OTL Extras logfile created on: 4/25/2013 11:13:13 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Jarek\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.99 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 53.06% Memory free
5.99 Gb Paging File | 4.34 Gb Available in Paging File | 72.47% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 146.62 Gb Total Space | 20.90 Gb Free Space | 14.25% Space Free | Partition Type: NTFS
Drive D: | 78.12 Gb Total Space | 15.92 Gb Free Space | 20.38% Space Free | Partition Type: NTFS
Drive F: | 465.76 Gb Total Space | 59.17 Gb Free Space | 12.70% Space Free | Partition Type: NTFS
Drive G: | 73.24 Gb Total Space | 17.89 Gb Free Space | 24.43% Space Free | Partition Type: NTFS
 
Computer Name: JAREK-PC | User Name: Jarek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-207598203-2322062775-1724687355-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( )
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01D04B47-AD64-4D8D-AF67-4F6780E58DA1}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{02180C38-EC00-4A10-A9C0-BD532C0881C3}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{0C07DA5E-38D3-4A70-9FC8-92C47E1AD408}" = lport=1900 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe | 
"{1893127B-9186-4CCA-9BEA-94D900ED17B5}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{1951A9DA-9573-4CEB-B414-2D4C126C118F}" = rport=137 | protocol=17 | dir=out | app=system | 
"{1C99DD1E-0E63-46B4-A01E-32C6FBCAF799}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{22AEFA06-B497-4875-A26C-0E5FF5C72BC3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{27B41C9A-ADEE-4E84-9B66-E4B2AB95607A}" = lport=139 | protocol=6 | dir=in | app=system | 
"{2B562BFC-D21F-494F-87A7-074C658595DA}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2E83DB09-AEF1-4781-A845-7E263AABB9D9}" = lport=138 | protocol=17 | dir=in | app=system | 
"{2F3937FA-6891-4869-BBC4-FFA15BE29D0D}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{30E6593D-12D7-41C6-9011-81590AFB3D23}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3A053F51-229A-4B49-9383-4A9DA0676CDE}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{3C6BFF17-CE0C-48A6-AE8C-4A06FD22A1C4}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{46B82714-E509-4EDD-81F6-7E0BF5622051}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{4B8BA5A1-4EC8-4D77-B49A-336C751711F7}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{51757B40-361A-4528-A54C-9D31EFA7E3A2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{5472DBA3-5532-428D-A543-32E98EC6DE94}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{5499E38F-052D-4F4A-8361-47572E791343}" = lport=1317 | protocol=17 | dir=in | app=c:\program files\connectify\connectifynetservices.exe | 
"{54F4E450-58E8-4379-BC1F-AC5F9236E447}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{673EE52D-662F-41F5-9C27-9CD42AA7C28A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{72BED1E3-7958-49AD-9FDB-1C5F8027F84D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{80F54E71-5D40-4163-A1E4-B4B24C07FD90}" = lport=68 | protocol=17 | dir=in | app=c:\program files\connectify\connectifynetservices.exe | 
"{8235028A-2BFF-47F1-A5AF-E2109A0D1525}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{831A5D2B-6D28-4F48-8A71-743E059E5F1F}" = lport=547 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe | 
"{85467A40-E397-42D7-A86F-7B478E39A572}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{9A179584-68A1-44D5-8855-613B7240980A}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{A107EB89-F6CB-4C39-8103-35566227A9C6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{A47CFBEF-A73D-467D-A5AD-FF9ED70E7339}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{A7367289-C9DD-425C-A8DE-D39E205D8E88}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{AFF629DE-DD1B-4384-8D6D-8AE4E9DEEDE6}" = lport=53 | protocol=17 | dir=in | app=c:\program files\connectify\connectifynetservices.exe | 
