OTL Extras logfile created on: 2012-12-02 17:19:50 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\user\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 72,91% Memory free
4,23 Gb Paging File | 3,82 Gb Available in Paging File | 90,35% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 92,77 Gb Total Space | 2,66 Gb Free Space | 2,86% Space Free | Partition Type: NTFS
Drive E: | 92,07 Gb Total Space | 0,17 Gb Free Space | 0,19% Space Free | Partition Type: NTFS
 
Computer Name: USER-PC | User Name: user | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" = C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe" = C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{111770D9-38DB-43D1-AD2E-D2E57DE14A76}" = protocol=6 | dir=in | app=c:\program files\crash time 4 - the syndicate\crashtime4low.exe | 
"{3BAD994A-03F2-46C0-8797-F5C3B2DC40C3}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{3F03684D-F4E7-4361-BABD-5DEBC52A27D8}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{3F08EA9C-437A-416B-9156-DC8B194EB68F}" = protocol=17 | dir=in | app=c:\users\user\desktop\audioconverter_setup(2).exe | 
"{4A947C8A-696C-4FD7-B9F3-6389AD9807D6}" = protocol=6 | dir=in | app=c:\users\user\desktop\audioconverter_setup(2).exe | 
"{51CC1C10-1E1C-4B27-A948-C81A6DA00E23}" = protocol=17 | dir=in | app=c:\program files\crash time 4 - the syndicate\crashtime4hi.exe | 
"{58D5500B-BDBA-49EE-A4A7-4ED535EE6E82}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{641E4E70-CE33-4464-801A-89F11D7CA4B3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{67987077-6801-49A6-9F47-536461CACCB1}" = protocol=6 | dir=in | app=c:\program files\crash time 4 - the syndicate\crashtime4hi.exe | 
"{687A7EE3-FCFE-4915-A218-54062F536E73}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{713515AF-A69A-4AE9-807D-A6D20DC0D73F}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{8046019F-97FD-41CA-AE12-00FB95173399}" = protocol=17 | dir=in | app=c:\program files\crash time 4 - the syndicate\crashtime4low.exe | 
"{843D2E73-DEF4-4C3C-ADB8-E6FD9EEB33D0}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{AF68123D-7CD2-4D14-9F5C-73C0D5FCCACD}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{B314606F-6F83-47C3-BD68-6613230E8CFE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B657AF83-1742-4ED3-9B8B-E4C8004D0CBB}" = protocol=17 | dir=in | app=c:\users\user\desktop\audioconverter_setup.exe | 
"{FE8B7E67-84DE-43D0-8104-3EF4519CACA2}" = protocol=6 | dir=in | app=c:\users\user\desktop\audioconverter_setup.exe | 
"TCP Query User{00C30A5D-E8F9-47AD-8856-6A62456FB3AF}C:\users\user\appdata\local\virtualstore\program files\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\users\user\appdata\local\virtualstore\program files\metin2_pl\metin2.bin | 
"TCP Query User{12FAD825-71D0-45AB-AB68-A88717910160}C:\program files\ea games\medal of honor pacific assault(tm)\mohpa.exe" = protocol=6 | dir=in | app=c:\program files\ea games\medal of honor pacific assault(tm)\mohpa.exe | 
"TCP Query User{164A89A2-F5E1-43A0-BC03-B2275A47ADB4}C:\program files\bearshare\bearshare.exe" = protocol=6 | dir=in | app=c:\program files\bearshare\bearshare.exe | 
"TCP Query User{2C5664C4-3A2D-4E1E-B5BA-582C50B48249}C:\program files\atari\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\program files\atari\metin2_pl\metin2.bin | 
"TCP Query User{342759F9-741B-4A92-86E9-C99C720D18BF}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=6 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe | 
"TCP Query User{372A2C44-57B2-4C98-9059-CC6777DF225B}C:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"TCP Query User{3DBDE21D-0E4E-4EEE-A91B-02C2B73EA423}C:\program files\ea games\need for speed underground 2\speed2.exe" = protocol=6 | dir=in | app=c:\program files\ea games\need for speed underground 2\speed2.exe | 
"TCP Query User{425FA8C6-9F13-48AD-BE14-F9C4BA1A8B51}C:\program files\flashget network\flashget universal\flashget.exe" = protocol=6 | dir=in | app=c:\program files\flashget network\flashget universal\flashget.exe | 
