OTL Extras logfile created on: 2013-08-15 22:44:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\AGATA\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,97 Gb Total Physical Memory | 0,55 Gb Available Physical Memory | 28,02% Memory free
4,17 Gb Paging File | 2,18 Gb Available in Paging File | 52,25% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 73,31 Gb Total Space | 28,73 Gb Free Space | 39,19% Space Free | Partition Type: NTFS
Drive D: | 104,73 Gb Total Space | 41,04 Gb Free Space | 39,19% Space Free | Partition Type: NTFS
Drive E: | 54,84 Gb Total Space | 38,68 Gb Free Space | 70,53% Space Free | Partition Type: NTFS
 
Computer Name: ASUS | User Name: AGATA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.exe [@ = exefile] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- "E:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "E:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- E:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{075681E0-9A5F-4FE5-9579-220930AB3839}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe | 
"{091CDBF2-7047-4616-ACC3-A842E8AE649B}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{133E83DA-C4E4-43F6-9196-9D0C78BEBD38}" = rport=139 | protocol=6 | dir=out | app=system | 
"{209A5516-B0D2-41F8-8940-91D53A9A6213}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{265B86A4-462D-451F-A65E-17A34EC210BF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{2A9559A7-F179-4384-B27E-AC0F9D07569B}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{36E7A079-AEC1-4FA6-97BA-A321EF07E8EA}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | 
"{3840EE28-96E7-4C98-8E69-CA7C5DD5EC1F}" = lport=137 | protocol=17 | dir=in | app=system | 
"{430B17A4-21DC-489E-9330-3DA166CE7689}" = lport=6004 | protocol=17 | dir=in | app=e:\program files\microsoft office\office12\outlook.exe | 
"{62E81FC7-5CDD-4F07-86DC-DAC4C0860AB7}" = lport=445 | protocol=6 | dir=in | app=system | 
"{657FE8CE-ECC1-4610-9A44-992C494D8568}" = rport=138 | protocol=17 | dir=out | app=system | 
"{65CBD384-127D-4D89-BAA2-04D5B5976A1E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{67C318F9-A5F4-4F35-BE06-E1F8FD58A930}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=c:\windows\system32\svchost.exe | 
"{69036C9B-6379-459E-B806-A9DDEE5BED05}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{77FBD646-DC79-424A-9C50-4E5317EF2D90}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe | 
"{904FD5D6-5795-4713-A4CE-42A6CCF8A5A0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{934A4466-4BE8-46DB-8AE3-241D775B6ADA}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{9361F0B8-03ED-4CDB-9B7C-BA08E052ADBD}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9EF4A6AB-D2ED-420D-BAC0-FD16436D767B}" = lport=139 | protocol=6 | dir=in | app=system | 
"{B395C9ED-0196-4D3A-B656-845B3311F530}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B7979C29-AFBF-4926-B3E5-F6E348955A24}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 
"{BF084233-90E6-4C81-9CA1-1CEB399FBE37}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{C27AF47C-D1F1-498D-B4B6-2656BA6E4CC3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{CFE35C95-DAC5-403B-B61C-CB9F146136AC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D284AF6E-7C26-4AED-9F87-D5817955771F}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{D4527715-9D5E-413F-AFC6-CF7F5F5C6531}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{D6ABB631-E237-40B5-B391-0C30B1D296C8}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D79183D9-D905-4431-84A2-3889CE4C59E0}" = rport=445 | protocol=6 | dir=out | app=system | 
"{DF5DEB61-447C-46E9-AFB9-1E6C18533BFB}" = rport=137 | protocol=17 | dir=out | app=system | 
"{E0559731-CA4D-4AAE-8DA9-748B00FC623E}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{F08DD820-F2B4-45F6-899C-DBC408729448}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{F2C4F89C-7121-407B-ACBB-9C0D6164F589}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=c:\windows\system32\svchost.exe | 
"{F316A0E2-64C1-4981-8154-AD31029B60DB}" = lport=138 | protocol=17 | dir=in | app=system | 
"{F652FEFA-DB2F-4422-959C-6093DBC42F72}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{FC22AB83-DAA5-4327-A855-EE9C8C0FB28C}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00125181-519E-4EB1-A31E-BA6DD077B0DA}" = protocol=17 | dir=in | app=c:\users\agata\appdata\local\google\google talk plugin\googletalkplugin.exe | 