"{B21CD50E-DC6E-42D7-AB83-C4A7BBC17A3B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{B51E196C-CB24-4EF9-ACC5-E5666FD624F1}" = lport=2987 | protocol=6 | dir=in | app=c:\program files\connectify\connectify.exe | 
"{B561821D-3E5B-4782-BDA9-E93369BC77A3}" = lport=445 | protocol=6 | dir=in | app=system | 
"{B90BA41D-6651-41BD-AB68-59BCF8B8F77F}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner | 
"{B9E0F175-8553-43A3-89D0-67C4A141703E}" = rport=1900 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe | 
"{BA6D88C7-7D0E-4111-BE92-040B233EEF40}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{BB5D4300-9307-4A39-9D1A-3B05BDF7C550}" = lport=137 | protocol=17 | dir=in | app=system | 
"{BF3235EE-602D-444D-8C2D-6FE8C2979C73}" = rport=445 | protocol=6 | dir=out | app=system | 
"{CCCEA454-4B06-464E-B3BF-7988994C0FD9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{D173B8C3-A7B8-43C8-9758-21C68AC1E42C}" = lport=1303 | protocol=17 | dir=in | app=c:\program files\connectify\connectifynetservices.exe | 
"{D9C6521E-29F3-47C3-B42C-984AF172EAEA}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{DC9C1523-ABC3-4403-A5B3-B81E03601C2E}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DD82C972-0A5B-431B-ADED-10A8AC7C9A0F}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E3580D6B-4F37-4682-AA9D-AAE78C78B1B9}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{E543BA3D-CEB5-4DA4-89D0-885415C1C98B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{EA9411DD-F1F8-4DB7-9EDC-D78C689DF626}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{EBDA61A1-F559-4E8E-B36E-9AD8F6C9429A}" = lport=67 | protocol=17 | dir=in | app=c:\program files\connectify\connectifynetservices.exe | 
"{ED685C95-DACD-45A1-807A-ABB754661850}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{F2F716FD-ACF6-4D13-A070-0F6A7375C359}" = rport=138 | protocol=17 | dir=out | app=system | 
"{F6B892AB-BAA5-4B8E-A80C-9C944394316A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{045C35E8-0A3D-4448-999C-C43AED8B25EF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{06A45BEF-1204-40BB-A077-639E44BA0CD3}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{0912EC0B-1B54-40CC-9575-8D19AF6B3225}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0A7B722B-8DA1-4CCD-967E-2F451CD0C308}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{0B3C3991-E521-4114-9A57-ECCC6D18D759}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{0C8E18BA-3305-4DBB-8652-671E0374EB1F}" = protocol=6 | dir=in | app=c:\program files\cracked steam\steam.exe | 
"{0D35EB2B-C5A4-491F-9FD0-19B59010BBE3}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{0F14A0D7-EBE9-4DE2-A752-0FB79276326D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{1A7A6E37-3B40-4942-8B7D-A715F74BDD03}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{1FA8415A-05C5-4E9F-A057-2A46788BA696}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | 
"{2166F9EC-695E-4DFC-9727-8287C50C500E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{22938A73-7DF3-41D9-8E86-A114A3543A64}" = dir=in | app=c:\program files\nokia\nokia suite\nokiasuite.exe | 
"{2A6DE1A2-73DB-4020-88BA-95FC5C630332}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{30FB68BE-E7A4-4B20-AA59-F9443EB287FB}" = dir=in | app=c:\program files\nokia\nokia suite\nokiasuite.exe | 
"{33730774-A4A9-4FEE-A1AC-A2A74FB6EC3B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{3629B7EC-4154-4F3B-A4DC-3C5373E437D4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{44C642FA-B3B0-487D-8797-FE1DEA35BE4C}" = protocol=6 | dir=out | app=c:\windows\system32\svchost.exe | 
"{48DC6C69-621D-4B8C-B106-71CF7BD16607}" = protocol=17 | dir=in | app=c:\program files\cracked steam\steam.exe | 
