OTL Extras logfile created on: 2013-03-17 12:33:05 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Enzinho\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,32 Gb Available Physical Memory | 57,94% Memory free
8,00 Gb Paging File | 5,72 Gb Available in Paging File | 71,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 48,73 Gb Total Space | 20,30 Gb Free Space | 41,66% Space Free | Partition Type: NTFS
Drive D: | 200,20 Gb Total Space | 157,29 Gb Free Space | 78,57% Space Free | Partition Type: NTFS
Drive E: | 216,73 Gb Total Space | 159,47 Gb Free Space | 73,58% Space Free | Partition Type: NTFS
 
Computer Name: ENZINHOFCB | User Name: Enzinho | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.YEAU3BGVNMPK6LTIUFEV2C2U2M] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0C578759-AAB9-4AB1-BF49-9ED8A971B9AC}" = rport=137 | protocol=17 | dir=out | app=system | 
"{0E7A2CC5-E4E3-4E67-A923-95A718873748}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{2C550429-888C-41F1-8BB8-10DCFFAA021E}" = rport=138 | protocol=17 | dir=out | app=system | 
"{32CC52B7-B3D0-40D7-8051-E5ED7927E001}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{34792644-96D1-476F-8FAF-DE541ACDA905}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{355F18AF-3658-467B-B156-F6796EFC4416}" = lport=137 | protocol=17 | dir=in | app=system | 
"{3593DCEE-17B6-4FFD-BB52-562A25249AF4}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{36EDBD7D-CB57-48AB-B4FA-7E577094B696}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{3AB830F9-8E14-467A-86E9-8B102D4D8313}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{3BF4F989-5F46-4B12-9932-48CB8B34735A}" = lport=139 | protocol=6 | dir=in | app=system | 
"{4A751662-6709-4BF2-952E-26C53C93F881}" = rport=445 | protocol=6 | dir=out | app=system | 
"{7E927C93-982D-4EA0-AF0A-A5ECDE4795EB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{838F8F45-53C0-4B1D-AF52-6527FB7BA394}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{83CB937F-5376-4BE6-96E3-5B8A38C74FB4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{8A853D66-0840-44FB-9C0D-6D023BAE6AA1}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{8D22B9FA-506B-4205-9176-EC8BAC46E589}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{A5F34AD2-5E1F-407B-B598-2ABB03B472D5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C508995E-5DD2-43AA-85C6-ED140F122D1E}" = lport=138 | protocol=17 | dir=in | app=system | 
"{C5D4FA47-9E64-45B8-83B4-3247B94A894B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{CF146B4C-FFFA-4E22-807A-06FC5A1F717B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{D2340146-6BB3-4F82-8F9C-3F8AA49D5629}" = rport=139 | protocol=6 | dir=out | app=system | 
"{D29EBC18-6F5A-441E-9FEF-9FDFE874425E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D454E0F9-ED37-41BF-8466-3B2F603C969B}" = lport=445 | protocol=6 | dir=in | app=system | 
"{E611D5B6-1CCC-4C41-BAA4-F15DA11E6F97}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0F9DC76D-3393-493C-9650-58F67B526AEA}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | 
"{166C16D5-6FDE-4CCD-83C3-C14A17DAA7BA}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe | 
"{16A6F1BD-A981-437B-9550-8C8C2D34F824}" = protocol=17 | dir=in | app=d:\programy\avg\avgnsa.exe | 
"{17D1A6B4-2B4B-4F1B-9FBD-A1EEE0AC7AE5}" = protocol=6 | dir=in | app=d:\programy\avg\avgmfapx.exe | 
"{1A3FECCA-6909-4990-B494-924CEC6EABB7}" = protocol=6 | dir=in | app=d:\programy\avg\avgnsa.exe | 
"{20FEC1D9-ABEA-4651-9C40-C1726680413A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{22222C2C-92C9-4BCE-8DEA-A0AA87E58C26}" = protocol=6 | dir=in | app=d:\programy\avg\avgdiagex.exe | 
"{23F5944A-A62F-45AC-8029-0D2A7A70D607}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe | 
"{2DCAD74C-AFF0-4222-8527-6B5948796794}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | 
"{2F23C4AC-43DB-40ED-AC7D-8B861C5511DD}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | 
"{36B73888-FA7D-419C-BCD0-52A3FB1F2D8C}" = protocol=17 | dir=in | app=d:\programy\avg\avgmfapx.exe | 
"{37B361C8-D521-450F-81B0-71F3D69A6C06}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{3E4779D8-1126-496E-8146-BAB98EB4B6BE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe | 
"{48856504-3F86-4AEB-9F5E-D815B1770B63}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4CC52ACA-42E4-47F3-B0D2-5B7AB092D804}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe | 
"{4D1BF3F2-DF7E-4CF3-9D57-966BA4393388}" = protocol=6 | dir=in | app=d:\programy\avg\avgdiagex.exe | 
