OTL Extras logfile created on: 2012-08-20 23:16:09 - Run 1 OTL by OldTimer - Version 3.2.58.1 Folder = C:\Users\Kasia\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,91 Gb Total Physical Memory | 2,18 Gb Available Physical Memory | 55,85% Memory free 7,82 Gb Paging File | 5,76 Gb Available in Paging File | 73,69% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 83,27 Gb Total Space | 56,83 Gb Free Space | 68,25% Space Free | Partition Type: NTFS Drive D: | 189,98 Gb Total Space | 187,74 Gb Free Space | 98,82% Space Free | Partition Type: NTFS Drive E: | 177,77 Gb Total Space | 136,73 Gb Free Space | 76,91% Space Free | Partition Type: NTFS Computer Name: KASIA-KOMPUTER | User Name: Kasia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-3768826482-3846969985-3510440216-1000\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang () Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang () Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{030EC7D0-6B85-456E-9E12-18B64835F9D1}" = lport=10243 | protocol=6 | dir=in | app=system | "{031D82D3-2283-43FF-8AF8-4779F399FD87}" = rport=139 | protocol=6 | dir=out | app=system | "{0AA64AD5-E09C-4573-A419-E45FE208447F}" = lport=9702 | protocol=6 | dir=in | name=syncup_tcp_9702 | "{0B7F0CD8-8556-44C7-A89F-265476EB4AAB}" = lport=138 | protocol=17 | dir=in | app=system | "{1394825B-F05F-43B6-BFC0-7311F6F5C0DF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{18EB64AF-95B1-414C-AA5A-2B34DF18EA97}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{1D5E0F7B-003D-4482-AF1A-0431B6F41BD9}" = lport=9700 | protocol=17 | dir=in | name=syncup_udp_9700 | "{21A6288A-14F5-4EC0-B3A5-12E7B10CCABB}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3A4E574F-854D-4CD9-950A-9EBFE1E58E5C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3B870BBA-3B19-41FC-A43F-D4D528F25C73}" = lport=2869 | protocol=6 | dir=in | app=system | "{3E2553F1-ABCB-47AD-89A5-78B07F15AE6E}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{436FC60D-FD8C-420F-85D5-7936E5F0B148}" = lport=137 | protocol=17 | dir=in | app=system | "{4B0A21AB-1619-4973-803A-22BF2A296549}" = lport=9700 | protocol=6 | dir=in | name=syncup_tcp_9700 | "{54F7F130-661C-4853-8A89-7905B58E7F92}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | "{61B8A949-1012-471B-AA82-1E5EAB7E916C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{63203B00-27A3-4B60-ABBE-90B425C23E1C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{84E3F177-2118-45BD-839E-853AE6FEBA13}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{863B1F6D-0486-4CCA-ABE2-7CBD7F24F4DB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A781A44F-E87B-4748-8CF3-7FE6C1993A43}" = rport=10243 | protocol=6 | dir=out | app=system | "{B4ADAA4D-DD81-4993-B561-8E680FEE39C2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{B796CD7B-9A99-47B0-A28F-874FAF817A3C}" = rport=138 | protocol=17 | dir=out | app=system | "{B9C7EBAD-96D9-4603-9520-3C3C79B414E6}" = rport=137 | protocol=17 | dir=out | app=system | "{C199F572-6A81-4002-814D-05D33D030776}" = lport=139 | protocol=6 | dir=in | app=system | "{CAEDE65F-1B92-4EA5-97AB-12413A98AEA2}" = lport=9701 | protocol=6 | dir=in | name=syncup_tcp_9701 | "{CEF1EE43-6CC8-4AC2-9A85-7404D5F49F72}" = lport=445 | protocol=6 | dir=in | app=system | "{E26396C3-24CB-4FBF-9E61-173EED4C6203}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{E69FB205-09F7-4011-8C34-1041D1A1E9A4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{EED16F73-0E8B-4973-9282-C2CC3EE6BBE3}" = rport=445 | protocol=6 | dir=out | app=system | "{F83BCF59-FE96-4BCC-8477-0EE7D39D4B56}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{FD85D580-BC56-481C-8E25-4B6AE4993097}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0413A2A5-64C7-4BB8-9C47-5AAA867A44F7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{08E96D25-0698-4E6D-99D1-9BFBCD607A6A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{14EB9DA7-A074-4C3C-893F-DCD2071A7EA6}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zsfac2.tmp\symnrt.exe | "{18A9A568-3384-476A-BEBC-4D0A296961C9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{19457FCF-ADA7-4B33-B06F-E085EDC2DEC2}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{1946CBE9-8447-4DD6-A880-419DD30F08BC}" = protocol=6 | dir=out | app=system | "{1FF0E2C4-1FB5-4150-9F79-06D420A9AD3C}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs1b4.tmp\symnrt.exe | "{255060F9-15F9-479B-B481-551D7BF93944}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs52d0.tmp\symnrt.exe | "{27C0D9C7-C6CB-4949-8115-03AF16DB91A9}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe | "{308D698A-E517-43D3-8981-B136754FAA58}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{30E606F6-A0E1-4556-81F3-1191EB1005DE}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs8a06.tmp\symnrt.exe | "{31FCBA1C-6BDA-4E62-BF90-0FB3B63B042E}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs446e.tmp\symnrt.exe | "{31FE1158-11FC-489E-8360-4862CBE9DF43}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs3735.tmp\symnrt.exe | "{342D6314-9AE9-4CE5-9CDC-3C37C66D7735}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe | "{3C87FA5F-35ED-4266-A166-6072E74307B1}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe | "{44806FCA-360E-4E64-86CA-5C6A0BE0EC54}" = dir=in | app=c:\program files\dell stage\musicstage\musicstageengine.exe | "{449A3C70-6D80-4E7D-A326-1B30EE95FAF2}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{4950E203-9F39-4DC6-BB1A-617B8F76B079}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{4CF8C78A-008E-4738-A632-C945884F8249}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{4E390A29-A580-4265-A1BD-2A95C58019D4}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs555f.tmp\symnrt.exe | "{501DD6EE-72A2-4424-9B72-249E26B5A93D}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{5101FC63-3858-4469-A0F7-D41CE2085C03}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{54CA683D-DC60-4A39-86AF-7C70FA514DBC}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs4900.tmp\symnrt.exe | "{57D7A27E-B72F-4757-8C11-24D26375D1F9}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{5B02AA5B-C706-4744-90E7-89546F50283B}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe | "{5DDEF82A-2F6F-4DF2-8666-A215C2D81D5E}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe | "{5E781F93-612F-4F30-8B8A-88E7F4ECCBE7}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs86cb.tmp\symnrt.exe | "{606F96F9-F27F-4C1F-8365-ECC10F083F97}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | "{63619325-AE4C-4807-BECF-8EDEB543CD09}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6A432C03-B0D2-4F19-938E-5B76C802DBB5}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe | "{6CE234F8-6F65-4389-8F45-03507DAEB418}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{7CBC8028-5F84-446F-8AF0-21B67B9B9C96}" = dir=in | app=c:\program files (x86)\dell\videostage\videostage.exe | "{85934E81-70BA-43A1-9EEC-528634E099D2}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs63b1.tmp\symnrt.exe | "{89DD928A-CD57-45D9-A373-4E4EEABB1E3A}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs3735.tmp\symnrt.exe | "{89FD959B-2D15-40FC-BB9E-27ADD682CCE0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{99C77390-3741-4C15-B364-C741AE0EE9D6}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe | "{9FE42CF4-5FDA-47A7-9518-D1A9D4866A98}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{A1BAECE1-83A8-4D8B-A9C0-665021382A52}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{A4064D59-80E9-44EF-B9BC-FE2A7F46AF69}" = dir=in | app=c:\program files\dell stage\dell stage\stage_primary.exe | "{A5A32D85-8B94-4F9B-BED2-EA26992966B7}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs52d0.tmp\symnrt.exe | "{A80F82DF-0566-4066-B722-E226234AD993}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{A8A2E9AC-104B-4E7A-8C8F-DA60A9778E77}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs446e.tmp\symnrt.exe | "{ABA4252D-FD0A-44B7-90D9-C54829B7505F}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe | "{ACD95D90-6DB2-4AD0-88E3-34419BFA052E}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs4900.tmp\symnrt.exe | "{B0642837-12D8-4399-8E3A-B65ECF5B26E4}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zsfac2.tmp\symnrt.exe | "{B49BA855-228A-4CBE-9D48-B9CC6FC7FB33}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{B70ACA6A-9999-4514-8F34-28084AC6773B}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs555f.tmp\symnrt.exe | "{B9345A9D-5BC2-48A4-A5ED-EDCDB89FA424}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B9CF6C82-01B7-4C75-8784-AF7112013647}" = dir=in | app=c:\program files\dell stage\dell stage\accuweather\accuweather.exe | "{C4183220-114D-4D0A-90E1-9CFFF8D1C0AC}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs1b4.tmp\symnrt.exe | "{C7562860-0969-453D-B049-F0D247C16857}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs7982.tmp\symnrt.exe | "{D23323C6-C783-45F9-97D6-C056BB5EE6DA}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe | "{D6BEFED2-1CD8-4F4A-A89F-F9CC92693401}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe | "{D79B47F9-1236-44E7-BB6A-B1931113E7B6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{DF5F6CDA-2821-4DE8-B502-E0BA8996EBFA}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs8a06.tmp\symnrt.exe | "{E1FB6E22-3829-4D2F-9546-BABD1B7F14BC}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "{EA66A6C5-5674-4DE0-879A-370CEA8C8186}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe | "{EA8D7B2C-5F16-40CE-A17C-1DBB79B8A488}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs86cb.tmp\symnrt.exe | "{EAEACAD9-0132-4634-B074-8BCF79EED0B3}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | "{EEB80DA6-3A50-4CD6-AE2D-00A226315905}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F0A68279-A533-494D-B059-6F57CC2CB925}" = protocol=17 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs63b1.tmp\symnrt.exe | "{F62D3EB1-6CA2-40B4-AC39-D8A3326C933D}" = protocol=6 | dir=in | app=c:\users\kasia\appdata\local\temp\7zs7982.tmp\symnrt.exe | "{FC3F74E1-6396-470A-9C7B-958650428278}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "TCP Query User{05ABCA4C-6E18-42FB-AB5D-EC6A5B633D90}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "TCP Query User{73D995C5-242C-438B-9FDA-776903E4C68A}C:\program files (x86)\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wapster\wapster aqq\aqq.exe | "TCP Query User{97237BF9-237D-47F6-B152-ACCC0F8B6A3B}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | "UDP Query User{595C677B-15E4-4618-B88C-60A037EC7783}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "UDP Query User{CD16ECF9-BF4E-41BA-8A62-5A946F7CA03E}C:\program files (x86)\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wapster\wapster aqq\aqq.exe | "UDP Query User{D825B4A8-4DDA-47C6-9494-C09CB3BB2278}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{1F7AD7D4-0DD8-74F1-1053-878BE7A86DE4}" = ccc-utility64 "{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources "{25FBDA9A-E868-4B3B-B9FF-D923818511A1}" = Oprogramowanie Intel(R) PROSet/Wireless WiFi "{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit) "{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display "{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{58C50F85-1CB8-7C68-8235-003814E701F0}" = ATI Catalyst Install Manager "{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup "{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007 "{94B498F4-EE52-F145-3691-8CC2159F058F}" = ATI AVIVO64 Codecs "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst "{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad "{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "GIMP-2_is1" = GIMP 2.8.0 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "ProInst" = Intel PROSet Wireless "WinRAR archiver" = WinRAR 4.01 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi "{034DCAF9-96E7-4936-9A07-712F80B5181E}" = Nero RescueAgent 11 "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack "{11081E1B-9D55-63DD-67FE-8AC8D08834C9}" = PX Profile Update "{11D3EF85-63E1-4AE4-A7C1-9241BDB16B51}" = Nero ControlCenter 11 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback "{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10 "{25680C01-6753-4FE9-A891-7857F26457C1}" = Intel(R) WiDi "{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27 "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources "{28B38D62-7F3E-B1FE-9938-042E35A5F9F9}" = CCC Help Danish "{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger "{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}" = SyncUP "{434FDAA5-53FC-FDD7-4AD6-73460F022522}" = CCC Help Japanese "{452D2CA0-D1DD-00F8-0571-9BDE0A78D2F9}" = CCC Help Swedish "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A5A0780-E173-0917-8D1A-C3DEEBA22259}" = CCC Help Finnish "{4EF9BCB6-39E9-2C63-6004-398930CB90DC}" = CCC Help Chinese Standard "{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM) "{53F7746A-96AA-49A5-86B8-59989680DAC5}" = Nero Burning ROM 11 Help (CHM) "{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "{55C82F5C-AA82-731D-A9DA-0A8A858FACE2}" = CCC Help French "{578EAD95-CF7C-B58F-91CE-79FF64F7B3C1}" = Catalyst Control Center InstallProxy "{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack "{5DCA7A4E-B19B-5CB6-81F3-BCAF5A0F5AEE}" = CCC Help Spanish "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3 "{66C994C8-82E1-ABC0-1A60-976D92EC276E}" = Catalyst Control Center "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10 "{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter "{72D4DD4C-0749-4352-B63E-7A7C9286430E}" = Adobe Flash Player 10 ActiveX "{7746BFAA-2B5D-4FFD-A0E8-4558F4668105}" = Roxio Burn "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live "{7B50221F-71D1-B508-E9CC-511075E99E26}" = CCC Help Italian "{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide "{7FB00B6B-6843-97EC-EED6-78BD6D35370A}" = Zinio Reader 4 "{816D878A-9DD1-F2D0-11D1-53605855A45B}" = CCC Help