"{4DFCA6A1-A70B-4B05-90E9-D04FA9149B0D}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{5E6364E0-EFF0-4CA4-BC80-EA0BA04FC2A6}" = protocol=6 | dir=in | app=g:\pes11\pes2011.exe | 
"{66E79EB5-3BF2-4FD5-88CF-C409580FB9FB}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{7624EDA6-6CE3-49AC-B50F-899FF71FA210}" = protocol=17 | dir=in | app=c:\program files\red sky\downtango\pyload-dist\pyloadcore.exe | 
"{7C56651E-6400-497E-B035-482BEA2DCB97}" = protocol=6 | dir=in | app=c:\users\jarek\appdata\roaming\dropbox\bin\dropbox.exe | 
"{8E804DF0-24F8-40E9-9EDD-FFED1E5E5EFE}" = protocol=6 | dir=in | app=c:\program files\red sky\downtango\downtango.exe | 
"{9077FED3-8BBF-4008-BFBF-C589F9DB1022}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9CAC0ED3-3FA6-43BB-AAE2-E07A003392A7}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{9F8722A9-B471-45D2-9B70-5ECB153DA814}" = dir=out | app=c:\windows\system32\svchost.exe | 
"{A0DEE819-5DF5-4720-8B3F-59BB3011901C}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{A120F15A-443A-4114-917D-5E62AFB82765}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{A149D897-580E-4FD7-94C3-1A9C0E3E2220}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A25D898B-D77B-4877-A871-D57181762DBA}" = protocol=58 | dir=in | name=internet connection sharing (router solicitation-in) | 
"{A7903284-1B84-410B-9AD8-6C5BE70AB9CB}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{A8B54956-C1F5-440A-8B9B-B3617A04A6FC}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | 
"{ABD107E3-065F-41D2-BCDD-35E582E0D194}" = protocol=17 | dir=in | app=c:\users\jarek\appdata\roaming\dropbox\bin\dropbox.exe | 
"{B11FA8B5-04AC-4C27-9E14-BE08CD999905}" = protocol=17 | dir=in | app=g:\pes11\pes2011.exe | 
"{B865D17A-05EF-41D4-A928-C914D11FFA73}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{BF6AF616-BAA4-4FED-96EB-46C702449696}" = protocol=6 | dir=out | app=system | 
"{BFA3092E-8662-428A-80DC-BC341A54301A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C12AF754-DAC5-4430-879F-663C2525C048}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{C37C8D96-79D4-41AD-BC36-90104651352B}" = protocol=17 | dir=in | app=c:\program files\red sky\downtango\downtango.exe | 
"{C9250CC9-F4B4-498C-BCE8-CDAA90D283C1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{CAEA8709-FEDE-4A78-B02B-E0C39C721C72}" = protocol=6 | dir=in | app=c:\program files\red sky\downtango\pyload-dist\pyloadcore.exe | 
"{CFA57650-D561-4521-A20D-0F770ED7CA7E}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{D9B41F1C-821C-4E6D-BCED-5E866F953285}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{E4CFC3E4-8C05-4097-BB60-E8A0632BAF21}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{E63A2CF6-7DB7-465A-9B3E-22DDF8BFE7EB}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{F7F5E862-C5C2-4C3C-9600-EC734D614FA2}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"TCP Query User{8294CACC-5C8C-4AF8-9EAF-5344B244239E}C:\program files\kadu\kadu.exe" = protocol=6 | dir=in | app=c:\program files\kadu\kadu.exe | 
"TCP Query User{997EECF8-2598-44C7-A29D-6A3A1E6B83FB}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"TCP Query User{D930BF30-77C1-47CE-BC7F-D988E42712F6}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{495F7DC7-CCC1-40ED-9303-4AB3801E8721}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"UDP Query User{52ACD7A1-81F4-459C-953C-026E6F0BDC1A}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{AD45D0DD-3E6F-47C3-8738-E945FA8B5D28}C:\program files\kadu\kadu.exe" = protocol=17 | dir=in | app=c:\program files\kadu\kadu.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}" = Corel Graphics - Windows Shell Extension
"_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5
"{0141D498-16DA-4221-A529-1D7A64BE8B05}" = OpenOffice.org 3.3
"{035400A4-29BD-3723-BEED-E2718A68CDE0}" = Microsoft Visual Studio 2010 Office Developer Tools (x86)