"{50720171-0F1F-4EDC-B5F7-09A22FD294DE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | 
"{5293ECD2-559E-4682-ABF9-86278826E062}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | 
"{574467DF-C05B-4F67-83C1-71452550C7BC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{5A2E2548-A0DB-45B1-BAD8-F9C87547A7B8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{5FEB8EEF-27EB-4CBC-9D5D-3B416115D87D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{60E6E432-3E22-4071-8342-FA117B92E880}" = protocol=6 | dir=out | app=system | 
"{61636686-D964-41B8-87D2-845733E701F7}" = protocol=17 | dir=in | app=d:\programy\avg\avgnsa.exe | 
"{6330B9D5-4F2D-440F-A6E0-386957E19BD7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe | 
"{63BF160F-2CB7-4E28-A893-333BA994265C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | 
"{6EBF0C04-4382-4593-A82E-9447C788D6D7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe | 
"{72055A9F-CE7D-429C-90EE-BCB8E2FF628F}" = protocol=6 | dir=in | app=d:\programy\avg\avgnsa.exe | 
"{75738561-4EC0-4819-82D5-B92EDE240328}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{7771490E-3FF1-4D1C-8818-E7C942FFCB24}" = protocol=6 | dir=in | app=d:\programy\avg\avgemca.exe | 
"{7955FE26-5B41-4794-97BD-8955F7B558C5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{7DE65DBE-902C-47ED-8A48-84D17B1A458C}" = protocol=17 | dir=in | app=d:\programy\avg\avgemca.exe | 
"{7F67FEEB-8F7B-45D1-B192-C2A79D2341A8}" = protocol=17 | dir=in | app=d:\gry\fifa 13\game\fifa13.exe | 
"{8074AFBC-D05C-46E5-BD38-0E1068B621C7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{836F91DE-4735-4206-A6FE-3195F38BBA7A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{8704B521-9FA1-4696-809E-8FB11E05785A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | 
"{8ABC334C-851A-4626-8F5B-AD1B5D22B596}" = protocol=17 | dir=in | app=d:\programy\utorrent\utorrent.exe | 
"{8B966257-1719-45E0-9E9E-67EF04814B93}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8C5B358F-8A85-4E28-B2A6-61AFE140ACC6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{8D0F4715-35D5-4939-B077-B0DD28D11D05}" = protocol=17 | dir=in | app=d:\programy\avg\avgdiagex.exe | 
"{8E1C0F56-D506-4111-AF0F-C3F5DDE62091}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe | 
"{8F4BFAEE-95AC-472F-801E-521ADADE22C4}" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe | 
"{965C5154-0B17-494D-9CE4-6E95D50ADA49}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | 
"{99107246-D047-42B9-A72F-9F84E95D4CD1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{9AA75621-4115-4414-848C-24F4B13CAC38}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | 
"{9E29630C-D7A7-4BF4-9BF3-C6926CA74A20}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe | 
"{A8186DD5-BE04-4C13-A1C2-6B96E0E95819}" = protocol=6 | dir=in | app=d:\gry\fifa 13\game\fifa13.exe | 
"{ADBA4B90-7135-495A-8C0B-22A18E5AB93B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{B1367911-0BC6-4DF1-A34D-58B604EFD7D2}" = protocol=6 | dir=in | app=d:\programy\tunngle\tunngle.exe | 
"{B91F2398-69B2-405F-8ED2-5FA7067010C5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe | 
"{C0B9755D-F4B8-4505-8041-34B8465BD7B3}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | 
"{C1CC0549-E4B5-4D27-97AA-952901FB1468}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{C37E2985-B956-4FC7-B59E-BA97C28FF689}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe | 
"{C5658975-EA74-48DE-8EAC-D18ACEF5532F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | 
"{C6E82EC6-DFFE-43F1-A856-1C7695569688}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C8DF312E-633E-4A0F-9461-DCAE66489B3E}" = protocol=17 | dir=in | app=d:\programy\avg\avgdiagex.exe | 
"{C9B992E6-C708-4595-BCBA-1D5A0DF6839B}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | 
"{C9FC6861-A196-449D-92B7-094FE110C3DF}" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe | 
"{DD657329-D5C3-4358-8BF1-EE1DB66B71C7}" = protocol=17 | dir=in | app=d:\programy\tunngle\tnglctrl.exe | 
"{E0C25FE0-F359-4C24-946F-B4991F6A0FD1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | 
"{E14471ED-4E6E-408C-83A4-07661EB3AD41}" = protocol=17 | dir=in | app=d:\programy\tunngle\tunngle.exe | 
"{E2060094-19DF-442F-915D-95EDE716B16A}" = protocol=6 | dir=in | app=d:\programy\tunngle\tnglctrl.exe | 
"{E555C2DD-ACE7-4C8E-A93B-5ABEBFB66B52}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{E58FCFF8-7966-4929-AC42-DD3CAFC13279}" = protocol=6 | dir=in | app=d:\programy\avg\avgemca.exe | 
