OTL Extras logfile created on: 2012-07-07 10:01:01 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Users\Iwona\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,50 Gb Total Physical Memory | 0,81 Gb Available Physical Memory | 53,87% Memory free
3,00 Gb Paging File | 2,37 Gb Available in Paging File | 79,08% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,51 Gb Total Space | 5,16 Gb Free Space | 17,47% Space Free | Partition Type: NTFS
Drive D: | 44,92 Gb Total Space | 19,45 Gb Free Space | 43,30% Space Free | Partition Type: NTFS
 
Computer Name: KOMP1 | User Name: Iwona | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-2737721524-1651333102-3102537934-1000\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( )
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallDisableNotify" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03719793-A5C3-4D08-9666-1A64C77930F6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{1A656A47-549F-4ECA-B580-09D95F36420D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{1D919044-9C58-4B0D-A70F-24B372E490C4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{47458F2B-7D36-49C3-8982-2CB179FD1351}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{5B01914B-6BBE-4A27-968A-AD0C7DDFDC87}" = lport=445 | protocol=6 | dir=in | app=system | 
"{6360DEEB-3A6B-4228-831C-F71E1F3825BC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{64A69D27-C002-4D3C-B4C1-1648BDBCA4E5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{66402ECE-D5CD-49EF-A736-89E3046A1BB4}" = rport=138 | protocol=17 | dir=out | app=system | 
"{69EBF0AF-8865-4EDE-9AF9-AF81766E6D5A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{6A320AC7-9106-430D-9943-D532C751FFDD}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{729D685D-737A-44AC-AEDF-37DF83E636D4}" = lport=138 | protocol=17 | dir=in | app=system | 
"{7F10CC74-7F0B-4E88-9207-33E9CE54A16E}" = rport=445 | protocol=6 | dir=out | app=system | 
"{9B775D69-1B29-4F69-B81B-6320B8A20ACD}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{9C250481-3352-49B9-8915-D9BCB512FEB1}" = rport=139 | protocol=6 | dir=out | app=system | 
"{D005E5A5-F338-42B0-96A3-CA17D97E7DD7}" = lport=139 | protocol=6 | dir=in | app=system | 
"{D27986DE-0441-4E3C-A1B4-9C5E84DE9A51}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{D2A6D93F-6885-4BE4-BC77-B3E341CD6189}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{D3BF3329-0E1A-4930-8C6D-509AE5DF08E3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{DFFF3ED5-7E4D-43F0-BC28-ECD2EE05DB7F}" = rport=137 | protocol=17 | dir=out | app=system | 
"{E3DA5CDD-1C5B-426F-B4A6-9476D13A4E16}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{E5FD8BEE-9BF5-4DA5-ADFE-6DB22B66204B}" = lport=137 | protocol=17 | dir=in | app=system | 
"{F4093A8D-628F-4DA3-BCA7-0437C435E29D}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{FAAE9F70-5F10-4D89-8A9A-EFDEF41E8DE8}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{FC2E1462-71E5-4862-A809-4B623B17D369}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{010DFB1E-611F-482A-9199-09B1C933AF04}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{08633F51-E185-4F5F-81A6-0A6F947889C0}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{0C9C438B-816D-4B70-85E3-94FA6D602707}" = protocol=6 | dir=in | app=c:\users\iwona\desktop\miśkaa\originals\audioconverter_setup.exe | 
"{0E681696-AE4B-40B6-879C-098611984D53}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0F2ACD3C-4101-4540-B209-DDB818B692F9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{15DE2467-0515-495C-8474-0B3AB8B2E6D0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{16F94346-42FB-43F6-B6F6-52BA6D2371E8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{1AAE02E9-481D-464B-9E53-A1BC9B70795E}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{2A83F894-E131-444B-8E09-04BB5E617071}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{2C7F44E5-6F63-4963-87EB-EDD7C85B41DB}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{34B04DA3-00D1-443C-8DDC-52EB94F4231B}" = protocol=17 | dir=in | app=c:\program files\yourfiledownloader\yourfile.exe | 
"{3907B2C0-C226-44FC-9999-919022832825}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{3AC73004-375C-40F3-A40E-FE10B869144D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4AB981B5-9BA1-4658-8535-DBF4EF99034D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4BE13B2B-8A22-420E-B089-2C65FD0168A3}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{4E6CF1B7-E804-453A-9C4A-85042D1533AB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{50D8C65E-E4BC-46B1-845C-FDCF30C41DA3}" = protocol=17 | dir=in | app=c:\users\iwona\appdata\local\temp\is799009782\ainstaller.exe | 
"{51FBB492-0062-4E17-8E52-ABF19F47330D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{520BD811-C4A1-45D3-9496-C9B12EBF8FE7}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{53F07318-6507-4F26-B130-FFDEEBE90940}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{59DAB998-2693-490C-A67F-8FF9BC9454D9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{686D8170-8B38-4D27-A761-2C83588C71A1}" = protocol=17 | dir=in | app=c:\program files\yourfiledownloader\downloader.exe | 