"{05997FF8-244D-474F-89C1-42B4F734B578}" = Real Environment Xtreme for X-Plane
"{05D4E06A-15A5-4050-A756-CB3BE6E73B03}" = Just Flight 777 Professional v1.00
"{072D086C-BE42-4276-B720-72A07F819B15}" = Free eXPert PDF Reader
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Usługa Autodesk Content Service
"{0906982B-A432-4C06-8F01-C01BE1143779}" = Nokia Connectivity Cable Driver
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A902DF4-B767-49DB-98D3-D413E6F1E703}" = World of Subways Vol.2
"{0A9DA353-D0CD-4922-A54B-2F5F4EC90986}" = Sound Blaster X-Fi Surround 5.1 Pro
"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center
"{0DDCEC37-369C-484B-B16D-B4413FD42FB9}" = Microsoft SQL Server 2008 R2 Data-Tier Application Framework
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F37D969-1260-419E-B308-EF7D29ABDE20}" = Web Deployment Tool
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}" = PMDG747_400F
"{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{196E77C5-F524-4B50-BD1A-2C21EEE9B8F7}" = Microsoft SQL Server 2008 Common Files
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD YouTube Downloader & Converter 3.6
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK
"{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
"{26050F54-3928-4D9C-849A-C48A9E831E6F}" = ChomikBox
"{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
"{268723B7-A994-4286-9F85-B974D5CAFC7B}" = Ontrack EasyRecovery Professional
"{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{2758F387-D016-4725-9D03-AB039364DF3D}" = PMDG_747-400_Sound_Update
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{2AAC4085-DCBF-417B-AEBD-182197839240}" = Native Instruments Traktor
"{2D9FEBEE-F1B7-344F-BFDF-760E18332D96}" = Microsoft Visual Studio 2010 SharePoint Developer Tools
"{2F76FF6D-B992-4FD9-8686-F09F868B2C58}" = FSNavigator
"{2FF959E3-FFE4-46C4-96DA-03F26BCFEFCC}" = Brother MFL-Pro Suite DCP-J140W
"{304DAE83-906F-4005-BA09-2870349ABD14}" = PMDG 747-400 FS9 Update V1R12 (Unifies to FSX)
"{31283076-C551-46E9-B1E3-DB722AB88DFA}" = MIRAGE FMS Type-I
"{32B08666-1587-435D-988C-7958A04B218A}_is1" = OMSI Addon Manager version 1.2.4
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{33EBF075-8593-4698-BDAF-CF8DED80BB5B}" = Nokia Suite
"{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
"{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004
"{35E853C8-8E86-4259-B4D6-E2B5BEDDABCD}" = LAGO Male Scenery FS2004 2.00
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3BB19A2B-B9C5-3872-8FDF-3047CC9F9841}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40416836-56CC-4C0E-A6AF-5C34BADCE483}" = Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools
"{4173F0BF-2363-4DC3-92A9-446B69DBB134}" = Jeppesen Program and Data Installation
"{41B31ABE-5A6E-498A-8F28-3BA3B8779A41}" = Dotfuscator Software Services - Community Edition
"{46559469-7C15-49F4-BB76-21480BE1BEF4}" = Real Environment Xtreme FS2004
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4815BD99-96A4-49FE-A885-DCF06E9E4E78}" = Microsoft SQL Server 2008 Database Engine Shared
"{490BF87E-1F75-4453-BF55-9F540543A3CA}" = Steinberg Drum Loop Expansion 01
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4D454CF8-12FD-464D-B57B-B46FE27B78BB}" = Steinberg LoopMash Content
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}" = Microsoft SQL Server 2008 Native Client
"{5094C629-274C-4631-84D7-960FEF6D13F7}" = LAGO Honolulu INTL Version 2.01
"{51AC53CA-6D26-459A-9BDF-53BAEB3E11A3}" = Cubase 5
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{53FB84B2-23CC-47BE-903F-EC1841459509}" = Program-Link FA-CP1 (Single License)
"{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
"{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
"{5783F2D7-9001-0415-1002-0060B0CE6BBA}" = AutoCAD 2011 Language Pack - Polski
"{5783F2D7-A005-0415-0002-0060B0CE6BBA}" = AutoCAD Mechanical 2012
