OTL Extras logfile created on: 2012-08-31 21:48:23 - Run 1 OTL by OldTimer - Version 3.2.59.1 Folder = C:\ 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,73 Gb Total Physical Memory | 3,03 Gb Available Physical Memory | 81,12% Memory free 7,47 Gb Paging File | 6,77 Gb Available in Paging File | 90,71% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,88 Gb Total Space | 192,71 Gb Free Space | 82,75% Space Free | Partition Type: NTFS Drive D: | 22,74 Gb Total Space | 5,27 Gb Free Space | 23,18% Space Free | Partition Type: NTFS Drive F: | 7,46 Gb Total Space | 0,26 Gb Free Space | 3,42% Space Free | Partition Type: FAT32 Drive G: | 92,77 Gb Total Space | 90,27 Gb Free Space | 97,30% Space Free | Partition Type: NTFS Drive H: | 92,77 Gb Total Space | 38,14 Gb Free Space | 41,11% Space Free | Partition Type: NTFS Drive I: | 24,20 Gb Total Space | 23,28 Gb Free Space | 96,22% Space Free | Partition Type: NTFS Computer Name: ROMEK-TOSH | User Name: Romek | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 1 "AntiVirusOverride" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{016E6A0C-9E7E-4BB4-A4F9-AA95FD56073E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{020A72FA-A1BF-435D-BD65-B3806BC7E97C}" = lport=138 | protocol=17 | dir=in | app=system | "{035D91D1-0797-402E-81CC-3D50498E1283}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{07068AF4-AE05-4C9B-ADF3-3C605D9220C3}" = lport=10243 | protocol=6 | dir=in | app=system | "{11548B17-144D-44DD-AD61-EBFCA5934DF3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{2B3787CD-0902-47AD-99D9-174319A58AA5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{2C776D22-62DA-4AD2-BC92-3E1D0B1FF026}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{336EFDCF-1396-419F-8E13-053632E8195A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{35882037-3043-4EF7-983B-248A059E8DB5}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{44AA9A19-67D8-488A-8E17-B38644CD19C6}" = lport=137 | protocol=17 | dir=in | app=system | "{4B67421B-E481-4C4F-8CBC-03249C767306}" = lport=427 | protocol=17 | dir=in | name=slp | "{5286226E-FB17-4B40-81A9-02F3D3F75712}" = lport=139 | protocol=6 | dir=in | app=system | "{5DD0D071-9DA1-4F5C-B37F-5EE7FEEA9897}" = lport=2869 | protocol=6 | dir=in | app=system | "{6309B780-C029-47D8-A89D-195D30165FB3}" = lport=427 | protocol=6 | dir=in | name=advanced tcp/ip slp port | "{640397A5-DA5D-4D4A-9D1A-10411DE01BE9}" = lport=161 | protocol=6 | dir=in | name=advanced tcp/ip snmp port | "{68465272-2E7C-42DB-AA52-F782AD5649A8}" = rport=139 | protocol=6 | dir=out | app=system | "{6944DD29-BF17-430C-9F64-F12B29C81CF2}" = rport=137 | protocol=17 | dir=out | app=system | "{8E7D4756-4589-4CFA-AD82-4520CF796952}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{8F3EDA71-FAE7-41D4-BCE0-86C1D7DEFA36}" = lport=2869 | protocol=6 | dir=in | app=system | "{91CD48F4-65B8-4A16-A35D-A90F527F195A}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{A0F671D2-8C2B-47BE-AE5E-782B4D17AEB0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A20DF4D3-1643-45C8-89A4-1F5489B59C98}" = rport=10243 | protocol=6 | dir=out | app=system | "{C22CD380-F49E-41F9-9293-D381F97B0872}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C42091CB-9380-4221-AFFC-5F4F76584455}" = rport=138 | protocol=17 | dir=out | app=system | "{D4468321-0CA6-4A6C-9247-7CBA006EDF99}" = lport=9100 | protocol=6 | dir=in | name=advanced tcp/ip printer port | "{D64CD546-5D43-44DD-8480-420B14FFDF82}" = rport=445 | protocol=6 | dir=out | app=system | "{E27896AD-94AD-44C0-8404-4767FE7C4B6B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{E7C67DF8-1E14-4CA2-8E60-844B9117D501}" = lport=445 | protocol=6 | dir=in | app=system | "{EA441026-2160-45F5-89E0-25B597D90AD4}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{066A4AC1-0BED-4C1C-9FDA-086630AE51C0}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{1E5627B8-EE99-4E3A-8986-35703DAA1A6E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{24011970-C20A-4C3B-865E-5B5D55014CD6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{2DDDA93F-4779-4212-8B25-066D4EDFC8B4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{3048844D-F5CE-4FE0-BECC-2F6FE0124019}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{33DFF9F8-831B-462E-95C5-55D360601B23}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | "{3F063A43-BE54-4789-ADA2-264A1706903D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{486FEC95-C199-4625-810A-431185F26D33}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{50FD49E0-6933-47F3-A7FB-94871B7ADFD2}" = protocol=6 | dir=in | app=e:\productinst64.exe | "{51503367-30A8-4E0F-BDED-7F802671BC30}" = protocol=6 | dir=out | app=system | "{592E8F3B-26CF-4441-BC4B-57C488936E80}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{5E996545-1F50-4DCC-916D-DD7999D427BF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{6463A67B-AEC3-4CFB-80DD-FEBF00BD363D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6495708C-DE12-4741-A906-7F49AE6012F4}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | "{764C2B1D-14C2-4619-A156-68F50915931C}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe | "{7AEBC85E-861F-40E7-97D0-6893F5173644}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{84852EFF-DD37-4431-908C-EB552B4131B0}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{8F28C3A3-E792-4F83-86BF-FF51F55B6D83}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{99DC6BD6-F5F3-447A-AE78-FD6269588DAC}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{A3E6680D-817B-4463-B55E-FB955FB4904C}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe | "{AF709A40-DE0C-40B3-9365-5E912195C6C3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B79A3FCF-1736-4809-8365-23CDDE70F1FB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{BC129089-CA3D-43B6-BC4E-DD498C048718}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{CA5E1C8C-DB78-42E9-805F-9B4774404A78}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{DB5D25F2-7BB9-44FF-AA82-AE42F4695458}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{E43F7E71-8397-4B24-81F4-21A9DAF16151}" = protocol=17 | dir=in | app=e:\productinst64.exe | "{E5D1002C-018D-4FAD-9047-6802DD696BB9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{ED90CEC3-75DC-42AD-ABE0-6F229EE8D48D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{EDB1C237-88CD-4925-9DAC-2D80201A455A}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe | "{F0C9B0DC-B15D-4E88-8DD6-EA89BB0D0492}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{F82234BC-CE72-4BF2-8F74-1D558DFE7FE8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{FC0C0435-AD75-4732-8020-CEC5FAB65143}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "{1111706F-666A-4037-7777-211648764D10}" = JavaFX 2.1.1 (64-bit) "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{1FA6376A-3120-45DA-8686-96DEFC8A0513}" = HP LaserJet Toolbox "{2222706F-666A-4037-7777-211648764D10}" = JavaFX 2.1.1 SDK (64-bit) "{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources "{26A24AE4-039D-4CA4-87B4-2F86417005FF}" = Java(TM) 7 Update 5 (64-bit) "{43C4BDBB-0FA3-4E79-8E9F-6ACF0F2FC0A4}" = HP LaserJet Professional M1210 MFP Series Toolbox "{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety "{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{64A3A4F4-B792-11D6-A78A-00B0D0170050}" = Java SE Development Kit 7 Update 5 (64-bit) "{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{90140000-006D-0415-1000-0000000FF1CE}" = Moduł Szybka instalacja pakietu Microsoft Office 2010 "{94A90C69-71C1-470A-88F5-AA47ECC96B40}" = TOSHIBA HDD Protection "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor "{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{C02C2C22-2EB1-47C8-B74F-8AB1A62FAE31}" = Windows Live Family Safety "{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board "{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{E65099C4-9110-4C31-BD03-5C17EFB5FE92}" = HP LaserJet Professional M1210 MFP Series Fax Installer "{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher "{E8A34AC8-0137-4515-A94B-0A0946DDC251}" = Scan To "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition "Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter "HP LaserJet Professional M1130-M1210 MFP Series" = HP LaserJet Professional M1130-M1210 MFP Series "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "PROSet" = Intel(R) Network Connections Drivers "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{022CBB38-CEF0-42BA-906A-A49BEFAE0BEE}" = RICOH R5U230 Media Driver ver.2.10.03.02 "{0420F95C-11FF-4E02-B967-6CC22B188F9F}" = Nero BackItUp "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0E448256-D515-4C3E-A5BE-0A7B76CED5D4}" = hppM1130M1210SeriesLaserJetService "{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch "{1E63ACB5-D45E-4856-8FC9-78F4B0D7BB80}" = TOSHIBA Security Assist "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help "{2290A680-4083-410A-ADCC-7092C67FC052}" = TOSHIBA Online Product Information "{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 24 "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources "{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger "{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}" = Windows Live Sync "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{397516AE-7DFE-4F90-84E0-BD616D559434}" = Nero BurnRights "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}" = Nero RescueAgent "{543E6ACA-51B7-4283-82F2-57C0582A53C5}" = Windows Live UX Platform Language Pack "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{654F7484-88C5-46DC-AB32-C66BCB0E2102}" = TOSHIBA Sleep Utility "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}" = Nero Express "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7902E313-FF0F-4493-ACB1-A8147B78DCD0}" = HPSSupply "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live "{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0015-0415-0000-0000000FF1CE}_Office14.AccessR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0407-0000-0000000FF1CE}_Office14.AccessR_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0409-0000-0000000FF1CE}_Office14.AccessR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-001F-0415-0000-0000000FF1CE}_Office14.AccessR_{1D751709-BA6C-49E2-844B-4F4F20F410C9}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0415-1000-0000000FF1CE}_Office14.AccessR_{0844B6E1-0A6F-4D81-8BCF-48F883F521FE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}_Office14.AccessR_{6606F321-8216-466E-981E-B75A14C46894}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}_Office14.AccessR_{6AF8887A-72F7-4FA0-ABE4-396172B64550}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140011-0066-0415-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Polski "{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}" = Toshiba Manuals "{91140000-0015-0000-0000-0000000FF1CE}" = Microsoft Office Access 2010 "{91140000-0015-0000-0000-0000000FF1CE}_Office14.AccessR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010 "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}" = TOSHIBA Media Controller "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9DA0961E-FCFE-EEF2-04AA-32631F7CEC9E}" = Photo Service - powered by myphotobook "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A74F16FA-1D5B-405B-8D8D-1BC6F9DAED8B}" = Amazon.co.uk "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3) "{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility "{B73A66DB-7804-46EC-9A2F-BD534FDB6AD5}" = TOSHIBA ConfigFree "{B95B1BA9-F887-4B3C-8D3A-CCD4C4675120}" = Microsoft Default Manager "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{BD8DA595-F501-4ABE-85A0-5C23E82472A0}" = Pomocnik Messenger "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh "{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}" = TOSHIBA Assist "{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live "{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D371F551-0DB9-4CEC-844B-4C90CE91EA0B}" = hppLaserJetService "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "{DA6CC3A5-1F5B-4068-8BFF-C597BB6B8158}" = hppusgM1130M1210Series "{dae89e4d-c45e-44fc-a7ac-6eb39d843b36}" = Nero 9 Essentials "{DBB7021A-3437-446F-ACE5-7261644A972C}" = Toshiba TEMPRO "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}" = Nero BackItUp and Burn "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer "{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EB87675F-5281-4767-A54B-31931794C23D}" = OpenOffice.org 3.3 "{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}" = TOSHIBA Media Controller Plug-in "{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter "{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool "{FDE58148-57E7-43BF-879A-29CCE818C078}" = eBay "{FF2609E3-194C-44DB-A34F-20D02103B5F1}" = Bing Bar Platform "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "ALLPlayer_is1" = ALLPlayer V4.X "eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1" = Photo Service - powered by myphotobook "InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder "InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime "InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility "InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board "InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = Program TOSHIBA HDD/SSD Alert "InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher "InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition "Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl) "Mozilla Thunderbird 14.0 (x86 pl)" = Mozilla Thunderbird 14.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "MSC" = McAfee SecurityCenter "Office14.AccessR" = Microsoft Access 2010 "Office14.Click2Run" = Moduł Szybka instalacja pakietu Microsoft Office 2010 "Totalcmd" = Total Commander (Remove or Repair) "Winamp" = Winamp "WinLiveSuite" = Podstawowe programy Windows Live [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Live Security Platinum" = Live Security Platinum "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-08-05 02:05:22 | Computer Name = Romek-TOSH | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NeroAPIGlueLayerUnicode.