OTL Extras logfile created on: 30.08.2012 11:02:13 - Run 1
OTL by OldTimer - Version 3.2.59.1     Folder = K:\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 1,85 Gb Available Physical Memory | 56,96% Memory free
6,70 Gb Paging File | 5,27 Gb Available in Paging File | 78,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 482,92 Gb Total Space | 173,46 Gb Free Space | 35,92% Space Free | Partition Type: NTFS
Drive K: | 448,59 Gb Total Space | 180,41 Gb Free Space | 40,22% Space Free | Partition Type: NTFS
 
Computer Name: IWONNA-PC | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_USERS\S-1-5-21-3274435004-398758450-600149560-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe" = C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7 -- ()
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe" = C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7 -- ()
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03E01F93-7DD6-45D3-842F-28CB92649D96}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{0E788DAF-920D-4D96-9F5F-BC5FAFB39A3A}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{0FA89BE4-38AB-49F9-AF98-A99908F87264}" = rport=445 | protocol=6 | dir=out | app=system | 
"{1A6E1FE0-9460-42AE-9F80-2E6376E792F0}" = lport=139 | protocol=6 | dir=in | app=system | 
"{1C26C211-BB6E-42CA-BDA6-E4949BD5C9BF}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{205E54AF-3A40-4D64-88D3-982B0DEE4656}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{2691C477-654D-464B-AF0D-A50642AB5D04}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{314E2DF4-8A3D-4FC4-90C3-61F236B4B3F4}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{31C9A5EA-1EBA-4EEA-A69F-E71B1A656366}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{31F3342B-50A2-46D3-9069-16093E91B576}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3277F2F6-F82A-4304-A820-4AFEFF700745}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | 
"{3FAA1417-0FC3-4572-AE18-0B662F502833}" = lport=445 | protocol=6 | dir=in | app=system | 
"{41213FCD-147D-4D7A-92F8-6BEA520533DA}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{4AAB94E2-3D63-4A6E-997C-EC6DDCAD199B}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{4D11973F-C09E-415E-8D91-A820DC4BDFD2}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{4D314AB1-94AD-4A39-BCEC-334C91E81DE9}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{4EFADF40-1020-4411-8FCC-3F03EE749F99}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{5451CDA1-81C4-4FD2-AB30-F5CBE34B5E55}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{582D7B5B-C96F-438D-A47A-1C515DEA8CFF}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | 
"{5F6DBDD4-54F3-46CF-A17E-B0398851254C}" = rport=137 | protocol=17 | dir=out | app=system | 
"{6E8CE95E-C0BD-410F-AB4E-A017FF382123}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{7689F71C-6814-4A32-94C7-81B0F517B027}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{7BA7AF3E-BB94-46F3-9642-F9431C1F466F}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{7CEB6009-C7CD-4FE1-91E0-AC128400DDA0}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{89A0233A-EAC6-4F41-A790-0893BDB8F960}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{92E246F2-DB97-43A4-BB23-CAA1A3AB06AA}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{99255239-5F2C-4504-8836-CAAC2C39F754}" = lport=138 | protocol=17 | dir=in | app=system | 
"{A3A3DFA1-A8FD-4C73-AEDA-997CA9BA1740}" = rport=139 | protocol=6 | dir=out | app=system | 
"{B422C921-14C3-454B-A20D-DB9FD649A813}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B7989E0D-1563-44CC-95F5-2F99C878D2A3}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{BFA8A679-37BA-4E14-9B41-7AA10F0F25E9}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{C0BA1BC9-51EE-4420-B002-E942E6FDAA4F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C7FD61A1-8443-44EA-9D6F-A18546BF719C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{C9F5EAB3-3263-474C-925D-F810CCFB5FE8}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{D29BC981-FA86-4F92-92C2-A6DA93CBF940}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E318B15D-C414-46C0-8DE2-AFC793C960C4}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{EA86C929-4C23-4874-856F-EB06F18DB4AB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{EC855D7A-000F-48E7-9379-3ACF107ED8FC}" = lport=137 | protocol=17 | dir=in | app=system | 
"{F51F7235-B441-4173-B9E8-F294C8737069}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{F83A0A36-FD2F-4EEB-B722-8EED9DDD33F4}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{F8D6F06C-7401-4F3A-93B4-8FFD96E95448}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{FA871F27-9766-40F6-87A1-1E0C1DA28245}" = rport=138 | protocol=17 | dir=out | app=system | 