"{5783F2D7-A005-0415-1002-0060B0CE6BBA}" = AutoCAD Mechanical 2012 Language Pack -  Polski
"{58721EC3-8D4E-4B79-BC51-1054E2DDCD10}" = Microsoft SQL Server 2008 Database Engine Services
"{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
"{5CDA3B5A-0737-40A1-AF93-4F35BD38A1B6}" = SlimDrivers
"{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A86554B-8928-30E4-A53C-D7337689134D}" = Microsoft Visual C++ 2010  x86 Runtime - 10.0.30319
"{6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3}" = Microsoft Visual Studio Macro Tools
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6ED37A91-7710-3183-BE50-AB043FF6689E}" = Microsoft Team Foundation Server 2010 Object Model - ENU
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{729A3000-BC8A-3B74-BA5D-5068FE12D70C}" = Microsoft Visual F# 2.0 Runtime
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78C3657E-742C-40B1-9F53-E5A921D40F17}" = Microsoft SQL Server 2008 R2 Transact-SQL Language Service
"{7D52DBC4-E2EF-4E08-A943-9433827BF388}" = ArKaos GrandVJ 1.2.2
"{8440C171-F033-4410-B099-5BE38273A13B}" = CLOUD9 LosAngeles 1.01
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies
"{9773450C-E2F3-46C3-9464-1D7EDE5EFB63}" = Pro Evolution Soccer 2011
"{97CE8B73-AA5A-4987-A1BE-50DD1A187478}" = Microsoft Sync Framework SDK v1.0 SP1
"{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
"{986090B3-C3B8-4DD4-8BB1-6561F74915FF}" = Jeppesen Format Print Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AE850A4-B89D-4875-A159-B1B64D717EFB}" = OMSI - Der Omnibussimulator
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
"{A8EC0CC0-AD8D-4244-B080-424EDF7A7634}" = Native Instruments Traktor 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AC41D924-8C68-4BD5-A7A1-0AE4176C31A6}" = Crystal Reports for Visual Studio
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{ACE28263-76A4-4BF5-B6F4-8BD719595969}" = Microsoft SQL Server Database Publishing Wizard 1.4
"{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}" = Microsoft SQL Server 2008 Database Engine Services
"{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}" = Corel Graphics - Windows Shell Extension
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}" = Microsoft SQL Server VSS Writer
"{B9BD31F7-D5D3-45BA-974B-D33E9E1C2338}" = PMDG 747-400F GE Emirates Sky Cargo
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BA77F9D2-CD35-41EB-9BC9-769879DFF8A6}" = PC Connectivity Solution
"{BD86F1AC-B594-46E4-85DC-1258AC9E2232}" = Steinberg Groove Agent ONE Content
"{C0C31BCC-56FB-42a7-8766-D29E1BD74C7C}" = Python 2.7.3
"{C3BDF1C8-66EF-4A0F-B427-A99E39706F45}_is1" = RMVB Converter 1.8
"{C515E2A3-4878-4C85-A519-52630C7AB08B}" = VirtualDJ PRO Full
"{C573C350-C666-586C-B309-7C9BD4A44BBF}" = e-Deklaracje Desktop
"{C688457E-03FD-4941-923B-A27F4D42A7DD}" = Microsoft SQL Server 2008 Browser
"{C6DD625F-4B61-4561-8286-87CA0275CEA1}" = Microsoft Sync Framework Runtime v1.0 SP1 (x86)
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
"{CBCF6C86-4738-4A84-9C2C-331804DCEB9B}" = LibreOffice 3.6
"{CBF03F04-7F9F-439F-BA2E-ADD45F494798}_is1" = JRollon Planes CRJ-200 version 1.4.5
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D215611B-8A8A-4914-9C23-2EF36D8926CF}" = X-FMC
"{D441BD04-E548-4F8E-97A4-1B66135BAAA8}" = Microsoft SQL Server 2008 Setup Support Files 
"{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English
"{D61E4101-9E15-4D0E-ABD1-1ABD36B43330}" = Intel(R) PROSet/Wireless WiFi Software
"{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
"{D6B15AE6-B052-363E-B6BB-C4714CBA6509}" = Microsoft Visual Studio 2010 Professional - ENU
"{DC3D6AFB-78B4-489F-81D7-30B66E0C2417}" = Microsoft Sync Services for ADO.NET v2.0 SP1 (x86)
"{DE6CBC04-8673-4DBA-BA81-07F1639CEB5F}" = CorelDRAW Graphics Suite X5 - IPM
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E34C6AA4-AE8E-4677-912A-92FC2E039DD9}" = CorelDRAW Graphics Suite X5 - EN
