-18D7352F4CC1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{620EDD1F-D461-439F-89F4-357682F903D3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{678E2BFE-C3BA-44C4-A7AA-F21CAF8FCA24}" = lport=138 | protocol=17 | dir=in | app=system | 
"{68C3B050-1774-4E31-ADD6-80D5D226A1DB}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{72CEEA9F-F555-4675-9DEB-3432B3E490F0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{96419D9D-27CF-407D-9E31-A3A922314FDB}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{9F402FD0-5CA5-42D5-84A7-626FFF32ECD6}" = rport=138 | protocol=17 | dir=out | app=system | 
"{A4C41E0A-C2AF-4B95-8A9D-A03C4A9DBA49}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{AF8F9BB8-ACBB-45B9-8657-91EDCC8CC793}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{B3048E9D-BB9B-4131-8107-69D1303F0814}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{BAD0961A-E888-4207-B21D-DAB1E18770BB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{BCD34054-0CAC-47A7-AA9E-052BC5C1B046}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{CBA8C30A-AB08-4C8D-80EC-7D0DF2D42370}" = rport=445 | protocol=6 | dir=out | app=system | 
"{CD9592C9-D62C-4715-9766-8CFEECCA3E49}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{DD51ED1D-F26B-4C9D-AF7A-8478D032C65D}" = rport=137 | protocol=17 | dir=out | app=system | 
"{DD6CB2C2-22E0-4900-B879-AF0D8EF0123B}" = rport=139 | protocol=6 | dir=out | app=system | 
"{E595C4DF-1D4B-43B6-A579-1F3E7A474EEC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{F51BFCD2-235B-4D08-9DF2-2AAEF3B59D68}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{093F69BA-4319-4C5F-9ED3-F45F07BF05B0}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{09DB6EC8-FB3B-424D-BF81-C8661F68BAFC}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe | 
"{19625048-F795-4EA0-A316-93A40E73A971}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{23A52E42-3288-4220-97BB-95D4DF5CF670}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe | 
"{29DA1893-D9EB-497D-BFC7-958C4863EAC2}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe | 
"{2AE74F29-FB37-4F18-A937-204FBA9A2574}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe | 
"{50D9DD58-9CA8-4530-8230-937273E3DC94}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{54D47857-15B6-4842-A9C0-BB05D5D1C325}" = protocol=6 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{55904B06-FCB7-4532-B459-CCE6320A275D}" = protocol=6 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{5630A7B2-0858-4243-8A64-9A4D4BF5C891}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"{67A105E2-3B5C-4E3F-8172-F057BA53E6E7}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"{6A1B4A14-337F-4695-BC73-5E5134CBEC2C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{8FD64F75-3A54-43BD-971B-4A22009552B6}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe | 
"{984C59F0-ED91-40B1-AD79-F7294C31C8D6}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{9EDB7A71-90AB-4BCC-B577-7B705C045C0F}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{A41FB8A2-4B48-4D06-8567-EF81C96BD9A6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{A95843AC-DEAF-4AF8-B8A0-CD546EC8B78B}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe | 
