OTL Extras logfile created on: 2012-08-13 22:52:33 - Run 1 OTL by OldTimer - Version 3.2.57.0 Folder = C:\Users\Macocha\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,60 Gb Total Physical Memory | 3,10 Gb Available Physical Memory | 86,03% Memory free 7,21 Gb Paging File | 6,72 Gb Available in Paging File | 93,29% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 87,79 Gb Total Space | 50,72 Gb Free Space | 57,77% Space Free | Partition Type: NTFS Drive D: | 209,12 Gb Total Space | 88,32 Gb Free Space | 42,23% Space Free | Partition Type: NTFS Drive I: | 7,39 Gb Total Space | 7,39 Gb Free Space | 99,99% Space Free | Partition Type: FAT32 Computer Name: MACOCHA-KOMP | User Name: Macocha | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) [HKEY_USERS\S-1-5-21-2140699625-271330206-3021556137-1000\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{39B79F28-879C-49A7-B57F-84E122C63596}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3D8ED593-46D0-44BA-8E6E-AE05CF0A07E9}" = lport=139 | protocol=6 | dir=in | app=system | "{46AA8EBB-F0D0-4727-BE4F-906DA99C7A5F}" = rport=138 | protocol=17 | dir=out | app=system | "{62522C5F-54A8-4134-88E9-B55AF348DB3A}" = rport=139 | protocol=6 | dir=out | app=system | "{8249E280-C08A-426B-B1EB-FF00469A5C30}" = rport=137 | protocol=17 | dir=out | app=system | "{8EE6B21D-8F4A-46D8-9BB1-D5ED8CA2639C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{98F7FE10-55B3-4C66-908B-B60D3D39880D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{AC4A83AA-A886-44DE-9B4B-2C88D8C25F47}" = lport=137 | protocol=17 | dir=in | app=system | "{B5AACB1D-D6E0-48DE-BF2A-3825D7ADDE50}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C3CF9AA6-8123-4657-A91D-CEA79412E0B4}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{E5320A43-9A1B-4F49-91BF-08CDC5EC9542}" = rport=445 | protocol=6 | dir=out | app=system | "{F47AF3F3-5756-4F86-8BB8-B5581B9F5108}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{FA64A2F0-0520-4A6F-AFC3-048DCDE84D72}" = lport=445 | protocol=6 | dir=in | app=system | "{FF70BF14-A455-4897-82D0-281E59CBC348}" = lport=138 | protocol=17 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0349BAD4-145B-41E1-B185-E3DAE3EEE825}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{11032B9B-C5E5-4D6B-9C1E-E99459F97917}" = protocol=17 | dir=in | app=c:\program files (x86)\sweetim\communicator\sweetpacksupdatemanager.exe | "{130F2DED-FFD3-41CC-98D2-0DB0716E3B99}" = protocol=6 | dir=in | app=c:\program files (x86)\sweetim\communicator\sweetpacksupdatemanager.exe | "{13C9FF2A-E43E-4828-83E2-55F58F51AD7E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{21460A34-FB01-462B-819A-C8CE520D2F68}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{45E13E80-CA27-475F-B63F-7FAD611E210A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{4CEAFE4C-A897-475D-A718-B68A4EA14EF1}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | "{4E42FAA9-E78F-4ABD-8E39-8E6C3346507A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{4FEA5E3D-3F0A-4191-A656-C5511A357828}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{64B508DB-5704-41B5-B986-EC412649FD03}" = protocol=17 | dir=in | app=c:\windows\syswow64\msiexec.exe | "{6C299989-406B-4122-BCBD-8764AEDF8AAD}" = protocol=6 | dir=in | app=d:\!