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Dodatek Autodesk Inventor Fusion Language Pack dla programu AutoCAD 2012
"{E5AE9031-79A5-4627-9641-BEFA82819B08}" = Microsoft SQL Server 2008 R2 Data-Tier Application Project
"{E62381A7-B1C1-4121-8262-84D38C77786C}" = COMODO Internet Security
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Dodatek Autodesk Inventor Fusion dla programu AutoCAD 2012
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{F941AABE-E868-42D9-9F38-884250F7898A}" = aerosoft's - FlightSim Commander 9
"{F990B526-8F7C-46E0-B1F1-6C893A8B478F}" = Microsoft Sync Framework Services v1.0 SP1 (x86)
"{FB4DDE59-575A-43D1-B7BA-AA39D5774BDA}" = CASIO ClassPad Manager ClassPad 300
"{FB56079B-7D0C-4D1D-864A-09BA159CC31B}" = Active Sky Evolution
"{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382" = Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0)
"309E6243-31FB-434E-9FF5-9AFEB1542DAD" = VAFS5
"6F64DF2E-3B8E-41DB-89E4-75BD3F370CDE_is1" = Cracked Steam
"767 CBT" = 767 CBT Instructor
"7-Zip" = 7-Zip 9.20
"A6A8668C0A13640CA28FE2A7D9654BE4AE478B13" = Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405)
"Active Camera 2004 patch for FS 9.1" = Active Camera 2004 patch for FS 9.1
"ADE9xSetup_is1" = Airport Design Editor 9x Version 1.50.18.197
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Airbus Vol 2X Call" = Airbus Vol 2X Call 1.0
"Android SDK Tools" = Android SDK Tools
"ASIO4ALL" = ASIO4ALL
"Audacity_is1" = Audacity 2.0
"AutoCAD Mechanical 2012" = AutoCAD Mechanical 2012
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"AVG Secure Search" = AVG Security Toolbar
"Avira AntiVir Desktop" = Avira Free Antivirus
"B7541EC5F72AA713F557569278EB6273725F5607" = Windows Driver Package - Broadcom Bluetooth  (06/15/2009 6.2.0.9000)
"BabylonToolbar" = Babylon toolbar on IE
"Belka FREE_is1" = Belka v.3.0.27.640 FREE
"BF20603967CFDCB2BBF91950E8A56DFBC5C833FE" = Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800)
"Blender" = Blender (remove only)
"CCleaner" = CCleaner
"Connectify" = Connectify Hotspot
"Dodatek Autodesk Inventor Fusion dla programu AutoCAD 2012" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"DownTango" = DownTango
"EAGLE 6.4.0" = EAGLE 6.4.0
"e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"F1DF727" = Greatest Airliners: 727
"FERRO Cyfrowy Magnetowid" = FERRO Cyfrowy Magnetowid
"Flight Simulator 9.0" = Microsoft Flight Simulator 2004 A Century of Flight
"foobar2000" = foobar2000 v1.1.11
"Fraps" = Fraps
"Free CD Ripper_is1" = Free CD Ripper V2.0
"FS Panel Studio for FSX" = FS Panel Studio for FSX Build 20207
"FS2Crew: Level-D 767 Voice Commander Edition" = FS2Crew: Level-D 767 Voice Commander Edition
"FS2Crew: PMDG 747 Voice Commander Edition" = FS2Crew: PMDG 747 Voice Commander Edition
"FS2XPlane" = FS2XPlane
"FSDreamTeam JFK FS9_is1" = FSDreamTeam JFK FS9 1.0.2
"Greatest Airliners 727 - Livery Pack 1" = Greatest Airliners 727 - Livery Pack 1
"Greatest Airliners 727 - Livery Pack 2" = Greatest Airliners 727 - Livery Pack 2
"Ground Environment Professional" = Ground Environment Professional
"HotspotShield" = Hotspot Shield 2.88
"HS2_is1" = Steinberg Hypersonic 2
"InstallShield_{268723B7-A994-4286-9F85-B974D5CAFC7B}" = Ontrack EasyRecovery Professional
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"Integrated SimAvionics for FS9/FSX - N537JB" = Integrated SimAvionics for FS9/FSX - N537JB
"ISGv1.7_is1" = ISG FS9 v1.8
"JDownloader" = JDownloader
"JinnahInternationalAirport_is1" = Jinnah International Airport FS2004
"Kadu" = Kadu 0.11.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.75.0.1300
"Man Lion's City 2.10" = Man Lion's City 2.10
"MatlabR2011a" = MATLAB R2011a
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft Team Foundation Server 2010 Object Model - ENU" = Microsoft Team Foundation Server 2010 Object Model - ENU