"{AB4C449E-A66C-459F-8362-5ACCFAB644AE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{AE0697B2-BA73-4D2C-A091-25F25E916818}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{B18F0768-877F-46D1-8C42-2682D905C774}" = protocol=17 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{B6B7B45E-EB71-4EA9-BF09-06F143715C05}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B8737D23-A548-4DBC-8A21-F1E5E26AD750}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"{C38A795D-C6BA-4479-A5A6-77410FAC19AA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{D08F6645-7803-475F-BEA2-B834D83BEC91}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{D6B6FE40-C249-47AC-82E9-025FB63E22B5}" = protocol=17 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{DB363D11-B36C-429C-9205-E2587C24AE4F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{DB865028-E2EA-4BE1-B6C4-E40498F3A9CE}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{ED780690-A0C7-41C1-9C0C-32C16329DCA4}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"TCP Query User{0463B8BE-7E58-45F5-B321-92D36910D912}C:\program files\daemon tools lite\dtlite.exe" = protocol=6 | dir=in | app=c:\program files\daemon tools lite\dtlite.exe | 
"TCP Query User{082E2861-E8E6-435E-8FFE-7C7559835363}C:\program files\common files\java\java update\jusched.exe" = protocol=6 | dir=in | app=c:\program files\common files\java\java update\jusched.exe | 
"TCP Query User{186707C7-999F-4416-93E2-466C2A5F875F}C:\program files\trend micro\titanium\vizorshortcut.exe" = protocol=6 | dir=in | app=c:\program files\trend micro\titanium\vizorshortcut.exe | 
"TCP Query User{31016012-F717-4346-B196-3C20EF691018}C:\windows\system32\rundll32.exe" = protocol=6 | dir=in | app=c:\windows\system32\rundll32.exe | 
"TCP Query User{396A00DD-3A42-4C4D-A0DD-83586026EEB6}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"TCP Query User{57B10C4B-3C2E-4B6E-8198-4C70E60FC7AA}C:\users\kokos\desktop\gta sa\setup.exe" = protocol=6 | dir=in | app=c:\users\kokos\desktop\gta sa\setup.exe | 
"TCP Query User{5B5CE90A-D2E8-4990-B6FC-35CCE7ECF1B9}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"TCP Query User{64E536BB-FBAC-4DA6-A816-7A19842C5BBC}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{7200DCA6-351C-48D8-A188-43A4C98D8E00}C:\users\kokos\appdata\local\google\update\googleupdate.exe" = protocol=6 | dir=in | app=c:\users\kokos\appdata\local\google\update\googleupdate.exe | 
"TCP Query User{9AE78552-B065-422E-9484-8D0FF14C1C51}C:\program files\windows sidebar\sidebar.exe" = protocol=6 | dir=in | app=c:\program files\windows sidebar\sidebar.exe | 
"TCP Query User{BAA2444C-3464-4925-AB1F-C2955F86B92B}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"TCP Query User{CC6E0383-576A-4C4E-95CC-40C575C94CF5}C:\program files\bluetooth suite\athbttray.exe" = protocol=6 | dir=in | app=c:\program files\bluetooth suite\athbttray.exe | 
"TCP Query User{E6B2972B-12DA-44CA-BB03-ECA1B8D8E450}C:\program files\downvision\downvision.exe" = protocol=6 | dir=in | app=c:\program files\downvision\downvision.exe | 
"TCP Query User{F882D2DB-F297-47D6-AD39-317F874ABF31}C:\program files\trend micro\titanium\uiframework\vizorhtmldialog.exe" = protocol=6 | dir=in | app=c:\program files\trend micro\titanium\uiframework\vizorhtmldialog.exe | 
"UDP Query User{0E674099-AAC3-4E1E-9387-1370C7D8E65E}C:\program files\trend micro\titanium\vizorshortcut.exe" = protocol=17 | dir=in | app=c:\program files\trend micro\titanium\vizorshortcut.exe | 
"UDP Query User{15C19B2C-D959-4562-9D95-5EEDA72D69A7}C:\program files\daemon tools lite\dtlite.exe" = protocol=17 | dir=in | app=c:\program files\daemon tools lite\dtlite.exe | 
"UDP Query User{1D190EC7-D3A6-4597-B18B-5788A3D8029E}C:\program files\windows sidebar\sidebar.exe" = protocol=17 | dir=in | app=c:\program files\windows sidebar\sidebar.exe | 
"UDP Query User{20F4CB70-E0E3-4899-8D65-FA102743FC87}C:\program files\downvision\downvision.exe" = protocol=17 | dir=in | app=c:\program files\downvision\downvision.exe | 
