OTL Extras logfile created on: 2011-04-23 18:12:05 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\logi
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19048)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 53,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 218,20 Gb Total Space | 126,28 Gb Free Space | 57,88% Space Free | Partition Type: NTFS
Drive E: | 14,65 Gb Total Space | 9,28 Gb Free Space | 63,38% Space Free | Partition Type: NTFS
 
Computer Name: KOMPUTERDOMOWZ | User Name: GOSIA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-2249310747-3679619916-2194120341-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Users\GOSIA\AppData\Local\Temp\winamp.exe" /BOOKMARK "%1"
Directory [Winamp.Enqueue] -- "C:\Users\GOSIA\AppData\Local\Temp\winamp.exe" /ADD "%1"
Directory [Winamp.Play] -- "C:\Users\GOSIA\AppData\Local\Temp\winamp.exe" "%1"
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe" = C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA)
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04EFDFDF-3CD1-4366-8B14-E9AAD8A92F33}" = lport=49165 | protocol=6 | dir=in | name=akamai netsession interface | 
"{0AE75D90-1B91-4016-8D80-E37911308BB1}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{118D4575-EFA3-4B65-938E-0ADE0F0F3744}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{17C8AEEB-188D-4477-BB4E-E5C166EA5676}" = rport=139 | protocol=6 | dir=out | app=system | 
"{1E63A71E-CBB1-44B5-AA21-C6F67EC7BF04}" = lport=137 | protocol=17 | dir=in | app=system | 
"{20AD7353-B232-4B96-A66C-7521AA518A92}" = rport=137 | protocol=17 | dir=out | app=system | 
"{477439A2-8F36-4AA8-8840-BC6DCDA6F481}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{4FD560C5-2DC6-4E2E-B52E-02BB2A4B53C7}" = rport=138 | protocol=17 | dir=out | app=system | 
"{50DA60BB-1C6E-48B1-A4EA-C83BFA0273BF}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{5F380406-E944-42F7-B9E3-F1ECEAB648FE}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{6330C3D6-97DB-41CB-BFF2-0C962E638173}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{68912564-0C7C-42AA-9258-9827F41E2D32}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{79F91EB6-52D0-42D1-896F-C333823E4882}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{84EB5C95-F376-4DBE-81C3-3CB7B77724B5}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{90D33F7A-88EA-4213-8B54-1642FB01A50F}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{996B7809-EF60-4CB4-89DE-41E3BBF1981D}" = lport=138 | protocol=17 | dir=in | app=system | 
"{A6F85F19-82A4-4BA9-9616-826EAC459AD5}" = rport=445 | protocol=6 | dir=out | app=system | 
"{AC5B5034-D074-4756-A79C-E12F3A99D460}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{AD24CFAC-CD73-495A-8EF1-E64BFADD91D8}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{B1EF8586-23A3-47E7-B443-75A92E36B07F}" = lport=139 | protocol=6 | dir=in | app=system | 
"{BAE6DF6A-7EBF-4197-98CB-BB48F8C36F6D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D3BEC67C-3FB6-481B-8F55-1BAD4B34C0D2}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{D5A5DBA4-874D-4FA5-9FDA-8059F9A91037}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{D6B3CF08-D8BC-48B8-BA98-C87DD3DCB791}" = lport=445 | protocol=6 | dir=in | app=system | 
"{DC07B6D0-1220-44C4-9E46-A2A2EA9512F5}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{DDF16298-C724-4E80-907C-0328201D4A6A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{E6E0DDD8-FC59-461D-8E8C-C6C0DC4BD520}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{FAEED1B0-8066-4C23-B665-D39AB875C736}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2F342020-8EB2-4000-842B-A9B7DE236D79}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{31869229-0091-4FD8-868B-FE5AAF9C4D3B}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{32C1FA9B-B732-4DA0-BBC2-8FD179A00F75}" = protocol=6 | dir=in | app=c:\program files\deep silver\sacred 2 - fallen angel\system\s2gs.exe | 
