OTL Extras logfile created on: 2012-10-16 10:57:58 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Natalia\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,87 Gb Total Physical Memory | 1,02 Gb Available Physical Memory | 54,60% Memory free 3,73 Gb Paging File | 3,01 Gb Available in Paging File | 80,62% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 421,81 Gb Total Space | 358,50 Gb Free Space | 84,99% Space Free | Partition Type: NTFS Drive D: | 29,00 Gb Total Space | 23,75 Gb Free Space | 81,92% Space Free | Partition Type: NTFS Drive F: | 167,72 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: NATALIA2208 | User Name: Natalia | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_USERS\S-1-5-21-880845383-2160725476-3539891362-1000\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{07F15E94-AE7E-41F6-BB54-4C6B4C5F1E19}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{0E0A577C-2DCF-4A35-9743-D7DD67901EA2}" = rport=137 | protocol=17 | dir=out | app=system | "{1BBADC0D-AC7C-43A7-97D3-60962BACB8F5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{1BEFD854-76C0-458A-9581-73C0F05E2F26}" = lport=445 | protocol=6 | dir=in | app=system | "{260D8FD7-4F13-4ADC-AE99-89E5CE26B1C6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{2B67DB28-177D-4CC5-93E3-D0E5C827ECA4}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{3DE75D77-6E6F-4EA9-9231-149AC3C2E89F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{4DAE301D-A5F0-498D-94AA-89C20E6D638F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{5781148A-ABF5-48DE-8D34-6C44001FA4E9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{58013B8A-A86F-4503-A252-E0730E1DBA7C}" = rport=138 | protocol=17 | dir=out | app=system | "{59EB63F1-A98C-4812-B935-5ECC6E0F11B9}" = rport=139 | protocol=6 | dir=out | app=system | "{5B37B416-2E35-40D7-9088-D06F507B29EF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{63ABD290-78C8-4759-B81B-1D292BD6D703}" = lport=137 | protocol=17 | dir=in | app=system | "{66A25881-985D-4FC9-80F6-84B7164FC0F9}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{7DE2E253-FD42-4D65-95EB-C15908846EC4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7EAC961F-DC76-4BDD-A6EF-87922A424AA5}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{8032FEB9-9320-435C-A2EA-A2C1EF74288A}" = rport=445 | protocol=6 | dir=out | app=system | "{85CA1C58-34D4-4E04-8E2D-CC3886A5E1D1}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{946704EB-993D-438D-A272-74B0D9C8B4BF}" = lport=138 | protocol=17 | dir=in | app=system | "{977EEA1C-9076-4364-BDA0-145EBD775CDD}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{BE2D8EB3-DC2B-43F7-8732-799BB24FAB87}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{DC71A73D-52D2-46FE-A9CB-4B07BB567FBA}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{E0A4CA34-067C-4B21-85FF-BC7D6459EEFA}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{F1695FAB-608A-40C3-807E-0D9B3BB8D4C3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{F4EAAC3A-F871-457D-B96A-1ECE920EAA81}" = lport=2869 | protocol=6 | dir=in | app=system | "{F74A5633-86F8-4859-B2B9-3449E6D5F3CE}" = lport=139 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{018A0007-972B-4D77-B05D-2C0FC235F997}" = dir=in | app=c:\program files\lenovo\readycomm\connsvc.exe | "{01F18C47-D2A7-4876-9590-DBBBD45FFD15}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | "{04674F9D-64DD-4BB9-9645-9D9582399633}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | "{13BF655C-E282-4D98-A46F-3FD815FC1EC0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe | "{155C317B-87E8-4E67-A8E1-ABF3B61E097A}" = dir=in | app=c:\windows\system32\igrssvcs.exe | "{17B44F96-F0E6-49EB-959F-AD83DDF8D70E}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{1911C50D-5C93-408D-BE0D-290710DF805D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{191485B7-CDEF-4C0A-A5C5-31FCDF8FDAF0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | "{1B18AABB-DA0C-4371-97E6-9D9D194A9E50}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{1D1C50D8-F6A6-43D0-8412-37342D2D9367}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe | "{233D4B88-9F71-42AA-B394-4311C64FAD92}" = dir=in | app=c:\program files\lenovo\readycomm\appsvc.exe | "{234DCCEC-B0B4-483C-9158-CD965C8822D0}" = dir=out | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{3014A3AA-434B-47B7-8790-E0DEB788C354}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{32896056-A9EA-4E72-8433-0C5FDC56E4E3}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | "{348A5EFE-5C76-4619-832D-8D1A217384EB}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | "{3498DF46-69B3-4EB3-8E5E-C777FFEC9005}" = dir=out | app=c:\program files\lenovo\readycomm\connsvc.exe | "{381E9F7F-FB3B-4E99-BC7B-9FD46AD2424F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{3B8415B4-8BD0-47F7-BEDD-56B9C6470FFD}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | "{3C0AF823-2935-45A7-86E5-1637BFE7706B}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | "{3E123F11-0104-4667-9B3B-C7FD19D7459A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | "{4213CB99-2CEC-4C7C-B0D1-75FBFE49164B}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | "{428A19A7-0E22-4772-85FA-CE47CCB08158}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe | "{50AE0F2F-4AC9-4E39-9B6F-3D171FDA1E0A}" = dir=out | app=c:\program files\lenovo\readycomm\readycomm.exe | "{549A7BF5-1E5F-4A17-895F-F130B51D8535}" = dir=in | app=c:\program files\lenovo\readycomm\projectionist.exe | "{56A36B41-2EF2-4042-BA97-76188CA6C5AB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{57BF0921-49B0-45C1-9A7B-64EACA25B31A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | "{5B49C1B1-C229-4354-8B33-58D40A496BCC}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | "{5E4277BB-5ED6-4C29-8BBA-9CBA394F0C6A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | "{6BE43F9E-F8D0-475B-9889-6DBFB21A5E57}" = dir=out | app=c:\windows\system32\igrssvcs.exe | "{71DB71C9-03A2-4B57-9575-A5680DDBAF72}" = dir=out | app=c:\program files\lenovo\readycomm\appsvc.exe | "{725E13E1-91A7-4B1D-8C23-71B2CF7A4880}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | "{74832E8B-DD30-4784-8DA5-F9EF090E8857}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | "{7B435CE3-42B4-45B6-B610-E48DA2DAB284}" = dir=out | app=c:\program files\lenovo\readycomm\projectionist.exe | "{80BA0C0E-1EE0-44ED-8393-86CF3F6A7E20}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe | "{817D005E-B1A8-4D66-BF1C-FD97F2DB1723}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe | "{89A2FCFC-4947-42A1-BD9F-090D9EE6EDA6}" = dir=in | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{8D508176-4710-4556-83FE-70C9EDAF8CCA}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe | "{8E457DE2-9329-4457-8539-53A5BD296F4F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{97A3545D-7EBE-42AA-BBA8-0D03464C9F03}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{A0C903A8-A26A-45E8-98F3-A55A04C8D1AF}" = protocol=6 | dir=in | app=c:\users\natalia\appdata\local\akamai\netsession_win.exe | "{A48CF9C1-BDFC-4FD9-9704-D1313BF61379}" = dir=in | app=c:\program files\lenovo\readycomm\readycom.exe | "{A72D6C31-60B5-4862-82D3-71894621F7C8}" = protocol=17 | dir=in | app=c:\users\natalia\appdata\local\akamai\netsession_win.exe | "{B0E9B31B-DDD7-470F-BEE9-1999CDED4DDF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe | "{BA33A71F-45B7-4D77-BCB2-867ADD4CAEE2}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe | "{BC08F45B-CA5B-4D59-AF81-A61890BFE738}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe | "{BEF81506-C032-4607-87DB-255DFD4F717A}" = dir=in | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{C0CB2FB6-13F3-47BA-B05E-120BF1457572}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{C9271AEC-370F-4315-B997-936E7ED479A4}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{CA1DD222-BD0E-40B4-8B8F-086F7035DFAD}" = dir=out | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{CB6C0269-4A75-4C2D-BB73-9830874A51B7}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{CBB15650-22A0-4DAE-B13C-95A43F057835}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{D7E99D80-22F7-4890-8557-EA859CB152B5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | "{DA7873F5-48A4-4688-919E-5195C32C36FF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe | "{E48666B3-26E1-4405-B519-4EBD0FB16294}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe | "{E8E2BDBE-22C8-466C-86EB-653FFDFBB0D4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | "{EB0E59E8-ACF3-4EC3-8679-69EEF76E386F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe | "{EDB46C08-1345-4A41-ADEB-8F812891146F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F4C32A2A-9D45-4F2A-87BA-BDEC876EA908}" = dir=in | app=c:\program files (x86)\common files\mcafee\mna\mcnasvc.exe | "{FC8D4D9F-389E-4461-B59E-7CFB250992E9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{FF8677E1-B4D7-4F2B-AA0F-965D313CF684}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe | "{FFAC648A-8887-44D0-8D69-052A9AA58103}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | "TCP Query User{29DF9919-8FCC-4469-B700-4C0251D72862}C:\program files (x86)\lenovo\lenovo directshare\directshare.exe" = protocol=6 | dir=in | app=c:\program files (x86)\lenovo\lenovo directshare\directshare.exe | "TCP Query User{58273EC7-C3F9-4FBF-8172-F1D4CC69F7C3}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{7C920783-B915-4CC5-B777-4C2927A0114D}C:\users\natalia\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\natalia\appdata\local\akamai\netsession_win.exe | "TCP Query User{7DE32462-773C-40C7-8274-0DEF924BFE0F}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{A3FF5DE8-37BF-43AF-94E6-FEC52C26588E}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "TCP Query User{A8A6A9F3-8692-4DBF-AF9D-2EAEDE7FDC0F}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{0842D3CE-10FC-4E43-976A-74132F93B364}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{159C846C-0E0B-43DA-8BAD-14034A6CBA0B}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{4C2430DC-29DB-4664-85B4-A44FC45740A2}C:\users\natalia\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\natalia\appdata\local\akamai\netsession_win.exe | "UDP Query User{5AFB05BC-0D57-4869-80CA-D260A6ACB439}C:\program files (x86)\lenovo\lenovo directshare\directshare.exe" = protocol=17 | dir=in | app=c:\program files (x86)\lenovo\lenovo directshare\directshare.exe | "UDP Query User{5F48864F-2270-43D3-83B7-48ADD3A526BA}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{703AE900-7482-4937-896B-0EA73E4E9EAD}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64 "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources "{26A24AE4-039D-4CA4-87B4-2F86417007FF}" = Java 7 Update 7 (64-bit) "{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources "{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 1.10.02 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Lenovo Bluetooth with Enhanced Data Rate Software "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B61ED343-0B14-4241-999C-490CB1A20DA4}" = HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{C02C2C22-2EB1-47C8-B74F-8AB1A62FAE31}" = Windows Live Family Safety "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "0A4175B489A1B4A6E07E11B063A6263480C51D71" = Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (10/19/2009 5.4.0.1) "3BA80AB4C7E9F8497C115C844953A3D4BEB84D21" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) "6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) "6B8550A319DDC8B17F35F4A89988705E4592349B" = Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) "CNXT_AUDIO_HDA" = Conexant HD Audio "HP Imaging Device Functions" = HP Imaging Device Functions 13.0 "HP Photosmart Essential" = HP Photosmart Essential 3.5 "HP Smart Web Printing" = HP Smart Web Printing 4.51 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 13.0 "HPOCR" = OCR Software by I.R.I.S. 13.0 "Lenovo EasyCamera" = Lenovo EasyCamera "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set "Samsung Mobile phone USB driver Drive" = Samsung Mobile phone USB driver Drive Software "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "Shop for HP Supplies" = Shop for HP Supplies "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common "{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0CE226F3-EB27-4ECD-BBF5-F088716779FD}" = Energy Management "{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{104066F4-5897-4067-85D3-4C88B67CCF75}" = AIO_Scan "{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5 "{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch "{1CAB4A3D-9C1B-4C09-A014-449D61643D84}" = Pro Evolution Soccer 4 Demo version "{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27 "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources "{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger "{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}" = Windows Live Sync "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg "{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4B407A54-6CF2-42B5-B419-E900B2E36972}" = 