"UDP Query User{461CE4BF-ECF8-4B42-9A4F-2548F57123A4}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{4E8C2AD4-A16E-4FCA-973E-102101F432F7}C:\program files\bluetooth suite\athbttray.exe" = protocol=17 | dir=in | app=c:\program files\bluetooth suite\athbttray.exe | 
"UDP Query User{52CD80C1-5458-4A9A-ACE6-BB012F4AAD80}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{A2FD5CAE-AAC8-418F-AB0D-B2194E31475B}C:\users\kokos\appdata\local\google\update\googleupdate.exe" = protocol=17 | dir=in | app=c:\users\kokos\appdata\local\google\update\googleupdate.exe | 
"UDP Query User{B6F43AB6-A408-4B7A-B86B-72A230877736}C:\users\kokos\desktop\gta sa\setup.exe" = protocol=17 | dir=in | app=c:\users\kokos\desktop\gta sa\setup.exe | 
"UDP Query User{C8609B27-B60B-488F-BACD-1D1E9ABEC748}C:\program files\common files\java\java update\jusched.exe" = protocol=17 | dir=in | app=c:\program files\common files\java\java update\jusched.exe | 
"UDP Query User{DD763FA4-B8CC-4E64-A147-DAAA7FA5AE12}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{F0D2749D-9338-48B4-8E68-D3CE040D55F7}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"UDP Query User{F79221A5-676E-4E8D-9B3A-CDBA92F5AC66}C:\windows\system32\rundll32.exe" = protocol=17 | dir=in | app=c:\windows\system32\rundll32.exe | 
"UDP Query User{FBE8B34F-F4EF-4C47-AF1A-E8B4FB9C5BC4}C:\program files\trend micro\titanium\uiframework\vizorhtmldialog.exe" = protocol=17 | dir=in | app=c:\program files\trend micro\titanium\uiframework\vizorhtmldialog.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi
"{021E3463-8E95-C7C9-6139-127E6191B813}" = CCC Help Turkish
"{034DCAF9-96E7-4936-9A07-712F80B5181E}" = Nero RescueAgent 11
"{0675897C-F06E-45C3-11E3-F590868CA234}" = Catalyst Control Center InstallProxy
"{06AE2177-F1A5-B1C8-EC0C-D0E9B8C17E25}" = AMD Fuel
"{0713D1F9-DD77-42C1-8C7D-54D479E2E743}" = Nero SoundTrax 11
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}" = Sonic Focus
"{0AAFB3BE-89FE-43FA-09A7-CE5983DD9102}" = AMD VISION Engine Control Center
"{0D7A4289-99CF-4B8D-B812-86BE50A54552}" = Nero Video 11
"{0F931735-0098-4FF6-A49D-17882A294F51}" = Microsoft VC90 CRT + OMP
"{101A497C-7EF6-4001-834D-E5FA1C70FEFA}" = Bluetooth Win7 Suite
"{11D3EF85-63E1-4AE4-A7C1-9241BDB16B51}" = Nero ControlCenter 11
"{1890E52E-1ABD-4D3E-3095-0CE6736964C9}" = CCC Help Portuguese
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 3.4
"{1CA8970E-C2A8-B5E0-5BDB-FDD0D15B6C97}" = CCC Help Czech
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.8.8.2580
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21F4B3C1-2500-B759-DB81-6CF691F3D939}" = AMD Catalyst Install Manager
"{2228A1E2-4538-EEA7-03C1-D839FCC2E794}" = CCC Help Polish
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{2875FA2F-D329-FD8E-DFE5-F84374A92C26}" = CCC Help Korean
"{2CA7225D-CB12-462A-9DD1-50319E158BA5}" = Nero 11 PiP Effects Basic
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{32714B71-ECD4-FE25-AEB7-14600FF3D91B}" = CCC Help Norwegian
"{390757AA-8830-43DC-AEE0-4E5B6F8439EB}" = Nero SoundTrax 11 Help (CHM)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52D1C69A-7896-836A-E9AE-D61BDBC7414A}" = CCC Help Dutch
"{53F7746A-96AA-49A5-86B8-59989680DAC5}" = Nero Burning ROM 11 Help (CHM)
"{55C2143E-FBA5-442F-9AFA-726FF068F39D}" = Nero CoverDesigner 11 Help (CHM)
"{57F80ECF-E27C-4EEE-AB58-E971BACE2639}" = Nero Recode 11 Help (CHM)
"{5A212B2D-140D-46F4-B625-2D1CA5A00594}" = Nero 11 Kwik Themes Basic
"{5E398073-DE52-D123-2CC0-BE78AC32182E}" = ccc-utility
"{5F448866-CE78-D188-3028-11687C850D97}" = CCC Help German
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6294D49D-92E5-364A-ED97-2DF9C466469A}" = CCC Help Chinese Traditional