"Microsoft Visual Studio 2010 Professional - ENU" = Microsoft Visual Studio 2010 Professional - ENU
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Microsoft Visual Studio Macro Tools" = Microsoft Visual Studio Macro Tools
"MixPad" = MixPad, mezclador de archivos de audio
"MixVibes3dex.exe" = MixVibes 3DEX uninstall
"MixVibesProducer.exe" = MixVibes PRODUCER uninstall
"Mollier Sketcher_is1" = Mollier Sketcher 2.1
"Mozilla Firefox 20.0.1 (x86 pl)" = Mozilla Firefox 20.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MPKminiEditor" = MPK mini Editor
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Traktor" = Native Instruments Traktor
"Native Instruments Traktor 2" = Native Instruments Traktor 2
"NCalc 5_is1" = NCalc 5.1.0
"Ninoy Aquino International Airport 1.00" = Ninoy Aquino International Airport 1.00
"Nokia Suite" = Nokia Suite
"novaPDF for SDK v7_is1" = novaPDF for SDK v7 (novaPDF 7.2 printer)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OCS PT-154" = OCS PT-154
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Opera 12.14.1738" = Opera 12.14
"OverlayEditor" = OverlayEditor
"PDF To JPG_is1" = PDF To JPG 2.0
"PERSIAN-SIM Mehrabad Airport Scenery Ver 2.0" = PERSIAN-SIM Mehrabad Airport Scenery Ver 2.0
"ProInst" = Intel PROSet Wireless
"Pytacz Master" = Pytacz Master
"Ready for Pushback V2 Takeoff Calculator" = Ready for Pushback V2 Takeoff Calculator
"Ready for Pushback V2_10 Full Version" = Ready for Pushback V2_10 Full Version
"RealPlayer 15.0" = RealPlayer
"Reason5_is1" = Reason 5.0.1
"ReCycle2.2_32_is1" = ReCycle 2.2.3
"scilab-5.4.0_is1" = scilab-5.4.0
"Shipsim2008" = Ship Simulator 2008
"SHOUTcast Source DSP" = SHOUTcast Source DSP Plug-in v2
"Soulseek" = SoulSeek Client 156c
"Soulseek2" = SoulSeek 157 NS 13e
"SP1_9527A496-5DF9-412A-ADC7-168BA5379CA6" = Microsoft Flight Simulator X Service Pack 1
"SquawkBox" = SquawkBox
"SSTSIM1.04F" = SSTSIM
"ST6UNST #1" = ATCsimulator2 by AEROSOFT Corporation
"SyncroSoft Emu" = SyncroSoft Emu (Remove only)
"Syncrosoft's License Control" = Syncrosoft's License Control
"TechPowerUp GPU-Z" = TechPowerUp GPU-Z
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"USB_AUDIO_DEusb-audio.deMaya44" = Maya44 USB ASIO driver
"uTorrent" = µTorrent
"vasFMC MSFS Gauge_is1" = vasFMC 2.1
"vasFMC_is1" = vasFMC 2.1
"VATSpy" = VAT-Spy
"VHHH Hong Kong FS2004" = VHHH Hong Kong FS2004
"Video Thumbnails Maker" = Video Thumbnails Maker by Scorp (remove only)
"VideoPad" = VideoPad, software para edición de vídeo
"VLC media player" = VLC media player 2.0.1
"Winamp" = Winamp
"WinPcapInst" = WinPcap 4.1.2
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"www.zusi.de/zusi3/demo_is1" = Zusi 3.0.2 (Beta-Demo)
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-207598203-2322062775-1724687355-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"171a3bd25b2ddd36" = vroute.info
"Africasim Accra 2009" = Africasim Accra 2009
"Carenado's C172N Skyhawk II FS2004" = Carenado's C172N Skyhawk II FS2004
"CLS A330/A340 FS9" = CLS A330/A340 FS9
"Dropbox" = Dropbox
"E-Jets Series (FS2004)" = E-Jets Series (FS2004)
"Google Chrome" = Google Chrome
"Ilyushin Il-96M" = Ilyushin Il-96M
"Project Tupolev Tu-154m for MS FS2004" = Project Tupolev Tu-154m for MS FS2004
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 1/18/2013 7:53:05 PM | Computer Name = Jarek-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7600.16450, 
time stamp: 0x4aeba271  Faulting module name: hxmedpltfm.dll, version: 15.0.6.14, 
time stamp: 0x5013062f  Exception code: 0xc0000005  Fault offset: 0x0001ca71  Faulting
 process id: 0xf30  Faulting application start time: 0x01cdf5d693133677  Faulting application
 path: C:\Windows\Explorer.EXE  Faulting module path: C:\Program Files\Real\RealPlayer\common\hxmedpltfm.dll
Report
 Id: 331930b8-61ca-11e2-a91a-0024211eaa99
 