1500 "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{543E6ACA-51B7-4283-82F2-57C0582A53C5}" = Windows Live UX Platform Language Pack "{58BCCF7A-0F6F-4082-AD84-482D30415639}" = BCL easyConverter SDK 1.0.0 "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform "{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1 "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply "{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox "{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{8991E763-21F5-4DEA-A938-5D9D77DCB488}" = Broadcom 802.11 Wireless Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95140000-007A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9F6B13E2-B93F-4203-9BD4-5DC18C9F9DEB}" = AIO_CDB_Software "{A2101ACC-DC36-42AA-A576-6FD6A8D466DA}" = 1500_Help "{A4C6B32D-5088-40AF-B74D-CDABEF144F04}" = 1500Trb "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = Mobilny Internet "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC76BA86-7AD7-1045-7B44-A90100000001}" = Adobe Reader 9.0.1 - Polish "{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych "{B2164CCB-C002-4B80-8550-7535D80DF237}" = Lenovo DirectShare "{B7B3E9B3-FB14-4927-894B-E9124509AF5A}" = Adobe Flash Player 10 ActiveX "{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations "{BD8DA595-F501-4ABE-85A0-5C23E82472A0}" = Pomocnik Messenger "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential "{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DFB19121-0609-49C1-92B1-546E5A940FE8}" = Onekey Theater "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer "{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center "{FE7AD27A-62B1-44F6-B69C-25D1ECA94F5D}" = Lenovo EasyCamera "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Akamai" = Akamai NetSession Interface Service "Ares" = Ares 2.1.6 "avast5" = avast! Free Antivirus "BabylonToolbar" = Babylon toolbar on IE "CCleaner" = CCleaner "Gadu-Gadu 10" = Gadu-Gadu 10 "GameDesire-Bingo" = GameDesire-Bingo "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{1CAB4A3D-9C1B-4C09-A014-449D61643D84}" = Pro Evolution Soccer 4 Demo version "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "InstallShield_{B2164CCB-C002-4B80-8550-7535D80DF237}" = Lenovo DirectShare "KLiteCodecPack_is1" = K-Lite Codec Pack 6.9.0 (Full) "McAfee Security Scan" = McAfee Security Scan Plus "Mozilla Firefox 15.0 (x86 pl)" = Mozilla Firefox 15.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NSIS_ocoll2e" = Oxford Collocations Dictionary "Ogg Converter" = Ogg Converter "Picasa 3" = Picasa 3 "QUICKfind" = QUICKfind server v1.1 "uTorrent" = µTorrent "WinLiveSuite" = Podstawowe programy Windows Live "Wordfast" = Wordfast [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-880845383-2160725476-3539891362-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Akamai" = Akamai NetSession Interface "Mozilla Firefox 16.0.1 (x86 pl)" = Mozilla Firefox 16.0.1 (x86 pl) [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-01-24 12:07:45 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-24 13:06:36 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-24 14:10:00 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-24 16:08:14 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-24 17:08:43 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-25 07:41:03 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-25 08:00:45 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-25 13:43:40 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-25 14:08:25 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2012-01-25 15:41:31 | Computer Name = Natalia2208 | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: , wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . [ System Events ] Error - 2012-10-16 04:57:05 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:57:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:57:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:57:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:13 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:13 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:13 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-10-16 04:59:19 | Computer Name = Natalia2208 | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 < End of report >