Dutch "{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8B234375-EFB1-4024-8B53-EA7C745A6687}" = Adobe Flash Player 10 Plugin "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{91AF2672-F5BC-42CF-8037-A9D2F92BBCC0}" = Dell MusicStage "{9225AB17-709E-289C-DE15-620C2A27B076}" = CCC Help Russian "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1" = ALLConverter PRO 1.1 "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAD953F-16A8-CCD4-014A-A91625F2F478}" = CCC Help German "{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X MUI "{AF4D3C63-009B-4A17-B02E-D395065DD3F0}" = Dell Stage Remote "{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime "{AFEA7544-6B97-4867-A94D-1C39BA61B64F}" = Catalyst Control Center - Branding "{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR "{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych "{B1846721-A8E6-46C7-83B6-0DCF7ADB4267}" = Nero Burning ROM 11 "{B3C7CB7F-A7C5-A89B-28B7-29855FB32CD8}" = CCC Help Korean "{B47B373D-F19A-884E-AB54-089CF7E2978C}" = CCC Help Portuguese "{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11 "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh "{C5EB9B5A-2964-D5A3-869A-520448200FC3}" = PowerXpressHybrid "{CA4F92E6-9422-BE95-CC1C-4B293BF7C33C}" = CCC Help English "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live "{CD30B24A-59C9-5478-6B05-3D6732036AB6}" = Catalyst Control Center Localization All "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D01CE99A-8802-483C-A79F-298B691EB432}" = Nero RescueAgent 11 Help (CHM) "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D40E5EDC-5DC0-59E5-3739-37B1D1906690}" = CCC Help Chinese Traditional "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D4D66270-9147-4BDF-9946-FCA2B303AA8F}" = Nero ControlCenter 11 Help (CHM) "{D92C9CCE-E5F0-4125-977A-0590F3225B74}" = SyncUP "{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E2EBA7C0-8072-447F-856D-FFEE8D15B23B}" = Dell Stage "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E4335E82-17B3-460F-9E70-39D9BC269DB3}" = Dell PhotoStage "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer "{E656D89A-8CBB-497F-918F-8361A4071C26}" = Nero Burning ROM 11 "{E779C9F8-B190-AB65-9E8D-992BB30F224C}" = CCC Help Norwegian "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter "{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver "{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center "{FC6FCB65-EA7E-8B1A-818D-A9B57E279EF0}" = Catalyst Control Center Profiles Mobile "Adobe AIR" = Adobe AIR "Advanced Audio FX Engine" = Advanced Audio FX Engine "ALLPlayer_is1" = ALLPlayer V5.X "avast" = avast! Free Antivirus "Dell Webcam Central" = Dell Webcam Central "EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 9.1.0 Home Edition "ENTERPRISE" = Microsoft Office Enterprise 2007 "Foxit Reader_is1" = Foxit Reader "InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage "KLiteCodecPack_is1" = K-Lite Codec Pack 8.1.0 (Full) "Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NapiProjekt_is1" = NapiProjekt 2.0.0 (build 2151) "ProInst" = Intel PROSet Wireless "Winamp" = Winamp "WinLiveSuite" = Podstawowe programy Windows Live "ZinioReader4" = Zinio Reader 4 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-3768826482-3846969985-3510440216-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{79A765E1-C399-405B-85AF-466F52E918B0}" = Foxit PDF Creator Toolbar Updater "GG" = GG "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 14:02:50 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 15:38:32 | Computer Name = Kasia-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-06 16:11:03 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-06 16:11:03 | Computer Name = Kasia-Komputer | Source = ATIeRecord | ID = 16398 Description = ATI EEU failed to post message to CCC Error - 2012-08-07 04:06:07 | Computer Name = Kasia-Komputer | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 2012-07-03 13:37:20 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-04 10:07:55 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-04 12:07:47 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-04 13:23:29 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-04 18:19:05 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-05 07:14:04 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-05 08:20:57 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-05 17:47:58 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-06 04:08:08 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = Error - 2012-07-06 07:19:12 | Computer Name = Kasia-Komputer | Source = DCOM | ID = 10010 Description = < End of report >