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2012-08-05 02:07:29 | Computer Name = Romek-TOSH | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: TPCHSrv.exe, wersja: 1.0.0.17, sygnatura czasowa: 0x4be7d979 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7600.16915, sygnatura czasowa: 0x4ec4b137 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c6ae2 Identyfikator procesu powodującego błąd: 0x37c Godzina uruchomienia aplikacji powodującej błąd: 0x01cd72d096369384 Ścieżka aplikacji powodującej błąd: C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe Ścieżka modułu powodującego błąd: C:\Windows\SYSTEM32\ntdll.dll Identyfikator raportu: d605a0de-dec3-11e1-a3b2-002318afeb97 Error - 2012-08-05 03:09:09 | Computer Name = Romek-TOSH | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe". Nie można odnaleźć zestawu zależnego Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2012-08-05 03:31:56 | Computer Name = Romek-TOSH | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NeroAPIGlueLayerUnicode.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2012-08-05 03:34:24 | Computer Name = Romek-TOSH | Source = ESENT | ID = 215 Description = WinMail (1440) WindowsMail0: Tworzenie kopii zapasowej zostało zatrzymane, ponieważ zostało przerwane przez klienta lub nie można nawiązać połączenia z klientem. Error - 2012-08-05 03:34:32 | Computer Name = Romek-TOSH | Source = ESENT | ID = 215 Description = WinMail (3720) WindowsMail0: Tworzenie kopii zapasowej zostało zatrzymane, ponieważ zostało przerwane przez klienta lub nie można nawiązać połączenia z klientem. Error - 2012-08-05 03:36:47 | Computer Name = Romek-TOSH | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: TPCHSrv.exe, wersja: 1.0.0.17, sygnatura czasowa: 0x4be7d979 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.17725, sygnatura czasowa: 0x4ec4aa8e Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c40f2 Identyfikator procesu powodującego błąd: 0x1824 Godzina uruchomienia aplikacji powodującej błąd: 0x01cd72dd0fdb6560 Ścieżka aplikacji powodującej błąd: C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe Ścieżka modułu powodującego błąd: C:\Windows\SYSTEM32\ntdll.dll Identyfikator raportu: 4f36c952-ded0-11e1-8e8f-002318afeb97 Error - 2012-08-05 03:49:04 | Computer Name = Romek-TOSH | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NeroAPIGlueLayerUnicode.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2012-08-05 03:51:28 | Computer Name = Romek-TOSH | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NeroAPIGlueLayerUnicode.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2012-08-05 03:54:20 | Computer Name = Romek-TOSH | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: TPCHSrv.exe, wersja: 1.0.0.17, sygnatura czasowa: 0x4be7d979 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.17725, sygnatura czasowa: 0x4ec4aa8e Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x00000000000c40f2 Identyfikator procesu powodującego błąd: 0x14c8 Godzina uruchomienia aplikacji powodującej błąd: 0x01cd72df83d106d4 Ścieżka aplikacji powodującej błąd: C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe Ścieżka modułu powodującego błąd: C:\Windows\SYSTEM32\ntdll.dll Identyfikator raportu: c2f0e85f-ded2-11e1-abd1-002318afeb97 [ System Events ] Error - 2012-02-12 15:13:52 | Computer Name = Romek-TOSH | Source = Schannel | ID = 36874 Description = Odebrano żądanie połączenia SSL 3.0 ze zdalnej aplikacji klienckiej, lecz serwer nie obsługuje żadnego z mechanizmów szyfrowania obsługiwanych przez tę aplikację. Żądanie połączenia SSL nie powiodło się. Error - 2012-02-12 15:13:52 | Computer Name = Romek-TOSH | Source = Schannel | ID = 36888 Description = Został wygenerowany następujący alert krytyczny: 40. Stan błędu wewnętrznego: 107. Error - 2012-02-12 15:13:52 | Computer Name = Romek-TOSH | Source = Schannel | ID = 36874 Description = Odebrano żądanie połączenia SSL 3.0 ze zdalnej aplikacji klienckiej, lecz serwer nie obsługuje żadnego z mechanizmów szyfrowania obsługiwanych przez tę aplikację. Żądanie połączenia SSL nie powiodło się. Error - 2012-02-12 15:13:52 | Computer Name = Romek-TOSH | Source = Schannel | ID = 36888 Description = Został wygenerowany następujący alert krytyczny: 40. Stan błędu wewnętrznego: 107. Error - 2012-02-13 18:06:04 | Computer Name = Romek-TOSH | Source = Service Control Manager | ID = 7034 Description = Usługa TPCH Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2012-02-13 18:06:30 | Computer Name = Romek-TOSH | Source = DCOM | ID = 10010 Description = Error - 2012-02-14 05:04:51 | Computer Name = Romek-TOSH | Source = Service Control Manager | ID = 7034 Description = Usługa TPCH Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2012-02-14 05:05:17 | Computer Name = Romek-TOSH | Source = DCOM | ID = 10010 Description = Error - 2012-02-15 16:45:34 | Computer Name = Romek-TOSH | Source = Service Control Manager | ID = 7034 Description = Usługa TPCH Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2012-02-15 16:45:58 | Computer Name = Romek-TOSH | Source = DCOM | ID = 10010 Description = < End of report >