"{6FA82CA2-D909-40B4-95B3-CBC235939330}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{712A82A3-652B-4253-A050-1123E58315C8}" = protocol=17 | dir=in | app=c:\users\iwona\desktop\miśkaa\originals\audioconverter_setup.exe | 
"{78FFFA34-F2FA-486E-9F31-00E9FB8DCB80}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{79457896-893A-4A3C-83D2-72A6C724765F}" = protocol=17 | dir=in | app=d:\program files\gameforge4d\elsword_pl\data\x2.exe | 
"{7AD1C479-2FF7-4E45-8D0B-C569626C361A}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{8D57DB0E-1A32-4AF8-B974-D684026ADD50}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{92985970-935C-43C2-B084-F1DF0BBDEBCD}" = protocol=6 | dir=in | app=c:\program files\yourfiledownloader\downloader.exe | 
"{982A7AFA-8C91-44D6-83C0-927E43A3C53A}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{9C3116CC-0CA0-4446-B665-AAC11D7F3045}" = protocol=6 | dir=in | app=d:\nowy folder\nowy folder\nowy folder\martaa  . !\sweetimsetup.exe | 
"{9DE51147-E5BB-49CB-BB64-0EED45E6778B}" = protocol=6 | dir=in | app=c:\users\iwona\appdata\local\temp\is799009782\ainstaller.exe | 
"{9E47DB2C-641C-4DAC-8A2B-D6C7192D2CF6}" = protocol=17 | dir=in | app=d:\nowy folder\nowy folder\nowy folder\martaa  . !\sweetimsetup.exe | 
"{A54E5C1D-6CF4-45BC-888B-48F689D16EF5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{AD967B89-6E61-407A-B59E-A13BBD4BF581}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{AE61DFE3-2F78-400D-B785-83ED86A48254}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B0B5E631-8D24-438D-B82A-33B5A1874CD1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C82731B4-438A-4CA1-8A59-E905D5862257}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{D55AAFD2-5361-45B8-B93C-C12F8D46FC36}" = protocol=6 | dir=in | app=c:\program files\yourfiledownloader\yourfile.exe | 
"{DCDF4DD5-081F-46B7-BA95-FD7248031CAA}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{E1E7FD5C-0EFE-4ECC-B957-B2E9AF6805A7}" = protocol=6 | dir=in | app=d:\program files\gameforge4d\elsword_pl\data\x2.exe | 
"{EAFC8820-F2BC-48DC-B76E-E470D9070E4F}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{ED5DD6EA-A0B4-4986-8BD0-AB8273C64FC2}" = protocol=6 | dir=out | app=system | 
"{F4C01C0F-F77B-4AF0-BDC3-080937038491}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{F4D66365-EE9D-46C0-95A8-0E2544ABE8C7}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"TCP Query User{11BA0D08-7968-462F-A11F-1AEE9DAD8115}D:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=d:\program files\wapster\wapster aqq\aqq.exe | 
"TCP Query User{1EA8BEEF-B4B5-4B19-9424-80B7289EFB8D}D:\program files\city interactive\esr\game.exe" = protocol=6 | dir=in | app=d:\program files\city interactive\esr\game.exe | 
"TCP Query User{345838A4-31FB-418E-97AE-6FF27808972D}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | 
"TCP Query User{3E2A7654-03C6-47DD-A3B6-B95C8023C909}C:\users\iwona\appdata\local\temp\rar$ex00.828\blobby\volley.exe" = protocol=6 | dir=in | app=c:\users\iwona\appdata\local\temp\rar$ex00.828\blobby\volley.exe | 
"TCP Query User{3F85BF08-B707-4E0D-8A37-1A2468005440}C:\users\iwona\appdata\local\temp\rar$ex00.484\blobby\volley.exe" = protocol=6 | dir=in | app=c:\users\iwona\appdata\local\temp\rar$ex00.484\blobby\volley.exe | 
"TCP Query User{570E4129-2C92-4BEC-BFC5-65627C658795}C:\program files\city interactive\esr\game.exe" = protocol=6 | dir=in | app=c:\program files\city interactive\esr\game.exe | 
"TCP Query User{7CFD6963-12D7-4987-A7B9-F3BA8A82BCBE}D:\program files\kolekcja klasyki\splinter cell chaos theory\versus\system\scct_versus.ex" = protocol=6 | dir=in | app=d:\program files\kolekcja klasyki\splinter cell chaos theory\versus\system\scct_versus.ex | 
"TCP Query User{A5508F57-4F2D-46DB-BDFB-B412716E7725}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"TCP Query User{A5A4583B-BB9B-4376-8433-34B87C9BF6D0}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{B4E6E471-AC0C-4217-A3E0-203A8DC24389}D:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=d:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{D87F2338-FDBC-4E77-AB64-01E608A9FFF0}C:\users\iwona\appdata\local\temp\cprogram filesopera\operaupgrader.exe" = protocol=6 | dir=in | app=c:\users\iwona\appdata\local\temp\cprogram filesopera\operaupgrader.exe | 
"TCP Query User{DDC4439B-B9DC-4709-9F9D-AE43BC957CC8}D:\program files\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=d:\program files\nowe gadu-gadu\gg.exe | 
"TCP Query User{E544DF72-E80F-454B-A247-1B1E2D20689A}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{F1DEA623-70F1-40B8-B369-AD0E99B117DB}D:\program files\kolekcja klasyki\splinter cell chaos theory\system\splintercell3.exe" = protocol=6 | dir=in | app=d:\program files\kolekcja klasyki\splinter cell chaos theory\system\splintercell3.exe | 
"TCP Query User{FF039557-BC89-4CA3-A989-99451E47D1F0}D:\runes_of_magic_4_0_1_2430_eu_slim.exe" = protocol=6 | dir=in | app=d:\runes_of_magic_4_0_1_2430_eu_slim.exe | 