"{FB321ECF-F743-4C15-9407-67C7F5B27CD2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01CC3691-3C88-4D30-9CF0-92FC90DFCDBC}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{056F9C48-2FA4-4428-8ABC-557C0CE894DF}" = protocol=6 | dir=out | app=system | 
"{0A4E4827-59BC-45AF-98AB-7CA224F2B660}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0B6E19D2-8F04-48CF-83EF-2AE377F9B6AD}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{0D115204-F8F1-415D-AB53-CA29459CE3D3}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{0EAFC851-FE44-47EE-A5DF-7C22E4E025A5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0FA21114-D7E0-4520-A286-191072F5A6E5}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{1670D91B-CFC4-4371-9121-33A7D5BDB8F0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{1B7E0E89-70BB-4F4D-ACEA-37317226239D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{23D4D387-92BE-4FA9-A4BE-AB9A96B2DCB9}" = protocol=6 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe | 
"{241D5B88-2C9D-4549-B541-B127D45D06FF}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{24F5B953-9BB1-4238-B75C-E5713A746AE7}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{2552B06C-BE01-4C86-8DB8-2C74D4303BB7}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{2B9659AD-0054-47F5-AE3C-B74D0A3C1319}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{2D851840-B7B2-4498-A1EC-270E2A9BB095}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{37F1C4D2-AB6E-465E-866E-0B61BD0B460F}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{433CB446-D7D6-4161-BBDB-67C6FCFE2483}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{4BAE75A7-08E0-422B-8424-F35F9B23F97F}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{4DB1CA2D-F381-466D-B4A9-1D1DAB4CBABF}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{4F18045C-4710-4858-B1B2-F4D29B0CD376}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{50333B36-2550-4FF8-85BD-5683C7F6C42F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{53F0005A-E573-4922-827D-DDFFB45B6580}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{55AA1C43-1E7F-4AA5-AA9B-2AC7B9C2F002}" = protocol=17 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe | 
"{5770A84C-B241-486C-8D71-4AE51D13DF7D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{5A41717E-81A7-45FD-BC98-B2CCA5119105}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{5EF46149-3673-4697-B422-CAB2276BF250}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{63E55350-0685-448F-97B9-DAE26872B744}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{6693AC66-48D8-4CE5-98B3-E5117C7BF61A}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{675B057B-585D-4750-8271-B3B004863229}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{71EB5E54-DC02-48A1-8991-36B296E97F3D}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{7AE3D339-5FE6-4E88-8203-4DF949F0F91D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{7D76AC00-3ECA-43A3-A39F-1D7D5D76EDDE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{898E166D-DE6B-4CBF-AA15-10C702EAF650}" = dir=in | app=c:\program files\airport\apagent.exe | 
"{927DCEAC-720E-48F0-8B0D-2D65F3B59E50}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{9375AB96-BD64-4796-921B-130312D2F0ED}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{947442EC-23E6-464B-9A14-D714113EA67B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{9D031789-51CD-4BFA-961D-2B588BB8B397}" = dir=in | app=c:\program files\hp\hp photosmart 5510 series\bin\devicesetup.exe | 
"{A8192F50-D404-4CC8-87A6-9E252DB5DB83}" = dir=in | app=c:\program files\hp\hp photosmart 5510 series\bin\hpnetworkcommunicator.exe | 
"{AD61EEDD-5CE5-4FD9-B78D-E11E33ABBA12}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{B06C5C7B-9652-475D-BAB8-7107D1FAF6F1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B7FC3D02-182A-4B1B-8129-8EFD16995A68}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B82C112A-A7C0-4AC2-A6C8-3548ECD28850}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B8C86649-CB77-42C2-82FA-EB4168F16B84}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{BAEF0F21-D50E-480C-8DD6-F2E0D568C27B}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{BBFB41BC-81C8-4D3B-AEED-E586C377009D}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{BE464F5D-BBF5-440C-8F3E-36559E2AD16A}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{C1E9745E-C4DB-4821-90BE-52A6294841EB}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{C435C25F-9BF9-45FB-941E-816F87A39981}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{C43DAE13-D53C-428C-986B-87F87CA86EDA}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{C9F21F74-1B11-499B-93DD-4AB6ADEB8041}" = protocol=6 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | 