"{ED291E5B-53BE-4612-AE04-974B78B35450}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{EF3AB2A0-8078-4845-84ED-40511BA2A6DD}" = protocol=17 | dir=in | app=d:\programy\avg\avgemca.exe | 
"{F67284F2-A6A2-4983-A921-83674DE8E2D3}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe | 
"{F926FDD9-391B-45E6-A371-4CBBE07B7BFA}" = protocol=6 | dir=in | app=d:\programy\utorrent\utorrent.exe | 
"{FAFAD6B4-26DB-4611-AF88-5DDD4B2726AB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"TCP Query User{8A2D8EE7-8EAD-4329-8BE8-2B885C076B7D}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe | 
"TCP Query User{A2A9C3CA-00B0-4B41-BD6D-F7B93BA663A4}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"TCP Query User{B39BEF12-70BD-461F-85BC-3823E6876A2B}D:\programy\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=d:\programy\nowe gadu-gadu\gg.exe | 
"TCP Query User{B46F5E24-D396-49B5-9024-D0503AD1C09A}D:\programy\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=d:\programy\nowe gadu-gadu\gg.exe | 
"UDP Query User{360F0EFE-5523-4F8E-8C58-AF38768762C9}D:\programy\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=d:\programy\nowe gadu-gadu\gg.exe | 
"UDP Query User{5D7483E0-E398-414A-8CB4-20AA9D98224C}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe | 
"UDP Query User{AA0A2AF6-9285-41B2-B97D-D07B5C3C89E4}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"UDP Query User{E165A193-5ACA-46A7-B9D3-23F5D5CDEF3D}D:\programy\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=d:\programy\nowe gadu-gadu\gg.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables
"{26A24AE4-039D-4CA4-87B4-2F86416026FF}" = Java(TM) 6 Update 26 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86417013FF}" = Java 7 Update 13 (64-bit)
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{64A3A4F4-B792-11D6-A78A-00B0D0170000}" = Java(TM) SE Development Kit 7 (64-bit)
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{9F0D08A0-5623-4EF6-A513-40048E20C4E0}" = AVG 2013
"{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 311.06
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B61ED343-0B14-4241-999C-490CB1A20DA4}" = HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B
"{F5AA006A-1ABE-4F16-B6E1-FEE1F7D38102}" = AVG 2013
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"AVG" = AVG 2013
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Shop for HP Supplies" = Shop for HP Supplies
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.0610.1 
"{089EC62B-72C9-490C-94BD-BA6B833A0EB2}}_is1" = e-pity 2012 wersja 4.0
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{104066F4-5897-4067-85D3-4C88B67CCF75}" = AIO_Scan
"{16F22B31-9893-414F-98E0-D02CBDC287C9}" = Debugging Tools for Windows
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1" = DriverIdentifier 4.2.5
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4B407A54-6CF2-42B5-B419-E900B2E36972}" = 1500
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{68ADAEAA-DABD-45C1-9CC2-F995407549CD}" = Microsoft Windows Debugging Symbols
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9F6B13E2-B93F-4203-9BD4-5DC18C9F9DEB}" = AIO_CDB_Software
"{A2101ACC-DC36-42AA-A576-6FD6A8D466DA}" = 1500_Help
"{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}" = FIFA 13
"{A4C6B32D-5088-40AF-B74D-CDABEF144F04}" = 1500Trb
"{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS Ver.2.06
"{B7B3E9B3-FB14-4927-894B-E9124509AF5A}" = Adobe Flash Player 10 ActiveX
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C2523AE6-F335-4D0B-BC15-1C07E4ACE629}" = Pro Evolution Soccer 2013
"{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}" = BeraoywsE2save
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AIMP2" = AIMP2
"DAEMON Tools Lite" = DAEMON Tools Lite
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Fraps" = Fraps (remove only)
"GOM Player" = GOM Player
"LOLReplay" = LOLReplay
"Nowe Gadu-Gadu" = Nowe Gadu-Gadu
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Pity Format 2010_is1" = Pity Format 2010
"SP_f2a323db" = BrowseToSave 1.74
"TC PowerPack" = TC PowerPack 1.7
"T-Mobile Ekstraklasa Update" = T-Mobile Ekstraklasa Update
"Tombraider_is1" = Tombraider
"Tunngle beta_is1" = Tunngle beta
"uTorrent" = µTorrent
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{47BF68F4-D0C5-462E-B8A0-87B030458D71}" = Dark Messiah of Might and Magic
"Flux" = F.lux
"Google Chrome" = Google Chrome
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2013-03-14 15:26:41 | Computer Name = EnzinhoFCB | Source = Software Protection Platform Service | ID = 8193
Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod
 błędu:   0x80070005
 