"UDP Query User{05AE9029-BE15-48B3-86B1-D74ECDE18FEE}D:\program files\city interactive\esr\game.exe" = protocol=17 | dir=in | app=d:\program files\city interactive\esr\game.exe | 
"UDP Query User{13B25861-0461-4A61-8264-9C9E1CCE873B}C:\users\iwona\appdata\local\temp\cprogram filesopera\operaupgrader.exe" = protocol=17 | dir=in | app=c:\users\iwona\appdata\local\temp\cprogram filesopera\operaupgrader.exe | 
"UDP Query User{172ED3CF-AD72-44C7-B46A-A2592F8DB608}C:\users\iwona\appdata\local\temp\rar$ex00.828\blobby\volley.exe" = protocol=17 | dir=in | app=c:\users\iwona\appdata\local\temp\rar$ex00.828\blobby\volley.exe | 
"UDP Query User{31DF2D8F-75CB-4431-A329-22B5F3EDE35B}D:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=d:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{32FC9A91-6C18-44DE-975E-1F53A56ED329}D:\program files\kolekcja klasyki\splinter cell chaos theory\system\splintercell3.exe" = protocol=17 | dir=in | app=d:\program files\kolekcja klasyki\splinter cell chaos theory\system\splintercell3.exe | 
"UDP Query User{3ADF24B3-8177-462D-85A8-729FC38C9040}D:\runes_of_magic_4_0_1_2430_eu_slim.exe" = protocol=17 | dir=in | app=d:\runes_of_magic_4_0_1_2430_eu_slim.exe | 
"UDP Query User{49BC4F92-0FBF-4CF3-8502-EC03E504C4A1}D:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=d:\program files\wapster\wapster aqq\aqq.exe | 
"UDP Query User{5BFC1B56-5E3D-4496-B124-AA2021DA42AC}D:\program files\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=d:\program files\nowe gadu-gadu\gg.exe | 
"UDP Query User{88CB23F7-CE5E-4D2B-B681-4EF745F47A83}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | 
"UDP Query User{BFC85CB7-A561-4F4A-9C54-1748BF052B70}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{D6E5B515-7F54-4B7A-A3A4-7DB2D082C27E}C:\users\iwona\appdata\local\temp\rar$ex00.484\blobby\volley.exe" = protocol=17 | dir=in | app=c:\users\iwona\appdata\local\temp\rar$ex00.484\blobby\volley.exe | 
"UDP Query User{D80573E4-030E-460F-A95F-7782CBEEAE12}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{E34532BE-B1E8-47F5-B8E6-19B5CAF8CCE5}D:\program files\kolekcja klasyki\splinter cell chaos theory\versus\system\scct_versus.ex" = protocol=17 | dir=in | app=d:\program files\kolekcja klasyki\splinter cell chaos theory\versus\system\scct_versus.ex | 
"UDP Query User{EDABC732-F461-4702-ACB9-9F5BB1D8DC8B}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"UDP Query User{F7192C9E-F57F-4CC7-A622-4FDB14B9FAE5}C:\program files\city interactive\esr\game.exe" = protocol=17 | dir=in | app=c:\program files\city interactive\esr\game.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{19A492A0-888F-44A0-9B21-D91700763F62}" = Catalyst Control Center - Branding
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 26
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DACC3F4-2007-A5EE-5FFF-129338EC89E6}" = CCC Help English
"{41A01180-D9FD-3428-9FD6-749F4C637CBF}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F7B7598-88EA-4442-A54E-65EADCF06D97}" = ChomikBox
"{6603BC18-EEF7-7936-77BF-76861115E674}" = Catalyst Control Center Graphics Previews Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{840D2B01-6A05-1D0D-DCD2-59567DE0E0BC}" = AMD Fuel
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CE4B7FA-8626-316B-B483-FCEF49E27430}" = AMD Catalyst Install Manager
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A6142247-58B1-40C7-B8E0-965C1A8026A5}" = ACDSee Photo Editor 2008
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1)
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{C373F7C4-05D2-4047-96D1-6AF30661C6AA}" = PC Connectivity Solution
"{C441297F-C9F2-4177-9D5F-1B10F0358E32}" = Opera 10.54
"{CC5FA098-131A-5648-31D5-825692C72B2C}" = AMD VISION Engine Control Center
"{F940D29F-DDAB-390B-1307-B132C693DD39}" = Catalyst Control Center InstallProxy
"{F99F26DF-CCDE-F5F6-02AD-ABA8AAB51ADE}" = ccc-utility
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"avast" = avast! Free Antivirus
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Euro Truck Simulator_is1" = Euro Truck Simulator
"Gadu-Gadu 10" = Gadu-Gadu 10
"GridinSoft Trojan Killer" = Trojan Killer
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.8.0 (Full)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Mozilla Firefox 5.0 (x86 pl)" = Mozilla Firefox 5.0 (x86 pl)
"NVIDIA Drivers" = NVIDIA Drivers
"Opera 11.61.1250" = Opera 11.61
"PhotoScape" = PhotoScape
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-2737721524-1651333102-3102537934-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GG" = GG
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-07-05 08:06:11 | Computer Name = komp1 | Source = Application Hang | ID = 1002
Description = Program opera.exe w wersji 11.62.1347.0 zatrzymał interakcję z systemem
 Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
 dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
 akcji.    Identyfikator procesu: 8d0    Godzina rozpoczęcia: 01cd5a8ba4299893    Godzina zakończenia:
 52    Ścieżka aplikacji: C:\Program Files\Opera\opera.exe    Identyfikator raportu: cd98c5eb-c699-11e1-aa79-0050bad4c47c