"{016E3E77-7CBE-49EF-9C97-982E0B214100}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{03DA4523-6E8E-4DE4-B0D7-65267BC1ED6C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{04CE8EED-D356-4C4A-A54D-E29D63CA5C1F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{09B559EE-E96A-4DA2-A3B0-DA8ED87D38E5}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{16A4CEC6-96AD-454A-8639-A757DD73332D}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{186679F2-2F2B-4E8C-B72B-4E8245BE92F5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{2B340D7A-D360-4AB7-A195-1AB7BF20600A}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max design 2013\nvidia\raysat_3dsmax2013_32server.exe | 
"{31B51C25-2BF3-4BA9-8A8C-3B12E565C6F0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{32CC8846-B373-4044-9A7B-1AB937805472}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{335A8D74-94D3-4B79-ACD5-8950CA8D38FC}" = dir=in | app=c:\users\agata\appdata\local\facebook\video\skype\facebookvideocalling.exe | 
"{35BA3A3C-04BB-4F10-9A54-BA644CDEF378}" = protocol=6 | dir=out | app=system | 
"{472C4BB0-7C41-45CE-9DB8-A8B6CEF80963}" = protocol=17 | dir=in | app=e:\program files\microsoft office\office12\onenote.exe | 
"{58D47167-3E3F-41AC-9F73-7CC9CB3789A8}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe | 
"{5A76F23C-63AB-4EB0-B1BA-28863136679A}" = protocol=17 | dir=in | app=c:\users\agata\appdata\local\akamai\netsession_win.exe | 
"{61813D5F-5E46-4F6B-857F-910BD6CF1112}" = protocol=6 | dir=in | app=e:\program files\microsoft office\office12\groove.exe | 
"{68AABE5D-1034-4AA8-8903-C28ECB9CFD6D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{70E9BE8A-35D4-4470-AD7D-BC0663549C2A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{74B843E1-01E8-4B98-B23C-58416AB62958}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{76D5A6C2-9011-4AE3-A0D8-207FAA3AC1C4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{7DDCDEE5-1780-4904-B94A-8BF61154A1DC}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe | 
"{800FE2D5-4249-47E9-B7B8-89097D27EF95}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe | 
"{809D018A-D6FF-4667-9B25-57022A1A7ABB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8299B2A3-2F8D-44C8-A258-3A09A587ED54}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{86133FB1-06D8-41B1-8235-5F53D4CEC337}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{98F9BEB7-4660-4DD2-817A-0A55BA0DC354}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe | 
"{9F1BBA20-361A-4F8C-ACCC-8484DC0DD254}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max design 2013\3dsmax.exe | 
"{A199F4BF-145B-44FA-ABD4-F35A58760FBE}" = protocol=6 | dir=in | app=e:\program files\microsoft office\office12\onenote.exe | 
"{A74A2537-4B11-446D-8D28-410D044188D6}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max design 2013\nvidia\raysat_3dsmax2013_32.exe | 
"{A83B8956-AADC-42EF-BFCE-713F638CCF55}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe | 
"{B3B03B4D-009F-4F65-8AA3-D3D8A011C6B5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{BCF7EA23-FD0F-4178-86FC-A708C06CAB99}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{CAE79CDB-8F9F-4D68-BBEA-9D30982754D0}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max design 2013\nvidia\raysat_3dsmax2013_32.exe | 
"{CE802892-4573-459D-A64E-5DE95CB8381D}" = protocol=6 | dir=in | app=c:\users\agata\appdata\local\akamai\netsession_win.exe | 
"{D2185C40-B53C-4A02-9DD6-4ACAC09B1EBF}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max design 2013\3dsmax.exe | 
"{D821BE7C-1A51-4558-9C1A-50053975D47A}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{D8CFF833-F0A4-4928-ADC6-EC178CF9FE64}" = protocol=17 | dir=in | app=e:\program files\microsoft office\office12\groove.exe | 
"{E248E5A4-A628-4B71-856D-BC0B6B1EF7F0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{E4194E4F-2A12-47C1-8C49-1A7B039EF0A2}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max design 2013\nvidia\raysat_3dsmax2013_32server.exe | 
"{E46A0C07-FDC3-4661-BB18-898FF09D9E56}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{E78372DE-B6E0-4DB6-B403-96CC852B022F}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{EAD50DE7-41D4-480C-A990-6E737FE6433F}" = protocol=17 | dir=in | app=e:\program files\utorrent\utorrent.exe | 
"{ECCED8F8-C29B-454B-8D41-B0123F30D797}" = protocol=17 | dir=in | app=d:\program files\adobe\adobe bridge cs3\bridge.exe | 