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS FaceLogon
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6AB2427E-A18F-4809-9A12-29F5EBABBB3A}" = Nero BackItUp 11 Help (CHM)
"{6EAFE93E-66E8-9CD8-4C34-F3F573FD9F63}" = CCC Help Hungarian
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{78C72857-D3F9-FEA1-6248-A21FA7DD0FDF}" = Catalyst Control Center Profiles Mobile
"{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}" = Nero WaveEditor 11
"{8150221C-8F7E-4997-AD4E-AFDEE7F4B410}" = Wireless Console 3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8706CFB5-6A8D-39FB-EACD-7EB1A822391C}" = CCC Help Russian
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{9193490D-5229-4FC4-9BB9-A6D63C09574A}" = High-Definition Video Playback
"{91AE1C7D-E06B-4232-363A-E96E117C9552}" = Catalyst Control Center Localization All
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{99234C9A-C148-8E1A-27E1-4C8D15C3BDDE}" = AMD Media Foundation Decoders
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A6E2DCF-AD8C-22CB-957D-5A29B324DC87}" = CCC Help French
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{9C69323B-7D12-5CDA-0BF1-BC3B38DD3847}" = CCC Help Danish
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A591144C-C049-105E-D715-154E1F980A04}" = CCC Help Spanish
"{A6E98880-3A57-1DA3-18D3-1F8C3901DE66}" = Catalyst Control Center Graphics Previews Common
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}" = ASUS USB Charger Plus
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}" = Nero BackItUp 11
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AB68E53C-7874-A696-88B0-3FC7F91F61A3}" = CCC Help Swedish
"{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{ABBD4BA9-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Polish
"{B1846721-A8E6-46C7-83B6-0DCF7ADB4267}" = Nero Burning ROM 11
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B76EDE91-BAE4-E20E-598C-5AACA63C4955}" = CCC Help English
"{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}" = Nero Kwik Media Help (CHM)
"{BE814218-3919-4EA3-868A-2F60BC135CB4}" = Nero Kwik Media
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11
"{C6B0D06D-7E83-8E13-195F-0EE6F8AE1A85}" = CCC Help Finnish
"{C75115A8-DEEC-B8C6-1FA6-617676DB4985}" = CCC Help Italian
"{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}" = ASUS FancyStart
"{CCE210DF-7EEF-4A76-A63C-3EB091FDB992}" = welcome
"{D01CE99A-8802-483C-A79F-298B691EB432}" = Nero RescueAgent 11 Help (CHM)
"{d08d9f98-1c78-4704-87e6-368b0023d831}" = RelevantKnowledge
"{D14A8CCD-53AF-D5AF-A64C-54BF78026DE6}" = CCC Help Thai
"{D2CBEFA4-F2D3-4E97-A171-8BFD6A31A5EC}" = Nero Express 11 Help (CHM)
"{D3694B69-6F8C-42D3-8A0A-EB2AB528C02C}" = Atheros Client Installation Program
"{D39F0676-163E-4595-A917-E28F99BBD4D2}" = ASUS AI Recovery
"{D4D66270-9147-4BDF-9946-FCA2B303AA8F}" = Nero ControlCenter 11 Help (CHM)
"{DC3CF43E-7276-CD29-B7E6-9AF6164402BE}" = CCC Help Chinese Standard
"{E10AAE4A-98B8-420A-BD93-E0520C23D624}" = Nero Express 11
"{E19EB18F-5DBC-E5F9-0F4A-E562DB9A57D6}" = CCC Help Japanese
"{E51BC4B0-EA5E-49CC-AF3B-93B5C627EC22}" = Nero 11 Effects Basic
"{EB8DED20-A887-4A9C-BB5A-F3E7523DFB44}" = Nero WaveEditor 11 Help (CHM)
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F021D637-BBDA-486B-96F0-225B62596C3B}" = Nero 11
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3743A2C-5D5F-4456-8F98-5DF36A954C50}" = Nero 11 Image Samples
"{F458788C-65EC-398F-7FFC-67D96A2EEE65}" = CCC Help Greek
"{F49EF443-B2BD-4F10-8A46-87AFCDB90EDD}" = Nero 11 Disc Menus Basic
"{F69FB940-5031-4FE8-AFAD-085802D0BF63}" = Nero Recode 11
"{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