 
Error - 2012-07-06 17:25:26 | Computer Name = komp1 | Source = System Restore | ID = 8193
Description = 
 
Error - 2012-07-07 01:45:48 | Computer Name = komp1 | Source = VSS | ID = 18
Description = 
 
Error - 2012-07-07 01:45:48 | Computer Name = komp1 | Source = VSS | ID = 8193
Description = 
 
Error - 2012-07-07 01:45:48 | Computer Name = komp1 | Source = System Restore | ID = 8193
Description = 
 
Error - 2012-07-07 02:25:13 | Computer Name = komp1 | Source = VSS | ID = 18
Description = 
 
Error - 2012-07-07 02:25:38 | Computer Name = komp1 | Source = VSS | ID = 18
Description = 
 
Error - 2012-07-07 02:25:38 | Computer Name = komp1 | Source = VSS | ID = 8193
Description = 
 
Error - 2012-07-07 02:25:38 | Computer Name = komp1 | Source = System Restore | ID = 8193
Description = 
 
Error - 2012-07-07 03:46:46 | Computer Name = komp1 | Source = Microsoft-Windows-CAPI2 | ID = 512
Description = Zainicjowanie obiektu System Writer kopii zapasowej VSS przez Usługi
 kryptograficzne nie powiodło się.  Details: Could not query the status of the EventSystem
 service.  System Error: Trwa proces zamykania systemu.  .
 
[ OSession Events ]
Error - 2010-07-22 15:17:51 | Computer Name = komp1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 32560
 seconds with 5160 seconds of active time.  This session ended with a crash.
 
Error - 2010-07-31 15:23:05 | Computer Name = komp1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 51
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 2010-08-01 16:35:55 | Computer Name = komp1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 51
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 2011-01-08 15:14:42 | Computer Name = komp1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 164
 seconds with 120 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 2012-07-07 03:59:41 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:01:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:01:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:01:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:06:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:06:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:06:48 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:08:55 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:08:55 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2012-07-07 04:08:55 | Computer Name = komp1 | Source = Service Control Manager | ID = 7001
Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie 
można uruchomić z powodu następującego błędu:   %%1068
 
 
< End of report >