OTL Extras logfile created on: 2013-03-02 13:36:23 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Eg4o\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,79 Gb Total Physical Memory | 2,21 Gb Available Physical Memory | 58,27% Memory free
7,59 Gb Paging File | 5,93 Gb Available in Paging File | 78,16% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,39 Gb Total Space | 60,62 Gb Free Space | 41,41% Space Free | Partition Type: NTFS
Drive D: | 319,28 Gb Total Space | 86,17 Gb Free Space | 26,99% Space Free | Partition Type: NTFS
 
Computer Name: EG4O-NTBK | User Name: Eg4o | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0167ADBD-129C-4FEB-B67D-DD911EA16B7C}" = lport=445 | protocol=6 | dir=in | app=system | 
"{04DABA79-6495-48C9-9D51-481E08DCCB4C}" = rport=138 | protocol=17 | dir=out | app=system | 
"{0C2F53E1-6C9A-496C-9E55-724FF1B778F0}" = rport=137 | protocol=17 | dir=out | app=system | 
"{26AF8DDF-1E8A-431B-9C71-DB1B1455DCB4}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{3DC11DE1-D9D5-482A-9C8F-6658FDB7F8EE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{46D8C925-7464-496E-A61D-42032F169B5A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{5F39EC68-BD7A-44FF-8390-1952E924EC60}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{6674A9C1-5D59-4C20-9867-A0C44C8EAF7B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{67A03D8F-0997-4587-9AB6-F540FF0362DA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | 
"{696A84A2-CE1E-4812-A0FD-97E8C02BC98F}" = lport=58793 | protocol=17 | dir=in | name=pando media booster | 
"{767AE81E-FE63-4910-8EFA-01697771C077}" = rport=445 | protocol=6 | dir=out | app=system | 
"{852CD893-DA47-4C6A-A35E-BD4706F9C1A6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{99C5B230-7CD7-4289-8C09-D273F583E56C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A75FF6DF-B06B-4308-AB59-F446EA706B9F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{ABA8B0AE-FBB1-465D-A809-1AEEABE5B5FD}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{BAD40EF6-9BD0-4C30-834C-1A6B845C939D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C3050E96-46BE-45F4-9415-ED39EF0BC4C4}" = lport=137 | protocol=17 | dir=in | app=system | 
"{D3012DD9-AF62-43C8-B6F9-F38B552E8138}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{E3935D76-4863-4F20-89C1-DEBB8C96F443}" = lport=58793 | protocol=17 | dir=in | name=pando media booster | 
"{E6C6D568-8197-4A06-88EE-E3977282F1DB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F14AF01C-267E-4A6A-A1B1-532CB9D103D1}" = lport=138 | protocol=17 | dir=in | app=system | 
"{F222FB02-D377-490D-B879-AF944A4E3241}" = lport=139 | protocol=6 | dir=in | app=system | 
"{F84B0303-DFBE-4600-BD72-D9835B8876E0}" = lport=58793 | protocol=6 | dir=in | name=pando media booster | 
"{F8575BC1-B88F-4703-AE62-95D226B83A05}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{FA48A2A4-BD64-413B-8B82-27120928631D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{FC53435A-5D3E-4766-B367-46513504E0E0}" = lport=58793 | protocol=6 | dir=in | name=pando media booster | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{015424E7-A386-4B2C-B58A-0885380ECBB6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{02E39574-A72C-48CB-9F56-D5097527EA26}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{1CD8654E-3855-4C46-902A-18D767CED346}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx10.exe | 
"{1D2D85ED-7916-4F8D-8848-E672B6C0A32D}" = protocol=6 | dir=in | app=d:\gry\resident evil 5\re5dx9.exe | 
"{1F6CD7F7-FD9D-4C30-B8E9-EB6749872910}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{20E4F657-D066-4335-95F9-6B1C7AF51D50}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{2264B102-F59A-487A-B7B9-8FE02C0DA411}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{2446FE0A-E997-481E-A32C-91210970F2F2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{284DF56F-B542-463D-BC7D-6C36937646AD}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx9.exe | 
"{2CDE7A81-7BDB-406B-84BF-FB69337AC3F4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{2E1E6D07-E281-4311-8E38-1D83A9C465DE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{31A9E87C-0CA3-402C-9260-DA8CB7CFD6E3}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx10.exe | 
"{33266BFC-1DF2-49B8-8439-4A5C9E25E736}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{35E992F7-9EA2-47E3-9364-4967B40BD1D9}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{3700939F-139E-4FF4-A60C-A0A2570A56D4}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{3F404645-0A63-457F-8335-6074E6FBEE5C}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx9.exe | 
"{431C803A-AF58-4DB8-9C1C-57B2709160F7}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{4965DB86-C662-4F7A-B40E-0183AA42A337}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{4E32AF1C-6FC6-401C-B855-82D5102D2030}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe | 
"{52784F61-9437-4D4A-AA12-C77D73D17AD2}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{52E4655B-1000-4EF2-B2A7-D55B677D897B}" = protocol=17 | dir=in | app=d:\gry\resident evil 5\re5dx10.exe | 
"{5BF5485F-0E3D-479B-BB65-F5F3EC392DE8}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{64862267-90F3-433C-9F06-D20B58272FCD}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | 
"{66BA6B46-2ACE-4C85-B9EF-0D00AFBCA20E}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{6F66D2F0-45FE-4A5A-AA51-52415BCCE684}" = protocol=6 | dir=in | app=c:\users\eg4o\appdata\roaming\dropbox\bin\dropbox.exe | 
"{78A9A0D2-3FFF-4703-A3FA-6C0650C01005}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{81110A35-0F47-463C-94F0-3B615C39E529}" = protocol=17 | dir=in | app=d:\steam\steam.exe | 
"{87EF0FBA-0E2C-4E3C-BAAB-B6B9C5A17063}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9122EAC9-CD19-40D3-86B1-CEA52908CB53}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{9178DC79-5540-431E-9315-EC3C8E3C88AE}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe | 
"{955B7463-1BB7-42F8-83AF-5D7E6FB96302}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{9913DD87-83D4-42E4-8C2B-764E1BB6D928}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{9C1DBE05-6F3C-4842-BC0C-F55616320B16}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{9F667844-1C4F-4D89-AD6A-CA2F09EA4A03}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{A331C55A-0C33-4418-874C-1EFE6D316017}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{A98EAEC7-259D-4A6A-B3C3-869EA4CA479B}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{A99C660A-975C-4752-831C-50655E5A2F74}" = protocol=6 | dir=in | app=d:\steam\steam.exe | 
"{AC42E908-E820-4A9B-A240-22E17832E610}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{AD299FEA-F0ED-4D07-94A8-00C891328168}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"{B355B0BF-5416-4340-9B7C-A2262010B74E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{B4A33B48-7EC5-48F3-AFA4-586334E5C269}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | 
"{BAF53E34-16A2-47CD-8667-DB460BD71AEE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{C322CC90-7FD3-47FF-AE5E-24779A96C010}" = protocol=17 | dir=in | app=c:\users\eg4o\appdata\roaming\dropbox\bin\dropbox.exe | 
"{C6F2D9F6-7648-4EC9-8558-8452D173D18A}" = protocol=6 | dir=in | app=c:\users\eg4o\appdata\roaming\icqm\icq.exe | 
"{C708D65A-B17F-4612-9AF5-F8921175C18D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{C7383583-39D4-44E8-90A3-F553225073A6}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\legend of grimrock\grimrock.exe | 