"TCP Query User{57FAC4B5-A19F-4F5C-B082-483B97CE2507}C:\program files\atari\nowy folder\metin2_pl\metin.exe" = protocol=6 | dir=in | app=c:\program files\atari\nowy folder\metin2_pl\metin.exe | 
"TCP Query User{6F563A48-0876-441D-A917-ABB57AFEF26C}C:\program files\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files\valve\hl.exe | 
"TCP Query User{726ABE62-63CA-49D5-BCBF-AC983ED4C7D6}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"TCP Query User{73FF3165-5922-4602-9CF9-0B5D4BCC3288}C:\program files\codemasters\rf online;\rf.exe" = protocol=6 | dir=in | app=c:\program files\codemasters\rf online;\rf.exe | 
"TCP Query User{7D2C10CF-4792-4029-AF47-E9FBCCE7EEF4}C:\program files\id\quake3\quake3.exe" = protocol=6 | dir=in | app=c:\program files\id\quake3\quake3.exe | 
"TCP Query User{7FDF956A-E9CC-4654-A261-35019ADE518E}C:\users\user\documents\god\god.exe" = protocol=6 | dir=in | app=c:\users\user\documents\god\god.exe | 
"TCP Query User{8224F773-2B83-49FA-A4C4-3063387C628E}C:\users\user\crash time iv the syndicate [prophet] [pl] [.rar] [wolverine]\tilian2\metin2client.exe" = protocol=6 | dir=in | app=c:\users\user\crash time iv the syndicate [prophet] [pl] [.rar] [wolverine]\tilian2\metin2client.exe | 
"TCP Query User{85A3DAC0-7847-43B3-8C90-8A396F0C282E}C:\program files\atari\test drive unlimited\testdriveunlimited.exe" = protocol=6 | dir=in | app=c:\program files\atari\test drive unlimited\testdriveunlimited.exe | 
"TCP Query User{8C96D2F0-D03D-4EA0-B0A2-6801E838BFC9}C:\program files\atari\metin2_pl\metin2mod.bin" = protocol=6 | dir=in | app=c:\program files\atari\metin2_pl\metin2mod.bin | 
"TCP Query User{A1491623-FBD5-4820-BF54-68050DED942F}C:\program files\rockstar games\gta san andreas\gta_sa.exe" = protocol=6 | dir=in | app=c:\program files\rockstar games\gta san andreas\gta_sa.exe | 
"TCP Query User{B446D3F8-2A07-47FA-82A0-FB35CBBDFE37}C:\users\user\appdata\local\temp\rar$ex01.375\samp-server.exe" = protocol=6 | dir=in | app=c:\users\user\appdata\local\temp\rar$ex01.375\samp-server.exe | 
"TCP Query User{B7E3F211-F04C-448B-82E4-2A8DC9CDD43A}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"TCP Query User{C42A6657-DA93-4153-8BC1-0AECA36A0C26}C:\program files\wyzo\wyzo.exe" = protocol=6 | dir=in | app=c:\program files\wyzo\wyzo.exe | 
"TCP Query User{C5BDF3BC-7DF1-41BB-B3A7-0D23884C0018}C:\program files\atari\metin2_pl\luncher xlast.exe" = protocol=6 | dir=in | app=c:\program files\atari\metin2_pl\luncher xlast.exe | 
"TCP Query User{C8B0AA20-E22F-41CA-AAD1-A6D04C0FBFCA}D:\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=d:\metin2_pl\metin2.bin | 
"TCP Query User{D8C3CE55-A895-4A32-A29F-2C103D4AB6C4}C:\program files\atari\metin2_pl\fkyt2_up_by_kabano.exe" = protocol=6 | dir=in | app=c:\program files\atari\metin2_pl\fkyt2_up_by_kabano.exe | 
"TCP Query User{DDCE0EFF-997A-4BF9-AA0A-3B4CE344F200}C:\program files\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"TCP Query User{E91D3AFF-0338-4F6F-8425-E2FD98F24CA7}C:\program files\counter-strike\cstrike.exe" = protocol=6 | dir=in | app=c:\program files\counter-strike\cstrike.exe | 
"TCP Query User{EC09E858-AD47-4A74-B646-7DEAEC2DE585}C:\program files\flashget\flashget.exe" = protocol=6 | dir=in | app=c:\program files\flashget\flashget.exe | 
"TCP Query User{EE0C44D0-72FE-4FD5-B442-413EECACCDD2}C:\program files\metin2_pl\metin.exe" = protocol=6 | dir=in | app=c:\program files\metin2_pl\metin.exe | 
"TCP Query User{FC721E6E-CD87-4405-9850-8C68637BECC7}C:\program files\valve\hlds.exe" = protocol=6 | dir=in | app=c:\program files\valve\hlds.exe | 
"TCP Query User{FFE84E0E-3C1D-479D-86AD-3B604002D8AB}D:\nowy folder\metin2.bin" = protocol=6 | dir=in | app=d:\nowy folder\metin2.bin | 
"UDP Query User{061EEA45-16BE-4FE9-BB90-042335178D21}C:\users\user\appdata\local\virtualstore\program files\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\users\user\appdata\local\virtualstore\program files\metin2_pl\metin2.bin | 
"UDP Query User{1AA4FBC3-0429-49DF-BD09-43C63C3E6BC6}C:\program files\wyzo\wyzo.exe" = protocol=17 | dir=in | app=c:\program files\wyzo\wyzo.exe | 