"{381B9168-487C-4F31-9969-54E6EC2AC855}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe | 
"{3951A72E-BA73-484E-A896-ECD24966EA8A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{4392EB59-8499-4FF6-B928-A279E9724700}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{45A670BA-AA48-452D-A8C6-17622D691F55}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{4A6D728F-A17C-4447-81F7-D378F794BFE8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5134C045-91C5-4B1E-9E2E-36A1979F6E7F}" = protocol=17 | dir=in | app=c:\program files\deep silver\sacred 2 - fallen angel\system\sacred2.exe | 
"{5902888D-DE95-4271-AEC8-95B8BA0023AF}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\michu1913\counter-strike\hl.exe | 
"{666715CD-B726-422E-8023-634AD923AA13}" = protocol=17 | dir=in | app=c:\program files\deep silver\sacred 2 - fallen angel\system\s2gs.exe | 
"{685AC81F-EA50-4D5B-BC21-8C3D01C64060}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{6F8E802B-BC0C-4247-BDFC-CA6A65C63D17}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{757B7D97-F673-4F76-9759-7CB2BF0E66F3}" = protocol=6 | dir=in | app=c:\program files\steam\bin\steam.exe | 
"{77255FB8-06A6-4909-8534-7B843401B2F6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{7B97F4FB-80C5-423E-9C45-E8CF211DB3BB}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{7F024B9A-DCF6-44F9-ADFC-67260A03910F}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe | 
"{8519F658-C780-4D77-A6F7-107FACE60BA5}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\michu1913\counter-strike\hl.exe | 
"{87A4E601-08A3-4102-9880-467A404D79A8}" = protocol=6 | dir=in | app=c:\program files\deep silver\sacred 2 - fallen angel\system\sacred2.exe | 
"{8A19BE49-2B1E-43E9-9D61-28CE313C5364}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{8B734C4D-FF09-41C1-9833-222005618316}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{AD35329F-6FC7-4E54-A14F-056C9771343E}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | 
"{C528D0E2-4D1E-4DE7-B3AE-4AC26096398D}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{F8E2FFFB-8C3F-45BB-A361-7B6C009F6946}" = protocol=17 | dir=in | app=c:\program files\steam\bin\steam.exe | 
"TCP Query User{10ADC4EF-44DE-4A78-A455-529F83553F02}C:\users\gosia\desktop\metin2_pl\metin_zpmt2_s1_by_boy4538.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin_zpmt2_s1_by_boy4538.exe | 
"TCP Query User{10C764DD-50E8-4D5E-B547-BE87D221A6BF}C:\windows\system32\dpnsvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dpnsvr.exe | 
"TCP Query User{14C79ADE-D4B0-4BE6-9681-1598FDAD41E3}C:\users\gosia\appdata\local\temp\rar$ex00.368\phqghume.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex00.368\phqghume.exe | 
"TCP Query User{1543FD9D-DBFF-412F-B286-FC35829C154D}C:\users\gosia\desktop\metin2_pl\metin2client.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2client.bin | 
"TCP Query User{186F47D2-A582-49E9-AE97-FD8428D3A046}E:\program files\metin2\zzyok spol by mrxingo.exe" = protocol=6 | dir=in | app=e:\program files\metin2\zzyok spol by mrxingo.exe | 
"TCP Query User{2096CD4F-5BAD-4B12-AC70-43209F5C6C33}C:\program files\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | 
"TCP Query User{247AA374-1154-48DE-BFF8-C4B6D02FE55E}C:\users\gosia\desktop\metin2_pl\zpmt2_by_dragon33.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\zpmt2_by_dragon33.exe | 
"TCP Query User{24BA4C7E-376E-4E09-83C7-2BE3D6F0E762}C:\users\gosia\appdata\local\temp\rar$ex12.159\ggbwkfnq.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\ggbwkfnq.exe | 
"TCP Query User{255730AD-2861-45C4-B0BA-FE173AB69A10}C:\program files\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files\valve\hl.exe | 