"{C85FF3DE-FFA0-46ED-8634-F2F00A51CB54}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{D1006544-A28B-4198-8394-D675843CAC49}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{D112C778-CED3-4981-9C3E-8168DC4EA636}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{D61C7117-68FD-44CB-B851-EC1435447CFC}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{DDEF12B0-33A3-4BEF-A0AB-028944102158}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{E0D26E83-FB7D-4EA6-A673-F6E4E269F093}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\legend of grimrock\grimrock.exe | 
"{E588240B-9DA5-49B0-992B-91059F374B6D}" = protocol=17 | dir=in | app=d:\gry\resident evil 5\re5dx9.exe | 
"{E5D64F43-B52F-4D89-9DBA-2EA0B503146C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{E6C554F2-46BA-4389-8440-10CEBB859C10}" = protocol=6 | dir=out | app=system | 
"{E913EF67-9C87-4526-A343-5F18D544E9EC}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | 
"{EBF1B539-6521-428C-B6C5-F000E1FCD24D}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{F49D31D5-F36E-4024-8B3F-E5B1EA9CFA87}" = protocol=6 | dir=in | app=d:\gry\resident evil 5\re5dx10.exe | 
"{FA2C044D-F4CE-494B-9B53-7DBA7CC36723}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{FEBD9D2B-61D8-40B3-8E7F-660E2EA3AAD5}" = protocol=17 | dir=in | app=c:\users\eg4o\appdata\roaming\icqm\icq.exe | 
"{FEE04E98-A6F9-49F6-8CD5-5D8DAC378F65}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"TCP Query User{079505C6-76CA-498D-98E5-F620386B9F8A}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"TCP Query User{B29F26AC-3007-4E99-9062-817DB223EA42}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"TCP Query User{B5186602-85BF-49EA-8FB5-910526F48EFD}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"UDP Query User{548AFF11-3BDA-4098-85AC-59F1F48A8476}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"UDP Query User{976477D0-612F-4451-9D93-0F274734E886}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"UDP Query User{CACA05A6-56A4-4255-A968-1BEA63A4F19A}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1}" = Microsoft .NET Framework 4.5
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.9.10.3377
"{26A24AE4-039D-4CA4-87B4-2F86417011FF}" = Java 7 Update 11 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0415-1000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0015-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0415-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0016-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0415-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0018-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0415-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-0019-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0415-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001A-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0415-1000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001B-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUS_{70A3169E-288F-454F-A08D-20DF66639B50}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUS_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0415-1000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-001F-0415-1000-0000000FF1CE}_Office14.PROPLUS_{329A3D98-9583-4B84-B18B-498E7AB65C43}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-002C-0415-1000-0000000FF1CE}_Office14.PROPLUS_{BFEB53FA-3044-47FD-BB50-9DCBBEED79EF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2010
"{90140000-0043-0415-1000-0000000FF1CE}_Office14.PROPLUS_{FF5F6090-64DF-4BF6-BADD-71A64FDA70D2}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0415-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-0044-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-006E-0415-1000-0000000FF1CE}_Office14.PROPLUS_{3A96ABFF-5202-47B1-B5A2-DDE76563AF61}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0415-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00A1-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0415-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{90140000-00BA-0415-1000-0000000FF1CE}_Office14.PROPLUS_{E363E2E9-6AE1-4B10-94B6-015819AE201D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Polski pakiet językowy dla programu Microsoft .NET Framework 4.5 PLK
"{94C42BE9-B62A-3558-A793-AD49B354F7AA}" = Microsoft .NET Framework 4.5 PLK Language Pack
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{D9C50188-12D5-4D3E-8F00-682346C2AA5F}" = Microsoft Xbox 360 Accessories 1.2
"doxygen_is1" = doxygen 1.8.3
"Elantech" = ETDWare PS/2-X64 11.5.6.6_WHQL
"MediaInfo" = MediaInfo 0.7.61
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"USB2.0 UVC 2M WebCam" = USB2.0 UVC 2M WebCam
"WinRAR archiver" = WinRAR 4.20 (64-bitowy)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{19EA33FB-B34E-40EA-8B8A-61743AEB795A}" = Wireless Console 3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4F360C30-9B2A-45CE-BBC4-C1B469584889}" = Avdump2 GUI
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}" = Prince of Persia - Dwa Trony
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Ashampoo Burning Studio 2013_is1" = Ashampoo Burning Studio 2013 v.11.0.5
"AviSynth" = AviSynth 2.5
"AVS Screen Capture_is1" = AVS Screen Capture version 2.0.1
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor_is1" = AVS Video Editor 6
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"DAEMON Tools Lite" = DAEMON Tools Lite
"FileZilla Client" = FileZilla Client 3.6.0.2
"foobar2000" = foobar2000 v1.1.18
"Foxit Reader_is1" = Foxit Reader
"Google Chrome" = Google Chrome
"HideIPVPN" = HideIPVPN 2.0.0.3
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.6.0
"mIRC" = mIRC
"Mozilla Thunderbird 17.0.3 (x86 pl)" = Mozilla Thunderbird 17.0.3 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NapiProjekt_is1" = NapiProjekt (2.1.0.2287)
"Notepad++" = Notepad++
"Opera 12.14.1738" = Opera 12.14
"Steam App 211420" = Dark Souls: Prepare to Die Edition
"Steam App 219150" = Hotline Miami
"Steam App 240" = Counter-Strike: Source
"UltraISO_is1" = UltraISO Premium V9.53
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.5
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-1964069623-3874490825-2877917154-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"CodeBlocks" = CodeBlocks
"Dropbox" = Dropbox
"ICQ" = ICQ 8.0 (build 5981, for the current user)
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2013-02-28 07:12:18 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-02-28 07:15:28 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-02-28 09:09:40 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-01 02:35:46 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-01 05:35:36 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-01 11:30:10 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-01 12:59:08 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-02 07:58:26 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-02 08:02:38 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
Error - 2013-03-02 08:22:05 | Computer Name = Eg4o-NTBK | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 2013-03-01 12:59:49 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7038
Description = Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser 
za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu:   %%1330    Aby
 upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w
 programie Microsoft Management Console (MMC).
 