"UDP Query User{27FFC88A-710B-4BC9-966C-9F18D74B3350}C:\program files\atari\metin2_pl\luncher xlast.exe" = protocol=17 | dir=in | app=c:\program files\atari\metin2_pl\luncher xlast.exe | 
"UDP Query User{50FE7672-BC45-42B8-9C60-39C9AEF53319}C:\program files\flashget network\flashget universal\flashget.exe" = protocol=17 | dir=in | app=c:\program files\flashget network\flashget universal\flashget.exe | 
"UDP Query User{60A837D6-FE59-41D5-BA82-FB5EB989FE6A}C:\program files\codemasters\rf online;\rf.exe" = protocol=17 | dir=in | app=c:\program files\codemasters\rf online;\rf.exe | 
"UDP Query User{677B8559-D5D3-4FAD-9680-8DE374F8391A}C:\program files\ea games\medal of honor pacific assault(tm)\mohpa.exe" = protocol=17 | dir=in | app=c:\program files\ea games\medal of honor pacific assault(tm)\mohpa.exe | 
"UDP Query User{6CD61A77-DE4F-4561-9426-3B2D93FDA7E5}C:\program files\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"UDP Query User{71E5A6A6-1CC5-418A-A61C-3792EAC53B88}D:\nowy folder\metin2.bin" = protocol=17 | dir=in | app=d:\nowy folder\metin2.bin | 
"UDP Query User{7EC5F212-A204-49FE-831C-5BA163D795D5}C:\program files\atari\nowy folder\metin2_pl\metin.exe" = protocol=17 | dir=in | app=c:\program files\atari\nowy folder\metin2_pl\metin.exe | 
"UDP Query User{94F7FA5E-986D-413C-B708-D4D61FF9B8F7}C:\program files\rockstar games\gta san andreas\gta_sa.exe" = protocol=17 | dir=in | app=c:\program files\rockstar games\gta san andreas\gta_sa.exe | 
"UDP Query User{99B85EAD-955B-4BEF-AE20-A721CF545A0B}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"UDP Query User{9F771877-2BF5-44E6-8A8A-23F2B55C44D1}C:\program files\valve\hlds.exe" = protocol=17 | dir=in | app=c:\program files\valve\hlds.exe | 
"UDP Query User{AB8F388D-8CD6-4424-9391-88CEAC2EED1C}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{AFAE6903-9766-4F15-9305-A7ADF48120F0}C:\program files\atari\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\program files\atari\metin2_pl\metin2.bin | 
"UDP Query User{B9DF3366-C0C0-42DF-9D97-90A7AE2AECED}C:\program files\bearshare\bearshare.exe" = protocol=17 | dir=in | app=c:\program files\bearshare\bearshare.exe | 
"UDP Query User{C0E4AFA0-112B-418A-9156-0F2EEEA6560B}C:\users\user\documents\god\god.exe" = protocol=17 | dir=in | app=c:\users\user\documents\god\god.exe | 
"UDP Query User{C8317CA3-8869-4B64-9302-33CF6891F0AA}C:\program files\id\quake3\quake3.exe" = protocol=17 | dir=in | app=c:\program files\id\quake3\quake3.exe | 
"UDP Query User{CB63C2BF-85EC-4AAB-9392-F8F2622132C6}D:\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=d:\metin2_pl\metin2.bin | 
"UDP Query User{CDDECEED-37FC-4665-8442-D4E133F6AE0A}C:\program files\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files\valve\hl.exe | 
"UDP Query User{D57E0D7E-7E0A-45A0-B941-59FB4D8E7479}C:\program files\atari\metin2_pl\metin2mod.bin" = protocol=17 | dir=in | app=c:\program files\atari\metin2_pl\metin2mod.bin | 
"UDP Query User{D5AB2566-B93B-46C0-B6F2-A68C707DE66C}C:\program files\atari\metin2_pl\fkyt2_up_by_kabano.exe" = protocol=17 | dir=in | app=c:\program files\atari\metin2_pl\fkyt2_up_by_kabano.exe | 
"UDP Query User{DDE116A2-1DD7-45CF-9A67-E83A855B655C}C:\users\user\crash time iv the syndicate [prophet] [pl] [.rar] [wolverine]\tilian2\metin2client.exe" = protocol=17 | dir=in | app=c:\users\user\crash time iv the syndicate [prophet] [pl] [.rar] [wolverine]\tilian2\metin2client.exe | 
"UDP Query User{E039F9D6-FCD5-4BF8-83FC-7D3C5DBD1E99}C:\program files\metin2_pl\metin.exe" = protocol=17 | dir=in | app=c:\program files\metin2_pl\metin.exe | 
"UDP Query User{E97E1DAF-A042-43A9-A515-8B92FCD38C51}C:\users\user\appdata\local\temp\rar$ex01.375\samp-server.exe" = protocol=17 | dir=in | app=c:\users\user\appdata\local\temp\rar$ex01.375\samp-server.exe | 
"UDP Query User{E9D8267C-7F6A-4952-9157-9B9E9D1D21F6}C:\program files\atari\test drive unlimited\testdriveunlimited.exe" = protocol=17 | dir=in | app=c:\program files\atari\test drive unlimited\testdriveunlimited.exe | 