"{CC8FD9FD-E21E-4D76-9900-8DAF9EAC83EA}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{CCC1AC5F-293A-4093-B54E-CFDD2658A6A7}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{D20F4AE2-ACFF-492C-908E-595AF0D09B1D}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{DE8447D4-42B5-490B-A597-D82DAB22B412}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{E2DDF13E-F8D4-42AB-A442-E157B0881733}" = protocol=17 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | 
"{EA383F6F-6E90-498B-BAF0-C8F707753FE5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{F05A63D8-DB6F-4D9C-8E17-C6A91A6A4782}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{F6548C0E-F0F8-4E7C-9164-26C64D6FA674}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"TCP Query User{11D4E756-049E-4F84-96C9-CB86CD8E7761}C:\program files\airport\aputil.exe" = protocol=6 | dir=in | app=c:\program files\airport\aputil.exe | 
"TCP Query User{3217E415-E737-4237-A869-2A7BD86A7188}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
"TCP Query User{8B64FDB3-3315-48FE-BCB7-B525C9FCBC36}C:\program files\safari\safari.exe" = protocol=6 | dir=in | app=c:\program files\safari\safari.exe | 
"TCP Query User{B84DBE35-8A85-4C26-A7B4-294FEFEF4851}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"TCP Query User{CF36ED09-A7C5-4B75-9719-85A6F6EBD74C}C:\program files\nero\nero 9\nero showtime\showtime.exe" = protocol=6 | dir=in | app=c:\program files\nero\nero 9\nero showtime\showtime.exe | 
"TCP Query User{FA9329E1-66E4-457E-AF4C-3A16C9178AD7}C:\users\user\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\user\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{34ED1F34-BAA3-4F03-BB6D-499CDAB1F33D}C:\users\user\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\user\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{37DB63A1-4AF6-4BFF-BF88-6AF379AD356C}C:\program files\nero\nero 9\nero showtime\showtime.exe" = protocol=17 | dir=in | app=c:\program files\nero\nero 9\nero showtime\showtime.exe | 
"UDP Query User{6AB5CBE5-ED11-46DE-BB10-557D498A729A}C:\program files\airport\aputil.exe" = protocol=17 | dir=in | app=c:\program files\airport\aputil.exe | 
"UDP Query User{78C018AC-0265-4199-BA6A-D5FD35E0C33A}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"UDP Query User{B230B903-2EF2-4CD4-84E5-A7970CDBBAC3}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
"UDP Query User{B9EACDC8-2A29-4612-8752-9250A13C3B0E}C:\program files\safari\safari.exe" = protocol=17 | dir=in | app=c:\program files\safari\safari.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
"{08BF6EA5-120D-462D-ADE0-912A77DBCB2E}" = Cisco Network Magic
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1900_series" = Canon iP1900 series Printer Driver
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{228F6876-A313-40A3-91C0-C3CBE6997D09}" = Symantec
"{238F53CC-4768-A6A3-1D6B-FCF616C75368}" = e-Deklaracje Desktop
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2908F0CB-C1D4-447F-97A2-CFC135C9F8D4}" = Internet Worm Protection
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}" = Norton AntiVirus Help
"{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}" = Nero Recode
"{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}" = ccCommon
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{40184457-4514-4B18-84A8-6BB8A3AB6A81}" = AirPort
"{415FA9AD-DA10-4ABE-97B6-5051D4795C90}" = HP FWUpdateEDO2
"{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{48A8ADFF-D6E4-409D-B2BA-5CABB7FE5A84}" = AirPort
"{4CA9BA1F-D75A-4B5A-82CF-69460F4F4050}" = Symantec Real Time Storage Protection Component
"{5495b86c-5dbc-4466-95af-a35cf8008b5a}" = Nero 9
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5C6F884D-680C-448B-B4C9-22296EE1B206}" = Logitech Harmony Remote Software 7
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}" = iTunes
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje
"{830D8CBD-C668-49e2-A969-C2C2106332E0}" = Norton AntiVirus
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8471021C-F529-43DE-84DF-3612E10F58C4}" = Remote Control USB Driver
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}" = Apple Mobile Device Support
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_HOMESTUDENTR_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_HOMESTUDENTR_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Centrum obsługi urządzeń z systemem Windows Mobile
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{92D84D4D-C73D-418C-AC00-C2A4821BE93D}" = HP Photosmart 5510 series Podstawowe oprogramowanie urządzenia