Error - 2013-03-01 12:59:49 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego
 błędu:   %%1069
 
Error - 2013-03-02 07:59:02 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7038
Description = Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser 
za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu:   %%1330    Aby
 upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w
 programie Microsoft Management Console (MMC).
 
Error - 2013-03-02 07:59:02 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego
 błędu:   %%1069
 
Error - 2013-03-02 08:00:56 | Computer Name = Eg4o-NTBK | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:59:31 na ?2013-?03-?02 było 
nieoczekiwane.
 
Error - 2013-03-02 08:03:24 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7038
Description = Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser 
za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu:   %%1330    Aby
 upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w
 programie Microsoft Management Console (MMC).
 
Error - 2013-03-02 08:03:24 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego
 błędu:   %%1069
 
Error - 2013-03-02 08:20:33 | Computer Name = Eg4o-NTBK | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 13:18:45 na ?2013-?03-?02 było 
nieoczekiwane.
 
Error - 2013-03-02 08:23:03 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7038
Description = Usługa nvUpdatusService nie może zalogować się jako .\UpdatusUser 
za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu:   %%1330    Aby
 upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w
 programie Microsoft Management Console (MMC).
 
Error - 2013-03-02 08:23:03 | Computer Name = Eg4o-NTBK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi NVIDIA Update Service Daemon z powodu następującego
 błędu:   %%1069
 
 
< End of report >