"TCP Query User{2861B567-DC04-4D67-B253-DA64AD65EE6E}E:\program files\metin2\mcmetinpro_www.przeklej.pl.exe" = protocol=6 | dir=in | app=e:\program files\metin2\mcmetinpro_www.przeklej.pl.exe | 
"TCP Query User{2B892A23-E341-4F47-BB7C-6CA0CD7EA91E}C:\users\gosia\desktop\metin2_pl\server2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\server2.exe | 
"TCP Query User{357A108E-8E39-4042-B823-0BD227D16D3D}C:\program files\microsoft games\dungeon siege\dungeonsiege.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\dungeon siege\dungeonsiege.exe | 
"TCP Query User{362F9C76-DD41-4C7E-992C-BF8415620A84}C:\users\gosia\downloads\belenus.exe" = protocol=6 | dir=in | app=c:\users\gosia\downloads\belenus.exe | 
"TCP Query User{4064B828-359E-4175-A0C3-C6EDE06662E1}E:\program files\metin2\belenus.exe" = protocol=6 | dir=in | app=e:\program files\metin2\belenus.exe | 
"TCP Query User{40CDEA8C-1E76-4EE8-884D-3CDAB0FC093A}C:\users\gosia\desktop\metin2\0_kxmetin_spol_by_iplaym2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2\0_kxmetin_spol_by_iplaym2.exe | 
"TCP Query User{44CAE6A6-7B19-46F5-B152-7B116BE3AB8D}C:\users\gosia\desktop\metin2\spolszczenie by posterik.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2\spolszczenie by posterik.exe | 
"TCP Query User{4A42BFCB-F737-4069-97EB-EFFAF98A6C06}C:\users\gosia\appdata\local\temp\rar$ex12.159\zvsrtkjp.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\zvsrtkjp.exe | 
"TCP Query User{4B510195-A243-4A6F-8DF0-D2E743FA429D}C:\users\gosia\desktop\m2\mxyt2_spol_by_lost.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\mxyt2_spol_by_lost.exe | 
"TCP Query User{4EEF0AA1-6108-43F3-B4D4-FAEF0056BA10}C:\users\gosia\desktop\m2\priv-metin2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\priv-metin2.exe | 
"TCP Query User{541D4326-A581-4ADE-B77C-03E1AB438885}C:\program files\wnp\game.exe" = protocol=6 | dir=in | app=c:\program files\wnp\game.exe | 
"TCP Query User{57A8EF73-0F1A-4C8B-B1AC-6B2636A3375A}C:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe | 
"TCP Query User{57BEC81C-A4B3-419A-AF00-6119BE3E8BA1}C:\users\gosia\desktop\m2\csyt spol by mikepolak.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\csyt spol by mikepolak.exe | 
"TCP Query User{605B720E-B3FD-4D8D-A559-B1A7F5D5496F}C:\users\gosia\desktop\metin2_pl\mc.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\mc.exe | 
"TCP Query User{60C908EC-1E35-4F92-BCB2-EB2B3ED3486A}C:\users\gosia\desktop\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2.bin | 
"TCP Query User{6531568D-05BC-4A2B-9CE8-9AA9CDF815CB}C:\program files\ubisoft\heroes of might and magic iii - zlota edycja\heroes3.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"TCP Query User{65801940-78E3-404F-9984-FA2990E0ECD7}C:\program files\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files\valve\hl.exe | 
"TCP Query User{663A67B3-398E-497F-A2B8-229D3A7A8D08}E:\program files\metin2\wz1980_spol_by_mradiex.exe" = protocol=6 | dir=in | app=e:\program files\metin2\wz1980_spol_by_mradiex.exe | 
"TCP Query User{671F5874-B5C8-492D-9943-229EAF709DA3}C:\users\gosia\appdata\local\temp\wz1980_spol_by_mradiex.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\wz1980_spol_by_mradiex.exe | 
"TCP Query User{678302B0-E3EE-4316-93DE-AE4E450CE637}C:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049(2).exe" = protocol=6 | dir=in | app=c:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049(2).exe | 
"TCP Query User{68DF99F2-D81E-4FC8-9D5B-DDF156F714D8}C:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe | 
"TCP Query User{6A0AC1E5-1750-43A2-86CA-957D72E2682E}C:\users\gosia\desktop\metin2_pl\xkyt2 up by mrc.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\xkyt2 up by mrc.exe | 