Error - 2013-03-14 16:26:41 | Computer Name = EnzinhoFCB | Source = Software Protection Platform Service | ID = 8193
Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod
 błędu:   0x80070005
 
Error - 2013-03-14 17:26:41 | Computer Name = EnzinhoFCB | Source = Software Protection Platform Service | ID = 8193
Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod
 błędu:   0x80070005
 
Error - 2013-03-14 18:26:41 | Computer Name = EnzinhoFCB | Source = Software Protection Platform Service | ID = 8193
Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod
 błędu:   0x80070005
 
Error - 2013-03-14 19:26:41 | Computer Name = EnzinhoFCB | Source = Software Protection Platform Service | ID = 8193
Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod
 błędu:   0x80070005
 
Error - 2013-03-15 07:59:43 | Computer Name = EnzinhoFCB | Source = Winlogon | ID = 4103
Description = Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005.
 
Error - 2013-03-15 10:40:40 | Computer Name = EnzinhoFCB | Source = MsiInstaller | ID = 11935
Description = 
 
Error - 2013-03-15 11:12:06 | Computer Name = EnzinhoFCB | Source = ESENT | ID = 215
Description = WinMail (3420) WindowsMail0: Tworzenie kopii zapasowej zostało zatrzymane,
 ponieważ zostało przerwane przez klienta lub nie można nawiązać połączenia z klientem.
 
Error - 2013-03-15 11:12:10 | Computer Name = EnzinhoFCB | Source = ESENT | ID = 215
Description = WinMail (3632) WindowsMail0: Tworzenie kopii zapasowej zostało zatrzymane,
 ponieważ zostało przerwane przez klienta lub nie można nawiązać połączenia z klientem.
 
Error - 2013-03-15 16:40:27 | Computer Name = EnzinhoFCB | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: rads_user_kernel.exe, wersja: 0.0.0.0,
 sygnatura czasowa: 0x4e65c1ac  Nazwa modułu powodującego błąd: rads_user_kernel.exe,
 wersja: 0.0.0.0, sygnatura czasowa: 0x4e65c1ac  Kod wyjątku: 0xc0000005  Przesunięcie
 błędu: 0x000b8554  Identyfikator procesu powodującego błąd: 0xfc8  Godzina uruchomienia
 aplikacji powodującej błąd: 0x01ce21bd516245d2  Ścieżka aplikacji powodującej błąd:
 D:\Gry\League of Legends\League of Legends\RADS\system\rads_user_kernel.exe  Ścieżka
 modułu powodującego błąd: D:\Gry\League of Legends\League of Legends\RADS\system\rads_user_kernel.exe
Identyfikator
 raportu: 910623da-8db0-11e2-9056-6cf04948aed6
 
[ System Events ]
Error - 2013-03-17 05:41:41 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi atksgt z powodu następującego błędu:   %%577
 
Error - 2013-03-17 05:41:42 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi lirsgt z powodu następującego błędu:   %%577
 
Error - 2013-03-17 05:41:43 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7006
Description = Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił
 następujący błąd:   %%5.
 
Error - 2013-03-17 05:41:52 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7006
Description = Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił
 następujący błąd:   %%5.
 
Error - 2013-03-17 05:47:16 | Computer Name = EnzinhoFCB | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
 można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.
 
Error - 2013-03-17 06:21:45 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7006
Description = Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił
 następujący błąd:   %%5.
 
Error - 2013-03-17 06:28:14 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi atksgt z powodu następującego błędu:   %%577
 
Error - 2013-03-17 06:28:15 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7006
Description = Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił
 następujący błąd:   %%5.
 
Error - 2013-03-17 06:28:15 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi lirsgt z powodu następującego błędu:   %%577
 
Error - 2013-03-17 06:28:28 | Computer Name = EnzinhoFCB | Source = Service Control Manager | ID = 7006
Description = Wywołanie ScRegSetValueExW dla FailureActions nie powiodło się i wystąpił
 następujący błąd:   %%5.
 
 
< End of report >