"UDP Query User{EBBA5674-1C89-466D-A6C6-64AE9B5B1942}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=17 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe | 
"UDP Query User{F3F58CBC-7FE3-4858-8D02-528253A7BC24}C:\program files\flashget\flashget.exe" = protocol=17 | dir=in | app=c:\program files\flashget\flashget.exe | 
"UDP Query User{F62FC048-B9C7-45AC-85EE-BC31E5879BC4}C:\program files\ea games\need for speed underground 2\speed2.exe" = protocol=17 | dir=in | app=c:\program files\ea games\need for speed underground 2\speed2.exe | 
"UDP Query User{F879747F-1BDB-4D1C-A0B4-73920060C9B0}C:\program files\counter-strike\cstrike.exe" = protocol=17 | dir=in | app=c:\program files\counter-strike\cstrike.exe | 
"UDP Query User{FC061528-FEA8-4627-9575-BDCDEBA0F062}C:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{01513E3B-EB4C-BD2E-07F0-E2D9CEFCB580}" = CCC Help Italian
"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}" = Apple Software Update
"{054E7727-CAAE-FE78-F75C-7DAA3B86DCC3}" = CCC Help Spanish
"{0C04BB3F-863B-E348-8633-03769E7A9097}" = CCC Help French
"{1060E688-8136-402D-A699-4747B9224784}" = Brother HL-2035
"{116B3E3B-2FBD-1585-3A41-7C033434E585}" = CCC Help Japanese
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1C4551A6-4743-4093-91E4-1477CD655043}" = NVIDIA PhysX
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2461E016-9FB4-B233-A74D-91D11A664342}" = CCC Help English
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2F3BC248-F857-F353-247C-CDC433D52DD7}" = CCC Help Swedish
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{34E86173-00D0-7BA5-12D2-EE1248F99406}" = CCC Help Chinese Standard
"{36068588-9992-48E9-B223-5BEBB0C7A322}" = Playlist Editor
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{3E915CB7-511A-0851-CC8C-4EEAFFCCD229}" = CCC Help Portuguese
"{3FB9DC57-ED98-1720-F5E7-A184EF7F4300}" = CCC Help Finnish
"{45364B56-2366-4891-9FB1-216453C7E9B9}" = Style Converter 3
"{454720C2-0111-47E3-A482-8C8BE7FC8095}_is1" = Pomocnik Policjanta
"{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}" = Bonjour
"{4DC44CCC-3248-44D7-A655-E13FEE6F5FB9}" = DDJMMAN
"{4DC613E6-AE72-A110-0D0A-FC764B738C04}" = CCC Help Korean
"{4F2CE68F-EDBB-4592-BF07-5AC930A51045}" = Nero 7 Premium
"{51002784-18FA-8FF9-9A1A-2468E7FCA096}" = Catalyst Control Center Graphics Previews Common
"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5783F2D7-8001-0415-0002-0060B0CE6BBA}" = AutoCAD 2010 - Polski
"{5783F2D7-8001-0415-1002-0060B0CE6BBA}" = Pakiet językowy programu AutoCAD 2010 - polski
"{5986514D-2EFE-B1C8-A5BF-57A084711B89}" = ccc-utility
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{6D22289D-ED59-4F97-B636-2111EC64F5D4}" = Apple Mobile Device Support
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{88976B46-967A-9B1A-14AC-DC388AE2DF09}" = CCC Help Polish
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel Matrix Storage Manager
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A00A308-1FFC-3E4E-976D-429E349CB5E0}" = CCC Help Danish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D1B275D-C436-E222-4220-B272F59ED78F}" = AMD Catalyst Install Manager
"{9DCA1423-F8DA-BE40-BE79-A2F60B418B01}" = CCC Help Hungarian
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = Wyciszacz napędu CD/DVD
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 3.2.807
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.1 - Polish
"{B061ACC7-5819-B01A-87B5-712E713143A4}" = CCC Help Dutch
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{BAF5914B-5730-4373-B038-9F436AC6A0D6}" = Rayman3
"{BB9B32B9-FD41-6C73-0196-D11E4B5135BF}" = CCC Help German
"{BEBFE0AC-97E2-DE43-AF13-40F86DAEB1CA}" = CCC Help Thai
"{BEF78FDE-9635-C229-60D2-FF606DF30765}" = CCC Help Chinese Traditional
"{C454E7DD-A09A-6D06-7FF9-59753475FC09}" = Catalyst Pro Control Center
"{CDD46178-82E5-5D00-DBB7-F16B828F5325}" = e-Deklaracje Desktop
"{CE23BD08-F6FD-3337-D8BC-5B55E69263A5}" = Catalyst Control Center InstallProxy