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}" = Norton Protection Center
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E82B934-9A25-445B-B8DF-8012808074AC}" = Nero PhotoSnap
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.2 - Polish
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.3.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}" = SoundTrax
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C922B636-BFE2-418C-843E-D663F82DCA9E}" = Application Suite
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE3D4B83-B9E7-4A8F-A6C3-F045CB0CD250}" = SymNet
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM
"{D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8}" = Norton AntiVirus SYMLT MSI
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D61524CF-93FE-4193-91AD-C6E21FEEAA5A}" = Logitech Harmony Remote Software 7
"{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime
"{DA7DF8E2-4B8F-4286-97FE-DE3FFFE9B728}" = iCloud
"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)
"{E02964EA-0E1B-4620-A26E-CBAB0341B1BB}" = HP Photosmart 5510 series Pomoc
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5EE9939-259F-4DE2-8023-5C49E16A4F43}" = Norton AntiVirus Parent MSI
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{E9AD2143-26D5-4201-BED1-19DCC03B407D}" = Windows Live Messenger
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F0A4913F-46A5-48F2-BC73-EE41A6C81EB3}" = Microsoft DirectX SDK (August 2007)
"{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget
"{F4DB525F-A986-4249-B98B-42A8066251CA}" = AV
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FC467B61-F890-4E29-8585-365DAB66F13E}" = Pure Networks Platform
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop
"FormatFactory" = FormatFactory 2.95
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{48A8ADFF-D6E4-409D-B2BA-5CABB7FE5A84}" = AirPort
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.7.0 (Full)
"LiveUpdate" = LiveUpdate 3.2 (Symantec Corporation)
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft DirectX SDK (June 2010)" = Microsoft DirectX SDK (June 2010)
"Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl)
"Mozilla Thunderbird 14.0 (x86 pl)" = Mozilla Thunderbird 14.0 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NapiProjekt_is1" = NapiProjekt (2.0.0.2151)
"Network MagicUninstall" = Network Magic
"Notepad++" = Notepad++
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"RealPlayer 15.0" = RealPlayer
"Rejestracja użytkownika drukarki Canon iP1900 series" = Rejestracja użytkownika drukarki Canon iP1900 series
"SubtitleWorkshop" = Subtitle Workshop 2.51
"SymSetup.{830D8CBD-C668-49e2-A969-C2C2106332E0}" = Norton AntiVirus (Symantec Corporation)
"uTorrent" = µTorrent
"WinLiveSuite" = Podstawowe programy Windows Live
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3274435004-398758450-600149560-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 02.05.2012 15:30:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 15:39:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 15:58:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 16:09:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 16:13:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 16:44:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 16:54:56 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 02.05.2012 18:57:00 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 03.05.2012 09:49:28 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
Error - 04.05.2012 11:31:23 | Computer Name = IWONNA-PC | Source = .NET Runtime | ID = 1022
Description = 
 
[ System Events ]
Error - 27.08.2012 04:52:42 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 27.08.2012 17:07:50 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 28.08.2012 06:12:23 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 28.08.2012 06:14:40 | Computer Name = IWONNA-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:13:11 na 2012-08-28 było nieoczekiwane.
 
Error - 28.08.2012 06:15:50 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 29.08.2012 07:56:19 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 29.08.2012 11:27:49 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 29.08.2012 11:32:15 | Computer Name = IWONNA-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 17:30:33 na 2012-08-29 było nieoczekiwane.
 
Error - 29.08.2012 11:33:23 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 30.08.2012 04:38:31 | Computer Name = IWONNA-PC | Source = DCOM | ID = 10016
Description = 
 
 
< End of report >