"{F1D92788-57F8-4560-9AB1-2B44BE59FEBA}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{F5C5589D-F9B9-444A-8ED3-A3AF4F593EFE}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe | 
"{F736E98C-6B49-437A-A5C2-0874B6A4655C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{F7CFD2B2-DA2D-4A57-B4C0-B3FB67608040}" = protocol=6 | dir=in | app=c:\users\agata\appdata\local\google\google talk plugin\googletalkplugin.exe | 
"{F9DB659F-8EF7-46B5-9063-6B0A938D1102}" = protocol=6 | dir=in | app=d:\program files\adobe\adobe bridge cs3\bridge.exe | 
"{FB965AB3-1C92-4BF3-BB55-BBA7ACFA4DFC}" = protocol=6 | dir=in | app=e:\program files\utorrent\utorrent.exe | 
"TCP Query User{4008C00F-F800-4DA1-A21E-78FD383FABE2}E:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=e:\program files\winamp\winamp.exe | 
"TCP Query User{40119ABA-37BE-49A8-AA66-CCFA494F181D}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{41DBEB5F-EC83-49E4-A2B3-F3BADCDDEADB}E:\archicad\archicad\licensefilegenerator.exe" = protocol=6 | dir=in | app=e:\archicad\archicad\licensefilegenerator.exe | 
"TCP Query User{70106EC3-5CB9-4F5B-9223-832A26322EC7}C:\users\agata\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\agata\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{96C4931F-5FC1-4BED-893F-AE0E85540A2B}E:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=e:\program files\winamp\winamp.exe | 
"TCP Query User{99F60017-64B2-401E-978A-17F9B13D158D}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | 
"TCP Query User{B298377A-32ED-466D-B432-BABB3CD74A71}E:\archicad\archicad\dodatki\dodatkowe\archicad youtube channel.exe" = protocol=6 | dir=in | app=e:\archicad\archicad\dodatki\dodatkowe\archicad youtube channel.exe | 
"TCP Query User{BE86404F-E907-4543-8EA8-3704D9F9B238}D:\gry\ gta iv zai\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=d:\gry\ gta iv zai\grand theft auto iv\gtaiv.exe | 
"TCP Query User{D8228C5C-B037-4FBD-8F03-A8656B5BAE34}C:\users\agata\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\agata\appdata\roaming\dropbox\bin\dropbox.exe | 
"TCP Query User{DC45988C-51D7-402C-B007-1354C0247C30}E:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=e:\program files\wapster\wapster aqq\aqq.exe | 
"TCP Query User{DF6F89D0-0FE0-48B8-910C-4F10DAEC1BCA}E:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=e:\program files\wapster\wapster aqq\aqq.exe | 
"UDP Query User{0909AC26-513B-46FE-BF9C-FA5FF0E951F8}E:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=e:\program files\winamp\winamp.exe | 
"UDP Query User{13043E77-2A10-461A-AFB5-657091DEEC4C}D:\gry\ gta iv zai\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=d:\gry\ gta iv zai\grand theft auto iv\gtaiv.exe | 
"UDP Query User{46FEE1CD-CAFE-4F93-B401-C3B4AB2F1AC6}E:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=e:\program files\wapster\wapster aqq\aqq.exe | 
"UDP Query User{4E773F82-D0C4-4EDB-82C9-43E4BEDBF8E0}E:\archicad\archicad\dodatki\dodatkowe\archicad youtube channel.exe" = protocol=17 | dir=in | app=e:\archicad\archicad\dodatki\dodatkowe\archicad youtube channel.exe | 
"UDP Query User{55E39ECB-0D2D-4248-AD60-8ECAC8A82F09}C:\users\agata\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\agata\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{6B10BAF9-7FCD-4450-AF83-5E04535764B4}E:\archicad\archicad\licensefilegenerator.exe" = protocol=17 | dir=in | app=e:\archicad\archicad\licensefilegenerator.exe | 
"UDP Query User{867B953E-D9AD-4181-89FF-E41DEEF55BF9}E:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=e:\program files\winamp\winamp.exe | 
"UDP Query User{A6FAB513-CEC7-49D8-9055-DDF04268953C}E:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=e:\program files\wapster\wapster aqq\aqq.exe | 
"UDP Query User{BB429B9B-3168-4298-B1A7-78895ED1078A}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{C54F334C-0E12-4744-9555-461943B1F0AB}C:\users\agata\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\agata\appdata\roaming\dropbox\bin\dropbox.exe | 
"UDP Query User{CD464D5C-0417-4ADD-AF9A-42B1A59C77B4}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{06E18300-BB64-1632-8E6A-2593FC67BB74}" = Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 32-bit
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{0F9ED496-774C-0409-9659-968DACF8ED58}" = Autodesk 3ds Max Design 2013 32-bit
"{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}" = Autodesk Material Library 2013