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D31E6192-5790-4AB4-852B-1153205AE653}_is1" = Polski VAG 4.9
"{DA109884-7CDC-5F21-5F0B-742AA74F84E1}" = Catalyst Control Center Localization All
"{DB780B85-B4B5-4864-A49C-9B706B169C93}" = TIPCI
"{DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE}_is1" = NOD32 FiX v2.1
"{E19490CD-5380-4F37-B0A7-624D635605DC}" = Catalyst Control Center - Branding
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E7A7CD0A-8047-6241-1924-7F781A95BD85}" = CCC Help Norwegian
"{E847D16E-AA7A-33A3-AB9E-AC37B3D1E74F}" = CCC Help Russian
"{E9AD90C1-6281-45AB-9458-098D2EF770A1}" = Microsoft Works
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{F0439D76-7759-DC14-652B-6947C005196E}" = CCC Help Czech
"{F07A428D-232A-5D06-E394-2BED0F311005}" = CCC Help Turkish
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{FDB16CB6-48A0-5C95-5184-AECFF8B9716D}" = CCC Help Greek
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"3134FEF0E1D959EC0CC2E458C94B7057B2AC0CC9" = Pakiet sterowników systemu Windows - FTDI CDM Driver Package (10/22/2009 2.06.00)
"88EB56038379B8B7DCFB4D2448A60F52E064B265" = Pakiet sterowników systemu Windows - FTDI CDM Driver Package (10/22/2009 2.06.00)
"Acoustica Effects Pack" = Acoustica Effects Pack
"Acoustica Mixcraft 4.1" = Acoustica Mixcraft 4.1
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"AIMP2" = AIMP2
"Allok 3GP PSP MP4 iPod Video Converter_is1" = Allok 3GP PSP MP4 iPod Video Converter 6.2.0603
"ALLPlayer V2.3.1_is1" = ALLPlayer V2.3.1
"Ask Toolbar_is1" = Ask Toolbar
"Audacity_is1" = Audacity 1.2.6
"AutoCAD 2010 - Polski" = AutoCAD 2010 - Polski
"BabylonToolbar" = Babylon toolbar
"Cakewalk.Pro.Audio.9.03-TcC" = Cakewalk.Pro.Audio.9.03-TcC
"CCleaner" = CCleaner
"Codec_is1" = Codec 7.8g
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-01-24
"Complitly_is1" = Complitly
"Cool Edit Pro 2.0" = Cool Edit Pro 2.0
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DealPly" = DealPly
"DivX Codec" = DivX Codec
"e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop
"Enigma: Rising Tide" = Enigma: Rising Tide
"FlightGear_is1" = FlightGear v2.0.0
"FTDICOMM" = FTDI USB Serial Converter Drivers
"Gadu-Gadu" = Gadu-Gadu 7.7
"HaaliMkx" = Haali Media Splitter
"INFO-TECH" = INFO-TECH
"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Hasło administratora
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = Sprzęt instalacyjny TOSHIBA
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"InstallShield_{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
"InstallShield_{DB780B85-B4B5-4864-A49C-9B706B169C93}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"MatroskaProp" = MatroskaProp (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"Native Instruments Traktor DJ Studio 3" = Native Instruments Traktor DJ Studio 3
"Niezbędnik CD_is1" = Niezbędnik CD
"NOD32" = System Antywirusowy NOD32
"NokiaFREE Unlock Codes Calculator" = NokiaFREE Unlock Codes Calculator
"OpenAL" = OpenAL
"PK-PCSU_is1" = Przyspiesz Komputer
"PLAY ONLINE" = PLAY ONLINE
"POD-Bot 2.5" = POD-Bot 2.5
"qt7lite_is1" = QT Lite 2.4.0
"searchya" = SearchYa Toolbar  on IE and Chrome
"Shockwave" = Shockwave
"SubEdit - Vista WMP Patch_is1" = SubEdit - Vista WMP Patch
"SubEdit-Player_is1" = SubEdit-Player
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TimeFactory" = TimeFactory
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"VCDS-Lite  1.0" = VCDS-Lite 1.0
"Wave 2 Mp3_is1" = Wave 2 Mp3 1.1
"Winamp" = Winamp
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR archiver
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SiemensJava.pl - Emulacja Gier" = SiemensJava.pl - Emulacja Gier
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-11-18 15:35:31 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd TosBtMng.exe, wersja 5.0.0.38, sygnatura
 czasowa 0x45e3c235, moduł powodujący błąd unknown, wersja 0.0.0.0, sygnatura czasowa
 0x00000000, kod wyjątku 0xc0000005, przesunięcie błędu 0x00000000,  identyfikator
 procesu 0xa68, godzina rozpoczęcia aplikacji 0x01cdc56ff6736e2e.
 