"TCP Query User{6A73A64E-4735-4DC8-80BB-0DDF1359A9D0}C:\users\gosia\desktop\zozolmt2\metin2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\zozolmt2\metin2.exe | 
"TCP Query User{6E116B36-B025-4ABE-88A9-77BB5969D447}C:\users\gosia\desktop\gry\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\gry\metin2_pl\metin2.bin | 
"TCP Query User{70B0371E-5611-4AE5-9CF1-DE1F33CE8ECF}C:\users\gosia\appdata\local\temp\rar$ex12.159\phqghume.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\phqghume.exe | 
"TCP Query User{7134748B-1C09-41C6-83F9-ED6FBB00EBEC}C:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe | 
"TCP Query User{796BCDA5-E13A-4ED7-94CD-B12515661C46}C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe" = protocol=6 | dir=in | app=c:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe | 
"TCP Query User{7A2A88DF-B537-48CC-A337-B48AA2BAE17B}C:\users\gosia\desktop\m2\metin2.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\metin2.bin | 
"TCP Query User{7BB75FC2-A408-40B9-AD98-279AC252DC1D}C:\sierra\empire earth demo\empire earth.exe" = protocol=6 | dir=in | app=c:\sierra\empire earth demo\empire earth.exe | 
"TCP Query User{7C73D335-B15B-4E2F-89E0-965D89A86881}C:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe | 
"TCP Query User{7E8B74BC-674C-4F9C-813C-CB0272E7B059}C:\users\gosia\appdata\local\temp\rar$ex12.159\nrvystmw.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\nrvystmw.exe | 
"TCP Query User{7F817761-5320-4560-B315-56300ABDA9BF}C:\program files\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"TCP Query User{8C42998E-7B83-45B7-90D1-890FF8478C00}C:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049.exe" = protocol=6 | dir=in | app=c:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049.exe | 
"TCP Query User{99555435-DB3B-4D3C-ADA6-289F55886B58}C:\users\gosia\desktop\m2\metin2.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\metin2.bin | 
"TCP Query User{9A0E04ED-2034-411E-868D-DACBF868C778}C:\users\gosia\desktop\metin2\ogmmt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2\ogmmt2.exe | 
"TCP Query User{9D882501-BD46-4091-800F-95F0AE665142}C:\users\gosia\desktop\metin2_pl\metin_kingmt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin_kingmt2.exe | 
"TCP Query User{9F1BBF1C-2EF9-4578-A828-855733AF63E8}C:\users\gosia\desktop\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2.bin | 
"TCP Query User{B38F9F5B-9B6E-4642-BD08-98B92435320C}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{B41E69C6-BD47-4EA6-914B-75498D78A4E2}C:\users\gosia\desktop\metin2_pl\metin2client.bin" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2client.bin | 
"TCP Query User{B9C47D23-1243-49A6-B3B6-CBAAEACA6129}C:\users\gosia\appdata\local\temp\gg.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\gg.exe | 
"TCP Query User{BE2F0EC1-7821-4CAA-81C5-0BD0F9A19BCC}C:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe | 
"TCP Query User{BE928AB9-BAD7-4655-A632-BC75F7D6B976}C:\users\gosia\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\roaming\imvuclient\1vivoxvoice.exe | 
"TCP Query User{BF96DA61-2B99-4D8A-B200-15ABB0BD3D0B}C:\users\gosia\desktop\zozolmt2\ogmmt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\zozolmt2\ogmmt2.exe | 
"TCP Query User{C5667340-E05B-494C-AE32-741DDCFEC592}C:\program files\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | 
"TCP Query User{C6BAA223-3F1C-4E72-9E89-ABDCFB540E11}C:\users\gosia\desktop\m2\diniamikmt2_spol_by_deerdance.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\diniamikmt2_spol_by_deerdance.exe | 
"TCP Query User{C6C516B9-7E8F-4E0B-8013-8D90C1924292}C:\program files\factory metin2\metin2 factory\launcher.exe" = protocol=6 | dir=in | app=c:\program files\factory metin2\metin2 factory\launcher.exe | 