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series" = Canon MP250 series MP Drivers
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{15CC861C-C69E-3758-8961-CE304C2595B6}" = Google Talk Plugin
"{1CA7ACD6-B21B-4240-AA05-4FC55F6E1045}" = Nero 8
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2013.0.0
"{3F4BA3A2-7BE0-48EA-B4BC-CA4D842A409A}" = Cisco EAP-FAST Module
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B6B024F-F6D4-4A7B-8ADA-F9F8370320CC}" = SRS Premium Sound
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5783F2D7-9001-0415-0002-0060B0CE6BBA}" = AutoCAD 2011 - Polski
"{5783F2D7-9001-0415-1002-0060B0CE6BBA}" = AutoCAD 2011 Language Pack - Polski
"{58760EEC-8B6A-43F4-81AA-696E381DFADD}" = Autodesk Material Library Medium Resolution Image Library 2013
"{59E4543A-D49D-4489-B445-473D763C79AF}" = Microsoft Games for Windows - LIVE Redistributable
"{606E12B9-641F-4644-A22A-FF38AE980AFD}" = Autodesk Material Library Base Resolution Image Library 2013
"{625386A4-B6B6-4911-A6E8-23189C3F2D15}" = Microsoft .NET Compact Framework 2.0 SP1
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AAF923E-077E-4543-BA1C-42A75BB03677}" = Sąsiedzi z Piekła Rodem 1 i 2
"{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}" = iTunes
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79361740-EAE3-11E2-9911-B8AC6F98CCE3}" = Google Earth Plug-in
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{7FD5D1E2-EF17-4045-8D83-BB8E88C0D672}" = Autodesk Essential Skills Movies for 3ds Max Design 2013 32-bit
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}" = Apple Mobile Device Support
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Centrum obsługi urządzeń z systemem Windows Mobile
"{92203FA0-7C43-429F-857C-0AE197D8199C}" = Composite 2013
"{934B3B19-8193-467A-B356-E73F82647D38}" = Cisco LEAP Module
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.7) - Polish
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287
"{BAD1449B-DF0C-4118-B76D-68C54009576C}" = Cisco PEAP Module
"{BC66B242-DF13-1632-851B-00123612ED98}" = Autodesk Inventor Server Engine for 3ds Max Design 2013 32-bit
"{BF91B300-EEBC-4223-96F3-0FCBF7241B50}" = AmIcoSingLun
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CCA78313-443C-4674-81B8-88919D137258}" = Autodesk Download Manager
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{DA41F9E9-B878-467F-95E7-27E4D1943533}" = Multimedia Card Reader
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile Device Center Driver Update
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{F63F15F6-2505-4B57-91AA-7EBD75C5477C}" = Autodesk DirectConnect 2013 32-bit
"{F93AC444-3C95-387F-73B4-384171BBBFEF}" = GardenPuzzle - Garden Planner
"{FE6DCC8D-427F-405C-A779-C93B6D9F77A5}" = Autodesk Civil View for 3ds Max Design 2013
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Akamai" = Akamai NetSession Interface Service
"AQQ" = WapSter AQQ
"AutoCAD 2011 - Polski" = AutoCAD 2011 - Polski
"Autodesk 3ds Max Design 2013 32-bit" = Autodesk 3ds Max Design 2013 32-bit
"Autodesk DirectConnect 2013 32-bit" = Autodesk DirectConnect 2013 32-bit
"Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013" = Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013
"avast" = avast! Free Antivirus
"CanonMyPrinter" = Canon Utilities My Printer
"CCleaner" = CCleaner
"Convert PDF To Image_is1" = Convert PDF To Image
"DAEMON Tools Lite" = DAEMON Tools Lite
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Elantech" = ETDWare PS/2-x86 7.0.5.1 WHQL
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FormatFactory" = FormatFactory 2.70
"GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker
"GardenPuzzle.31FAFA193F692E138C6BB309B446CA42C25328E4.1" = GardenPuzzle - Garden Planner
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń
"InstallShield_{BF91B300-EEBC-4223-96F3-0FCBF7241B50}" = AmIcoSingLun
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic)
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"PDF To JPG_is1" = PDF To JPG 2.0
"Revo Uninstaller" = Revo Uninstaller 1.93
"TVWiz" = Intel(R) TV Wizard
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"USB Mass Storage Filter Driver" = Multimedia Card Reader
"uTorrent" = µTorrent
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-11-28 18:55:29 | Computer Name = ASUS | Source = Perflib | ID = 1008
Description = 
 