_download\sweetimsetup(2).exe | "{7A148C70-BCE0-4CFC-B4C6-E3331A60569A}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{8D9CC28D-CA69-4440-9D35-3987196ED84B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{BCB6F639-DCC0-44CD-9CD5-BD4B1D54DBC8}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{C7BA64A0-A750-4067-B502-21C2A53B329F}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | "{DC4E5407-70A2-48EA-99C3-97EA06AB5032}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{E52C700E-4D6F-4310-8F26-4746974979E1}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{EF5169FC-848E-4E4D-BDD7-E3404C3F9633}" = protocol=6 | dir=in | app=c:\windows\syswow64\msiexec.exe | "{F03E84BB-0914-479E-BCB5-611BA20287ED}" = protocol=17 | dir=in | app=d:\!_download\sweetimsetup(2).exe | "{F70DBC5A-4309-46B2-A043-E47DA7D6E76A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "TCP Query User{204E6107-B26D-42E8-AFDF-A7AC2A5526BF}D:\programy\jdownloader_portable\commonfiles\java\bin\javaw.exe" = protocol=6 | dir=in | app=d:\programy\jdownloader_portable\commonfiles\java\bin\javaw.exe | "TCP Query User{206907B1-3106-464E-9CF6-6BAF90D54380}C:\windows\syswow64\dpnsvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dpnsvr.exe | "TCP Query User{4ADF6F2C-CB05-4D07-8D6A-3F61220944FE}C:\program files (x86)\bitlord\bitlord.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitlord\bitlord.exe | "TCP Query User{5AB84D70-931D-480C-87FB-708541B5DF04}D:\gry\metin2sf\metin2client.bin" = protocol=6 | dir=in | app=d:\gry\metin2sf\metin2client.bin | "TCP Query User{69B9D7B8-4AEB-4676-A449-03B8E41335F0}D:\gry\metin2_shine\shain.pl.exe" = protocol=6 | dir=in | app=d:\gry\metin2_shine\shain.pl.exe | "TCP Query User{6AB2E00E-81BA-43FA-A0BC-F2A31443F8A6}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "TCP Query User{75C636DD-E71A-4F3A-BE37-9C84DBE1F495}F:\_gry\metin2\metin2client.bin" = protocol=6 | dir=in | app=f:\_gry\metin2\metin2client.bin | "TCP Query User{7F70B6BC-DA09-4230-BCE5-5A0FDA2C648D}C:\program files (x86)\intellidownload\tdl\easydownload.exe" = protocol=6 | dir=in | app=c:\program files (x86)\intellidownload\tdl\easydownload.exe | "TCP Query User{8C6281FF-641A-4D15-B160-DCBC938722EE}D:\gry\metin5.s2.07.02.2011\metin5_s2.exe" = protocol=6 | dir=in | app=d:\gry\metin5.s2.07.02.2011\metin5_s2.exe | "TCP Query User{93D3AB53-EDEA-4529-8737-F0AD7892443F}D:\gry\gothic2\_work\tools\zspy\zspy.exe" = protocol=6 | dir=in | app=d:\gry\gothic2\_work\tools\zspy\zspy.exe | "TCP Query User{9760B62C-46AC-4927-8CC8-DD2DCD4C0E5C}D:\gry\postal2stp\system\postal2.exe" = protocol=6 | dir=in | app=d:\gry\postal2stp\system\postal2.exe | "TCP Query User{AC63C338-C12A-49CF-A331-66B841EB3E2C}D:\gry\warcraft3\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\gry\warcraft3\warcraft iii\war3.exe | "TCP Query User{B1582A08-40BE-4051-8460-C7A06475EE74}D:\gry\metin2\metin2client.bin" = protocol=6 | dir=in | app=d:\gry\metin2\metin2client.bin | "TCP Query User{B705A7AE-3C98-41D4-9565-2427D73FB0E0}D:\gry\metin nowy\game.exe" = protocol=6 | dir=in | app=d:\gry\metin nowy\game.exe | "TCP Query User{BB266007-B7B7-4B56-85B9-EEACA6E0BAA9}D:\gry\ut2003\system\ut2003.exe" = protocol=6 | dir=in | app=d:\gry\ut2003\system\ut2003.exe | "TCP Query User{BFD80168-7CF6-4633-8C3D-30044E32D489}D:\!_download\cyberlink powerdvd 11\cyberlink powerdvd 11.dat" = protocol=6 | dir=in | app=d:\!_download\cyberlink powerdvd 11\cyberlink powerdvd 11.dat | "TCP Query User{D0241DF5-5C79-48C2-B156-CFA530735BE6}D:\gry\herows\heroes4p.exe" = protocol=6 | dir=in | app=d:\gry\herows\heroes4p.exe | "TCP Query User{DD3B7CEB-0F1D-4CA4-80E6-AC1CC911580F}D:\gry\metin2sf\metin2client.bin" = protocol=6 | dir=in | app=d:\gry\metin2sf\metin2client.bin | "TCP Query User{E6D9B859-57A6-422F-A92C-64F2FB78AA74}D:\gry\metin2_xworld\x-world.exe" = protocol=6 | dir=in | app=d:\gry\metin2_xworld\x-world.exe | "UDP Query User{0D1DA554-FF77-4E8F-B8A9-A8F956A8DBCB}D:\gry\metin2_shine\shain.pl.exe" = protocol=17 | dir=in | app=d:\gry\metin2_shine\shain.pl.exe | "UDP Query User{152CDC39-C680-4FC5-B65B-5E3CFAA67B9A}D:\gry\metin2\metin2client.bin" = protocol=17 | dir=in | app=d:\gry\metin2\metin2client.bin | "UDP Query User{27203EC7-47B0-45A4-BCEF-CA15C56D4D43}D:\gry\gothic2\_work\tools\zspy\zspy.exe" = protocol=17 | dir=in | app=d:\gry\gothic2\_work\tools\zspy\zspy.exe | "UDP Query User{27BDD4BB-E9E6-402E-89C1-B59CE0C65986}D:\gry\metin nowy\game.exe" = protocol=17 | dir=in | app=d:\gry\metin nowy\game.exe | "UDP Query User{2E9F5452-F525-47FC-B5B6-F1F4038CA1EC}D:\programy\jdownloader_portable\commonfiles\java\bin\javaw.exe" = protocol=17 | dir=in | app=d:\programy\jdownloader_portable\commonfiles\java\bin\javaw.exe | "UDP Query User{39D4EE76-2B29-4135-B1C8-C18998094642}F:\_gry\metin2\metin2client.bin" = protocol=17 | dir=in | app=f:\_gry\metin2\metin2client.bin | "UDP Query User{516155D1-7AC9-44D5-AC7C-44BAE01BF6C2}D:\gry\ut2003\system\ut2003.exe" = protocol=17 | dir=in | app=d:\gry\ut2003\system\ut2003.exe | "UDP Query User{5281A4C0-DD36-497D-9C1B-18287C462810}D:\gry\metin2sf\metin2client.bin" = protocol=17 | dir=in | app=d:\gry\metin2sf\metin2client.bin | "UDP Query User{75D50197-3A48-42A9-B82D-8A77A8BCDF5F}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{7BF45DB2-C565-4555-93F3-F3AAF60E2BC7}D:\!_download\cyberlink powerdvd 11\cyberlink powerdvd 11.dat" = protocol=17 | dir=in | app=d:\!_download\cyberlink powerdvd 11\cyberlink powerdvd 11.dat | "UDP Query User{85684E98-968E-4C0C-BCAB-800A7F92BBC6}C:\program files (x86)\intellidownload\tdl\easydownload.exe" = protocol=17 | dir=in | app=c:\program files (x86)\intellidownload\tdl\easydownload.exe | "UDP Query User{89F8DF3A-3CF9-4D0E-A7AE-99583DA36258}D:\gry\metin2sf\metin2client.bin" = protocol=17 | dir=in | app=d:\gry\metin2sf\metin2client.bin | "UDP Query User{BCAE32C6-CB29-4238-993C-43E8275ABE07}D:\gry\warcraft3\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\gry\warcraft3\warcraft iii\war3.exe | "UDP Query User{CDFA0E2B-DBFC-4D8A-9DD8-EE7F1905D54B}C:\windows\syswow64\dpnsvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dpnsvr.exe | "UDP Query User{D982F186-3A73-4E7A-B618-96F671D91347}C:\program files (x86)\bitlord\bitlord.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitlord\bitlord.exe | "UDP Query User{DA7BC4D5-2A2D-447C-8F01-3AF0888E6708}D:\gry\herows\heroes4p.exe" = protocol=17 | dir=in | app=d:\gry\herows\heroes4p.exe | "UDP Query User{DA7C5001-4EA5-4D8C-AB95-505A604D9185}D:\gry\metin2_xworld\x-world.exe" = protocol=17 | dir=in | app=d:\gry\metin2_xworld\x-world.exe | "UDP Query User{E6E176B3-EDE3-4E99-B19F-64CDA21640E9}D:\gry\postal2stp\system\postal2.exe" = protocol=17 | dir=in | app=d:\gry\postal2stp\system\postal2.exe | "UDP Query User{E81AE15A-2164-446D-9C95-B3926EC46516}D:\gry\metin5.s2.07.02.2011\metin5_s2.exe" = protocol=17 | dir=in | app=d:\gry\metin5.s2.07.02.2011\metin5_s2.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{188080EF-C0B5-FBCC-3CD1-074C917E0DBB}" = ccc-utility64 "{336D0C35-8A85-403a-B9D2-65C292C39087}_is1" = Web Assistant 2.0.0.445 "{42C76910-6CD4-EC68-FB78-0D3DE411AD63}" = ATI Catalyst Install Manager "{4485075E-F429-5E8D-452E-E7C0BDA12A19}" = ATI AVIVO64 Codecs "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 1.10.02 "{9423DCA0-FC4A-DD5C-1285-651E161B4EE3}" = AMD Media Foundation Decoders "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{AE3857CE-9EAC-5077-9EBC-F9587D633224}" = AMD Fuel "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit "CNXT_AUDIO_HDA" = Conexant HD Audio "EA12B1FB53CE4E387C31A85236C41EF559B5E392" = Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0141D498-16DA-4221-A529-1D7A64BE8B05}" = OpenOffice.org 3.3 "{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III "{092E59AB-28A8-75E5-BB0B-B9C6ED8748E9}" = CCC Help Swedish "{097E024D-BE30-4D95-B5F3-B6AE9C1568D4}" = PowerXpressHybrid "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31 "{28ABE740-47F3-441B-9437-852F6A64EFF8}" = Lenovo_Wireless_Driver "{2C663DDE-2534-DA14-1E2B-DFA50E8967A4}" = CCC Help Dutch "{2F686923-3566-1B63-0414-68804A2D5127}" = CCC Help Finnish "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver "{31211E28-2740-ED67-B93A-9ABAD6E67F6F}" = CCC Help Portuguese "{34D1C429-D8F0-6CE9-186B-6B9C3EF7BB8D}" = Catalyst Control Center Graphics Previews Common "{3F3A0CDA-F5F1-7259-4CF9-D879E800EA2A}" = CCC Help Chinese Standard "{426FA60E-1A36-5D4C-9240-A7809B8B5E38}" = CCC Help Norwegian "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E396741-EAF9-4E21-9B4F-B16DEFA531A6}" = Catalyst Control Center - Branding "{505AFDC0-5E72-4928-8368-5DEA385E3647}" = CorelDRAW Graphics Suite 12 "{514272C3-F7DD-A659-7956-D39D0C6A12B1}" = Catalyst Control Center Profiles Mobile "{59042421-E167-9211-2E99-192BCB6D170B}" = CCC Help Turkish "{5964B563-30BF-4F15-2844-5BD267609D0B}" = CCC Help Russian "{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE "{5E32E456-BE4B-9865-6579-AF24339862C6}" = CCC Help English "{6162F499-DBD2-8B3A-9CB8-CC0CE9D1E9D2}" = CCC Help Chinese Traditional "{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver "{673A9A60-C409-A6D1-0327-9CFE08B31B9C}" = CCC Help Spanish "{6C50974F-2605-0F92-E226-6B701471CBDE}" = CCC Help Czech "{6DA399FC-350F-41AC-8CA6-B9F8496753BE}_is1" = Media Finder 1.0.9.27 "{6FB6D550-DDC4-4996-9CDF-91C34F0A4C4A}" = Gothic II - Noc Kruka "{70CC1270-E6C7-E78A-D1F0-9A981A46DC2F}" = CCC Help Polish "{7565761B-ED80-C32B-0EF9-403125465C52}" = CCC Help French "{758A4269-70E5-4B11-B419-F692882408A9}" = Gothic "{75BA6802-2766-FED3-85D8-60A7AA4346E7}" = CCC Help Greek "{7683B745-6060-41FD-AA75-0BBB383FEAD4}" = SweetIM for Messenger 3.7 "{774C0434-9948-4DEE-A14E-69CDD316E36C}" = Internet Explorer Toolbar 4.6 by SweetPacks "{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller "{94B4E2D8-A184-415C-BF9E-F699D76466BD}" = Heroes of Might and Magic IV - Złota Edycja "{9CA92548-B5C5-36D6-D70F-C4D3332F02F0}" = CCC Help Japanese "{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0333}" = Lenovo EasyCamera "{BEEDECC5-F0AE-734B-91BB-63516AA4A5B7}" = Catalyst Control Center InstallProxy "{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management "{D50A70C4-BFB8-E45C-1E57-CA282161B91A}" = AMD VISION Engine Control Center "{DAC69BCB-0C47-B2A1-66F8-C9FDBDA48682}" = CCC Help German "{DBF6CD69-FADE-2016-EF15-5362D8FC214B}" = CCC Help Hungarian "{DDBCDF95-9958-7A8F-F655-90E2FF1C27B5}" = CCC Help Thai "{E0AD689C-EDC0-1914-AE55-F8207B20E489}" = Catalyst Control Center Localization All "{E946FE9C-B883-BD46-9CB9-CC4BA737E53F}" = CCC Help Italian "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F6143CF8-93D8-3A6F-FFB4-3D957642E194}" = CCC Help Korean "{F8E78851-82D8-BBEC-9EBA-DB6D55E3520C}" = CCC Help Danish "1ClickDownload" = 1ClickDownloader "5513-1208-7298-9440" = JDownloader 0.9 "AVG Secure Search" = AVG Security Toolbar "Avira AntiVir Desktop" = Avira Free Antivirus "BabylonToolbar" = Babylon toolbar on IE "Counter-Strike 1.6" = Counter-Strike 1.6 "DAEMON Tools Lite" = DAEMON Tools Lite "Giant Savings" = Giant Savings "HyperCam 2" = HyperCam 2 "incredibar" = Incredibar Toolbar on IE "InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management "Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Nawie.eu" = Nawie.eu "Opera 11.62.1347" = Opera 11.62 "Opera 12.00.1467" = Opera 12.00 "Postal Fudge Pack" = Postal Fudge Pack "Quake III Arena Point Release 1.32" = Quake III Arena Point Release 1.32 "Softonic" = Softonic toolbar on IE "SubEdit-Player_is1" = SubEdit-Player "UT2003" = Unreal Tournament 2003 "vfd-ob" = VideoFileDownload "Warcraft III" = Warcraft III "Xfire" = Xfire (remove only) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2140699625-271330206-3021556137-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Mroczne Tajemnice" = Mroczne Tajemnice [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-07-08 16:24:25 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program iexplore.exe w wersji 9.0.8112.16446 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: c3c Godzina rozpoczęcia: 01cd5d465bfd326d Godzina zakończenia: 11 Ścieżka aplikacji: C:\Program Files (x86)\Internet Explorer\iexplore.exe Identyfikator raportu: Error - 2012-07-12 05:29:28 | Computer Name = Macocha-Komp | Source = Software Protection Platform Service | ID = 8209 Description = Dla aplikacji o identyfikatorze 55c92734-d682-4d71-983e-d6ec3f16059f zmieniono stan z Oryginalna na Nieoryginalna (0x00000000). Error - 2012-07-12 05:29:28 | Computer Name = Macocha-Komp | Source = Software Protection Platform Service | ID = 8208 Description = Pozyskiwanie oryginalnego biletu (hr=0xC004C4AB) dla szablonu o identyfikatorze 66c92734-d682-4d71-983e-d6ec3f16059f nie powiodło się. Error - 2012-07-12 06:03:45 | Computer Name = Macocha-Komp | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 13.0.1.4548, sygnatura czasowa: 0x4fda5ff0 Nazwa modułu powodującego błąd: mozalloc.dll, wersja: 13.0.1.4548, sygnatura czasowa: 0x4fda4c02 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x000019be Identyfikator procesu powodującego błąd: 0x218 Godzina uruchomienia aplikacji powodującej błąd: 0x01cd6013281696a6 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd: C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identyfikator raportu: dd794b3e-cc08-11e1-81d4-dc0ea17d7038 Error - 2012-07-16 15:10:04 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program wmplayer.exe w wersji 12.0.7600.16667 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 74c Godzina rozpoczęcia: 01cd63867393d365 Godzina zakończenia: 60 Ścieżka aplikacji: C:\Program Files (x86)\Windows Media Player\wmplayer.exe Identyfikator raportu: d600876a-cf79-11e1-afba-dc0ea17d7038 Error - 2012-07-16 15:22:35 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program wmplayer.exe w wersji 12.0.7600.16667 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: d18 Godzina rozpoczęcia: 01cd6387c05bd9bb Godzina zakończenia: 44039 Ścieżka aplikacji: C:\Program Files (x86)\Windows Media Player\wmplayer.exe Identyfikator raportu: 7af9f5a4-cf7b-11e1-afba-dc0ea17d7038 Error - 2012-07-31 13:54:34 | Computer Name = Macocha-Komp | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: GothicMod.exe, wersja: 1.0.8.11, sygnatura czasowa: 0x3cce9c48 Nazwa modułu powodującego błąd: GothicMod.exe, wersja: 1.0.8.11, sygnatura czasowa: 0x3cce9c48 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000032e2 Identyfikator procesu powodującego błąd: 0x140 Godzina uruchomienia aplikacji powodującej błąd: 0x01cd6f3ec5d3c662 Ścieżka aplikacji powodującej błąd: D:\gry\Gothic\System\GothicMod.exe Ścieżka modułu powodującego błąd: D:\gry\Gothic\System\GothicMod.exe Identyfikator raportu: c8e3aeed-db38-11e1-82d6-dc0ea17d7038 Error - 2012-08-06 07:59:27 