Error - 1/18/2013 8:12:05 PM | Computer Name = Jarek-PC | Source = VSS | ID = 12310
Description = 
 
Error - 1/18/2013 8:12:47 PM | Computer Name = Jarek-PC | Source = VSS | ID = 12310
Description = 
 
Error - 1/18/2013 8:16:12 PM | Computer Name = Jarek-PC | Source = VSS | ID = 12310
Description = 
 
Error - 1/18/2013 8:16:31 PM | Computer Name = Jarek-PC | Source = VSS | ID = 12310
Description = 
 
Error - 1/18/2013 8:16:35 PM | Computer Name = Jarek-PC | Source = VSS | ID = 12310
Description = 
 
Error - 1/19/2013 3:39:04 PM | Computer Name = Jarek-PC | Source = NVIDIA OpenGL Driver | ID = 1
Description = The NVIDIA OpenGL driver detected a problem with the display driver
 and is unable to continue. The application must close.   Error code: 3 Visit http://www.nvidia.com/page/support.html
 for more information.
 
Error - 1/24/2013 1:38:31 PM | Computer Name = Jarek-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\asio4all
 v2\a4apanel64.exe".  Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
 could not be found.  Please use sxstrace.exe for detailed diagnosis.
 
Error - 1/24/2013 4:49:14 PM | Computer Name = Jarek-PC | Source = VSS | ID = 8194
Description = 
 
Error - 1/25/2013 3:01:05 PM | Computer Name = Jarek-PC | Source = Application Error | ID = 1000
Description = Faulting application name: ATCSimulator.exe, version: 2.1.0.183, time
 stamp: 0x40436863  Faulting module name: ole32.dll, version: 6.1.7600.16624, time
 stamp: 0x4c297c56  Exception code: 0xc0000005  Fault offset: 0x0002f367  Faulting process
 id: 0x1c0  Faulting application start time: 0x01cdfb2e4f7b4c89  Faulting application
 path: C:\Program Files\ATCsimulator2\ATCSimulator.exe  Faulting module path: C:\Windows\system32\ole32.dll
Report
 Id: 918f87b9-6721-11e2-a969-0024211eaa99
 
Error - 1/28/2013 4:00:30 AM | Computer Name = Jarek-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\asio4all
 v2\a4apanel64.exe".  Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
 could not be found.  Please use sxstrace.exe for detailed diagnosis.
 
[ System Events ]
Error - 4/25/2013 5:07:23 PM | Computer Name = Jarek-PC | Source = ipnathlp | ID = 30013
Description = 
 
Error - 4/25/2013 5:09:26 PM | Computer Name = Jarek-PC | Source = ipnathlp | ID = 34001
Description = 
 
Error - 4/25/2013 5:09:33 PM | Computer Name = Jarek-PC | Source = PNRPSvc | ID = 102
Description = 
 
Error - 4/25/2013 5:09:33 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7001
Description = The Peer Networking Grouping service depends on the Peer Name Resolution
 Protocol service which failed to start because of the following error:   %%-2140993535
 
Error - 4/25/2013 5:09:33 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7023
Description = The Peer Name Resolution Protocol service terminated with the following
 error:   %%-2140993535
 
Error - 4/25/2013 5:09:40 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7031
Description = The Function Discovery Resource Publication service terminated unexpectedly.
  It has done this 1 time(s).  The following corrective action will be taken in 
120000 milliseconds: Restart the service.
 
Error - 4/25/2013 5:09:40 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7031
Description = The Windows Font Cache Service service terminated unexpectedly.  It
 has done this 1 time(s).  The following corrective action will be taken in 60000
 milliseconds: Restart the service.
 
Error - 4/25/2013 5:09:40 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7031
Description = The SSDP Discovery service terminated unexpectedly.  It has done this
 1 time(s).  The following corrective action will be taken in 100 milliseconds: 
Restart the service.
 
Error - 4/25/2013 5:09:40 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7031
Description = The UPnP Device Host service terminated unexpectedly.  It has done
 this 1 time(s).  The following corrective action will be taken in 100 milliseconds:
 Restart the service.
 
Error - 4/25/2013 5:10:40 PM | Computer Name = Jarek-PC | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the Windows Font Cache Service
 service, but this action failed with the following error:   %%1056
 
 
< End of report >