Error - 2012-11-29 03:35:38 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-11-29 10:19:27 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-11-29 10:22:41 | Computer Name = ASUS | Source = Perflib | ID = 1010
Description = 
 
Error - 2012-11-30 09:22:42 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-11-30 09:49:52 | Computer Name = ASUS | Source = Perflib | ID = 1008
Description = 
 
Error - 2012-11-30 11:33:18 | Computer Name = ASUS | Source = Perflib | ID = 1010
Description = 
 
Error - 2012-11-30 12:28:23 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-11-30 19:04:00 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-12-01 04:48:37 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
Error - 2012-12-01 09:30:29 | Computer Name = ASUS | Source = WinMgmt | ID = 10
Description = 
 
[ OSession Events ]
Error - 2012-03-06 13:48:31 | Computer Name = ASUS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4234
 seconds with 1800 seconds of active time.  This session ended with a crash.
 
Error - 2012-04-13 17:41:38 | Computer Name = ASUS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19441
 seconds with 6600 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 2013-08-14 13:44:44 | Computer Name = ASUS | Source = volsnap | ID = 393230
Description = Kopie w tle woluminu C: zostały przerwane z powodu usterki We/Wy w
 woluminie C:.
 
Error - 2013-08-15 06:01:48 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4385
Description = 
 
Error - 2013-08-15 06:01:55 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4375
Description = 
 
Error - 2013-08-15 06:53:57 | Computer Name = ASUS | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2013-08-15 09:38:51 | Computer Name = ASUS | Source = volsnap | ID = 393230
Description = Kopie w tle woluminu C: zostały przerwane z powodu usterki We/Wy w
 woluminie C:.
 
Error - 2013-08-15 09:51:30 | Computer Name = ASUS | Source = volsnap | ID = 393230
Description = Kopie w tle woluminu C: zostały przerwane z powodu usterki We/Wy w
 woluminie C:.
 
Error - 2013-08-15 11:02:39 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4385
Description = 
 
Error - 2013-08-15 11:02:43 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4375
Description = 
 
Error - 2013-08-15 16:03:17 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4385
Description = 
 
Error - 2013-08-15 16:03:24 | Computer Name = ASUS | Source = Microsoft-Windows-Servicing | ID = 4375
Description = 
 
 
< End of report >