Error - 2012-11-18 16:58:56 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd firefox.exe, wersja 1.9.0.3725, sygnatura
 czasowa 0x4b9de18e, moduł powodujący błąd ole32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a74c, kod wyjątku 0xc0000005, przesunięcie błędu 0x00038a27,  identyfikator
 procesu 0x1094, godzina rozpoczęcia aplikacji 0x01cdc5c5cd44801f.
 
Error - 2012-11-28 08:16:16 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd firefox.exe, wersja 1.9.0.3725, sygnatura
 czasowa 0x4b9de18e, moduł powodujący błąd ole32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a74c, kod wyjątku 0xc0000005, przesunięcie błędu 0x00038a27,  identyfikator
 procesu 0x13e0, godzina rozpoczęcia aplikacji 0x01cdcd61eebff620.
 
Error - 2012-12-02 11:33:57 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0x11c0, godzina rozpoczęcia aplikacji 0x01cdd0a2719cc485.
 
Error - 2012-12-02 11:33:59 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0x133c, godzina rozpoczęcia aplikacji 0x01cdd0a272f06da5.
 
Error - 2012-12-02 11:36:56 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0xc58, godzina rozpoczęcia aplikacji 0x01cdd0a2dc8f46f5.
 
Error - 2012-12-02 11:57:51 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0x1398, godzina rozpoczęcia aplikacji 0x01cdd0a5c83db2b6.
 
Error - 2012-12-02 11:57:53 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0x13d8, godzina rozpoczęcia aplikacji 0x01cdd0a5c9d99036.
 
Error - 2012-12-02 11:57:54 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd rundll32.exe, wersja 6.0.6000.16386, sygnatura
 czasowa 0x4549b0e1, moduł powodujący błąd USER32.dll, wersja 6.0.6001.18000, sygnatura
 czasowa 0x4791a7a6, kod wyjątku 0xc0000142, przesunięcie błędu 0x00009cac,  identyfikator
 procesu 0x1400, godzina rozpoczęcia aplikacji 0x01cdd0a5ca19d556.
 
Error - 2012-12-02 12:06:35 | Computer Name = user-PC | Source = EventSystem | ID = 4609
Description = 
 
 
Error encountered while reading event logs.
 
< End of report >