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program NOTEPAD.EXE w wersji 6.1.7600.16385 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: dac Godzina rozpoczęcia: 01cd73cae0675b78 Godzina zakończenia: 16 Ścieżka aplikacji: C:\Windows\SysWow64\NOTEPAD.EXE Identyfikator raportu: 29c6696f-dfbe-11e1-9b80-dc0ea17d7038 Error - 2012-08-11 05:40:54 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program Gothic2.exe w wersji 2.6.0.0 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: b48 Godzina rozpoczęcia: 01cd77a11aa3cb84 Godzina zakończenia: 102 Ścieżka aplikacji: D:\gry\gothic2\System\Gothic2.exe Identyfikator raportu: Error - 2012-08-11 10:51:13 | Computer Name = Macocha-Komp | Source = Application Hang | ID = 1002 Description = Program Gothic2.exe w wersji 2.6.0.0 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 18c Godzina rozpoczęcia: 01cd77c88075a35e Godzina zakończenia: 56 Ścieżka aplikacji: D:\gry\gothic2\System\Gothic2.exe Identyfikator raportu: [ Media Center Events ] Error - 2012-06-14 10:22:31 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 16:22:30 - Błąd podczas nawiązywania połączenia z Internetem. 16:22:31 - Nie można skontaktować się z serwerem.. Error - 2012-06-14 10:23:06 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 16:23:00 - Błąd podczas nawiązywania połączenia z Internetem. 16:23:00 - Nie można skontaktować się z serwerem.. Error - 2012-06-16 16:58:34 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 22:58:34 - Błąd podczas nawiązywania połączenia z Internetem. 22:58:34 - Nie można skontaktować się z serwerem.. Error - 2012-06-16 16:59:09 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 22:59:03 - Błąd podczas nawiązywania połączenia z Internetem. 22:59:03 - Nie można skontaktować się z serwerem.. Error - 2012-06-17 01:20:54 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 07:20:41 - Błąd podczas nawiązywania połączenia z Internetem. 07:20:43 - Nie można skontaktować się z serwerem.. Error - 2012-06-17 01:22:31 | Computer Name = Macocha-Komp | Source = MCUpdate | ID = 0 Description = 07:21:39 - Błąd podczas nawiązywania połączenia z Internetem. 07:21:39 - Nie można skontaktować się z serwerem.. [ System Events ] Error - 2012-08-13 11:33:19 | Computer Name = Macocha-Komp | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 14:09:27 na ?2012-?08-?13 było nieoczekiwane. Error - 2012-08-13 12:45:06 | Computer Name = Macocha-Komp | Source = DCOM | ID = 10010 Description = Error - 2012-08-13 15:28:41 | Computer Name = Macocha-Komp | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 20:30:00 na ?2012-?08-?13 było nieoczekiwane. Error - 2012-08-13 16:16:33 | Computer Name = Macocha-Komp | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 22:15:29 na ?2012-?08-?13 było nieoczekiwane. Error - 2012-08-13 16:16:40 | Computer Name = Macocha-Komp | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: avipbb avkmgr discache spldr Wanarpv6 Error - 2012-08-13 16:16:43 | Computer Name = Macocha-Komp | Source = DCOM | ID = 10005 Description = Error - 2012-08-13 16:16:50 | Computer Name = Macocha-Komp | Source = DCOM | ID = 10005 Description = Error - 2012-08-13 16:16:53 | Computer Name = Macocha-Komp | Source = DCOM | ID = 10005 Description = Error - 2012-08-13 16:16:53 | Computer Name = Macocha-Komp | Source = DCOM | ID = 10005 Description = Error - 2012-08-13 16:16:56 | Computer Name = Macocha-Komp | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000 Description = Uruchomienie modułu rozszerzalności sieci WLAN nie powiodło się. Ścieżka modułu: C:\Windows\System32\bcmihvsrv64.dll Kod błędu: 21 < End of report >