"{FAC3C37E-EDAB-4F3A-A173-A7C70CC88F09}" = Nero Video 11 Help (CHM)
"{FD66AF34-C18A-4cea-8421-2F3B39E9B07E}" = YouTube Downloader Toolbar v4.9
"{FF44BCE5-5A18-4051-85F0-BC172D7B4695}" = Nero CoverDesigner 11
"{ORAHSS}.UninstallSuite" = Livebox
"1ClickDownload" = 1ClickDownload
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AIMP2at" = AIMP2: Audio Tools
"AIMP3" = AIMP3
"ASUS_Screensaver" = ASUS_Screensaver
"BabylonToolbar" = Babylon toolbar on IE
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"Dziobas Rar Player_is1" = Dziobas Rar Player 0.009.52
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESET Online Scanner" = ESET Online Scanner v3
"HEXelon MAX_is1" = HEXelon MAX 6.07
"Internet Download Manager" = Internet Download Manager
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.6.0 (Full)
"LastFM_is1" = Last.fm 1.5.4.27091
"LiveVDO plugin" = LiveVDO plugin 1.3
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 4.0.1 (x86 pl)" = Mozilla Firefox 4.0.1 (x86 pl)
"Mozilla Thunderbird (8.0)" = Mozilla Thunderbird (8.0)
"Mp3 Knife_is1" = Mp3 Knife 3.2
"NapiProjekt_is1" = NapiProjekt (2.0.0.2151)
"Nero - Burning Rom!UninstallKey" = Ahead Nero Burning ROM
"Opera 11.61.1250" = Opera 11.61
"QuickStores-Toolbar_is1" = QuickStores-Toolbar 1.1.0
"SpeedFan" = SpeedFan (remove only)
"Streamripper" = Streamripper (Remove only)
"SubEdit - Vista WMP Patch_is1" = SubEdit - Vista WMP Patch
"SubEdit-Player_is1" = SubEdit-Player
"TomTom HOME" = TomTom HOME 2.8.3.2458
"TomTomActivation" = [Activation] v0.3 Beta 3
"Unlocker" = Unlocker 1.9.1
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.1
"vShare.tv plugin" = vShare.tv plugin 1.3
"Winamp" = Winamp
"WinAVI Video Converter" = WinAVI Video Converter
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-1053722034-1444107339-3191604711-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Winamp Detect" = Detektor Winampa
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-05-08 07:51:54 | Computer Name = KOKOS-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-05-08 08:00:05 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: uTorrent.exe, wersja: 3.1.3.27167,
 sygnatura czasowa: 0x4fa47c07  Nazwa modułu powodującego błąd: uTorrent.exe, wersja:
 3.1.3.27167, sygnatura czasowa: 0x4fa47c07  Kod wyjątku: 0xc0000005  Przesunięcie błędu:
 0x00549116  Identyfikator procesu powodującego błąd: 0x1abc  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01cd2d121a865e12  Ścieżka aplikacji powodującej błąd: C:\Program
 Files\uTorrent\uTorrent.exe  Ścieżka modułu powodującego błąd: C:\Program Files\uTorrent\uTorrent.exe
Identyfikator
 raportu: 58fd618b-9905-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 08:21:45 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: uTorrent.exe, wersja: 3.1.3.27167,
 sygnatura czasowa: 0x4fa47c07  Nazwa modułu powodującego błąd: uTorrent.exe, wersja:
 3.1.3.27167, sygnatura czasowa: 0x4fa47c07  Kod wyjątku: 0xc0000005  Przesunięcie błędu:
 0x00549116  Identyfikator procesu powodującego błąd: 0x1e94  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01cd2d1520f84aeb  Ścieżka aplikacji powodującej błąd: C:\Program
 Files\uTorrent\uTorrent.exe  Ścieżka modułu powodującego błąd: C:\Program Files\uTorrent\uTorrent.exe
Identyfikator
 raportu: 5fdcc9f7-9908-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 08:39:20 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: uTorrent.exe, wersja: 3.1.3.27167,
 sygnatura czasowa: 0x4fa47c07  Nazwa modułu powodującego błąd: uTorrent.exe, wersja:
 3.1.3.27167, sygnatura czasowa: 0x4fa47c07  Kod wyjątku: 0xc0000005  Przesunięcie błędu:
 0x00549116  Identyfikator procesu powodującego błąd: 0xfd0  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01cd2d1795a53e81  Ścieżka aplikacji powodującej błąd: C:\Program
 Files\uTorrent\uTorrent.exe  Ścieżka modułu powodującego błąd: C:\Program Files\uTorrent\uTorrent.exe
Identyfikator
 raportu: d46643d1-990a-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 09:22:23 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Skype.exe, wersja: 5.5.0.124, sygnatura
 czasowa: 0x4e96a02b  Nazwa modułu powodującego błąd: Skype.exe, wersja: 5.5.0.124,
 sygnatura czasowa: 0x4e96a02b  Kod wyjątku: 0xc0000005  Przesunięcie błędu: 0x001a31a0
Identyfikator
 procesu powodującego błąd: 0x1798  Godzina uruchomienia aplikacji powodującej błąd:
 0x01cd2d1d92415754  Ścieżka aplikacji powodującej błąd: C:\Program Files\Skype\Phone\Skype.exe
Ścieżka
 modułu powodującego błąd: C:\Program Files\Skype\Phone\Skype.exe  Identyfikator raportu:
 d84bc3b8-9910-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 10:23:34 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: connectivitymanager.exe, wersja:
 1.1.78.739, sygnatura czasowa: 0x484d79a6  Nazwa modułu powodującego błąd: HandlerAuth.dll,
 wersja: 1.1.78.739, sygnatura czasowa: 0x484d79d1  Kod wyjątku: 0xc0000005  Przesunięcie
 błędu: 0x000039b3  Identyfikator procesu powodującego błąd: 0x1f2c  Godzina uruchomienia
 aplikacji powodującej błąd: 0x01cd2d1d9ca1ec92  Ścieżka aplikacji powodującej błąd:
 C:\Program Files\Livebox\connectivity\connectivitymanager.exe  Ścieżka modułu powodującego
 błąd: C:\Program Files\Livebox\CONNEC~1\HandlerAuth.dll  Identyfikator raportu: 646e4f47-9919-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 10:23:40 | Computer Name = KOKOS-PC | Source = VSS | ID = 8194
Description = 
 
Error - 2012-05-08 10:24:48 | Computer Name = KOKOS-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Fuel.Service.exe, wersja: 1.0.0.0,
 sygnatura czasowa: 0x4eb0b491  Nazwa modułu powodującego błąd: ntdll.dll, wersja:
 6.1.7601.17514, sygnatura czasowa: 0x4ce7b96e  Kod wyjątku: 0xc0000005  Przesunięcie
 błędu: 0x00032239  Identyfikator procesu powodującego błąd: 0x7f0  Godzina uruchomienia
 aplikacji powodującej błąd: 0x01cd2d10e4099559  Ścieżka aplikacji powodującej błąd:
 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe  Ścieżka modułu powodującego
 błąd: C:\Windows\SYSTEM32\ntdll.dll  Identyfikator raportu: 90554474-9919-11e1-8f2c-742f689ffe09
 
Error - 2012-05-08 10:26:41 | Computer Name = KOKOS-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-05-08 10:41:05 | Computer Name = KOKOS-PC | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 2012-05-04 10:03:33 | Computer Name = KOKOS-PC | Source = BugCheck | ID = 1001
Description = 
 
Error - 2012-05-04 10:04:06 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-06 04:42:46 | Computer Name = KOKOS-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 10:41:21 na ?2012-?05-?06 było 
nieoczekiwane.
 
Error - 2012-05-06 04:43:21 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-08 03:20:41 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-08 07:34:34 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-08 07:50:08 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7034
Description = Usługa AMD External Events Utility niespodziewanie zakończyła pracę.
 Wystąpiło to razy: 1.
 
Error - 2012-05-08 07:51:53 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-08 10:26:21 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
Error - 2012-05-08 10:41:00 | Computer Name = KOKOS-PC | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
 z usługą France Telecom Routing Table Service.
 
 
< End of report >