"TCP Query User{C7B8603A-A5EB-4434-8320-0A3086740E1C}C:\users\gosia\desktop\counter-strike 1.6 + half-life\hl.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 + half-life\hl.exe | 
"TCP Query User{C93B530D-F93B-4BC3-B90C-C7BB62EFE503}C:\users\gosia\desktop\counter-strike 1.6 non steam\hlds.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 non steam\hlds.exe | 
"TCP Query User{CB6E275A-7348-46ED-AAFA-C736955764D9}C:\users\gosia\desktop\counter-strike 1.6 non steam\hl.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 non steam\hl.exe | 
"TCP Query User{D07F7385-B3CF-4DD1-9E60-A109B2A727EB}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{D3448721-1F92-49F9-B82A-2A2D5B8AA423}C:\users\gosia\desktop\elitemt2\elitemt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\elitemt2\elitemt2.exe | 
"TCP Query User{D39D9B3E-0E7D-4B20-8092-B3A1D3CB1D88}E:\program files\metin2\clientlauncher.exe" = protocol=6 | dir=in | app=e:\program files\metin2\clientlauncher.exe | 
"TCP Query User{D6DF9A8E-506E-4421-8CD7-4E5FD1179F26}C:\users\gosia\desktop\metin2\avalonmt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2\avalonmt2.exe | 
"TCP Query User{DD2276D3-578B-41BD-B5F2-9B3133E85427}C:\users\gosia\desktop\metin2_pl\server2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2_pl\server2.exe | 
"TCP Query User{DD7B3B9D-8A3E-437F-A353-D35F89C93BE2}C:\users\gosia\desktop\metin2\mcmetinpro_www.przeklej.pl.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\metin2\mcmetinpro_www.przeklej.pl.exe | 
"TCP Query User{DEC3ECAA-1948-4C27-B404-0E67D2032106}E:\program files\metin2\metin5ch2.exe" = protocol=6 | dir=in | app=e:\program files\metin2\metin5ch2.exe | 
"TCP Query User{DF0653BF-801C-4226-A036-C0CB32C420AA}C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe" = protocol=6 | dir=in | app=c:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe | 
"TCP Query User{E117F229-B5CC-4743-BBB8-1846C6175A23}C:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe | 
"TCP Query User{E750881A-0539-4F69-90C2-FFC0ADD576BE}C:\program files\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"TCP Query User{F8A1AD05-F7E2-4B74-A9BB-901870670D84}C:\users\gosia\desktop\pandoramt2\pandoramt2.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\pandoramt2\pandoramt2.exe | 
"TCP Query User{F9D32667-EAF2-426E-82A5-256CF5E88614}C:\program files\teci\metin2\metin2.bin" = protocol=6 | dir=in | app=c:\program files\teci\metin2\metin2.bin | 
"TCP Query User{FB170E6C-93AF-4B34-BB0E-701B315D7284}C:\users\gosia\appdata\local\temp\ghwww_by_narutosiklolzal121.exe" = protocol=6 | dir=in | app=c:\users\gosia\appdata\local\temp\ghwww_by_narutosiklolzal121.exe | 
"TCP Query User{FFCFB144-A9D1-4BB6-9056-6C428C752C02}C:\users\gosia\desktop\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\users\gosia\desktop\runes of magic\client.exe | 
"UDP Query User{00545710-F7AB-4B50-BBB9-DC50EEECD1E8}C:\users\gosia\desktop\metin2\0_kxmetin_spol_by_iplaym2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2\0_kxmetin_spol_by_iplaym2.exe | 
"UDP Query User{0081AF22-B700-486D-A291-8347AB62BAFA}C:\users\gosia\appdata\local\temp\wz1980_spol_by_mradiex.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\wz1980_spol_by_mradiex.exe | 
"UDP Query User{02953610-3927-46FC-8A52-3662BC5340C4}C:\users\gosia\desktop\metin2_pl\metin2client.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2client.bin | 
"UDP Query User{075220D4-E50D-4EDF-BBEC-55099A52E50B}C:\users\gosia\desktop\metin2_pl\metin_kingmt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin_kingmt2.exe | 
"UDP Query User{0AB7015B-AB1B-450B-9391-48FD48A9CD5F}C:\users\gosia\desktop\m2\diniamikmt2_spol_by_deerdance.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\diniamikmt2_spol_by_deerdance.exe | 
"UDP Query User{0F291F74-25AC-4439-A40C-145ED7642F07}C:\users\gosia\desktop\m2\priv-metin2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\priv-metin2.exe | 
"UDP Query User{1B64F0D0-189C-4035-9B01-61C41FA95BD8}C:\users\gosia\desktop\metin2\mcmetinpro_www.przeklej.pl.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2\mcmetinpro_www.przeklej.pl.exe | 
"UDP Query User{1CC9D048-9706-477B-BBE2-7CE1038E65BC}C:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe | 
"UDP Query User{204031E6-7A87-487D-9B31-72C57F0FE24B}C:\users\gosia\appdata\local\temp\gg.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\gg.exe | 
"UDP Query User{20E1F49E-EA86-40E8-8B68-A3FD4A94FFC2}C:\program files\teci\metin2\metin2.bin" = protocol=17 | dir=in | app=c:\program files\teci\metin2\metin2.bin | 
"UDP Query User{23639E9D-9D63-4373-B63E-16C5EAC0160E}C:\program files\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files\valve\hl.exe | 
"UDP Query User{25119BC1-FBF4-46E6-AD16-A431F03193DD}C:\users\gosia\desktop\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2.bin | 
"UDP Query User{34E61986-AA8F-4231-B85C-04A987C0D7A1}E:\program files\metin2\belenus.exe" = protocol=17 | dir=in | app=e:\program files\metin2\belenus.exe | 
"UDP Query User{3B49ADD6-E7F6-4789-AE55-3AC4DD79B4C7}C:\users\gosia\appdata\local\temp\rar$ex12.159\zvsrtkjp.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\zvsrtkjp.exe | 
"UDP Query User{3C0A660F-F71D-46BB-BD7D-31F15B34DEB4}C:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049(2).exe" = protocol=17 | dir=in | app=c:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049(2).exe | 
"UDP Query User{3C18D701-7A10-4C8C-B401-8B542071A22D}C:\sierra\empire earth demo\empire earth.exe" = protocol=17 | dir=in | app=c:\sierra\empire earth demo\empire earth.exe | 
"UDP Query User{3C6C9CDA-7660-4B54-85E6-0BED664DDE2F}C:\users\gosia\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\roaming\imvuclient\1vivoxvoice.exe | 
"UDP Query User{3D8390E6-5D32-4D2A-AEFF-BD91A13AD02B}C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe" = protocol=17 | dir=in | app=c:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe | 
"UDP Query User{466A1D5F-DDBF-4B26-911F-9191A11EE597}E:\program files\metin2\zzyok spol by mrxingo.exe" = protocol=17 | dir=in | app=e:\program files\metin2\zzyok spol by mrxingo.exe | 
"UDP Query User{48924155-789B-44F0-9B38-D9FC6FFCAAD7}C:\users\gosia\appdata\local\temp\rar$ex12.159\nrvystmw.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\nrvystmw.exe | 
"UDP Query User{4A1B9170-38D3-442A-B352-84A33C2A97E2}C:\users\gosia\desktop\counter-strike 1.6 + half-life\hl.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 + half-life\hl.exe | 
"UDP Query User{518936AE-23FF-46D4-972F-1C52173AB783}C:\program files\microsoft games\dungeon siege\dungeonsiege.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\dungeon siege\dungeonsiege.exe | 
"UDP Query User{5508E200-314F-4EC5-88A7-B0223E102F72}C:\users\gosia\desktop\metin2_pl\xkyt2 up by mrc.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\xkyt2 up by mrc.exe | 
"UDP Query User{5C50AF5D-3A1D-453D-AC13-B6F626E4DB69}C:\users\gosia\desktop\metin2_pl\mc.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\mc.exe | 
"UDP Query User{5C894685-C9CB-4CCB-8630-0F15A4BC7BB3}C:\users\gosia\desktop\metin2_pl\metin2client.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2client.bin | 
"UDP Query User{6174928B-A5D4-4EF1-8DE4-BAFF09DEC8A9}C:\users\gosia\desktop\metin2_pl\server2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\server2.exe | 
"UDP Query User{6186EF6C-2A16-4395-AF61-977213401C8B}C:\program files\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | 
"UDP Query User{62134C9D-348F-40E2-96C4-3929942F4E24}C:\users\gosia\appdata\local\temp\rar$ex00.368\phqghume.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex00.368\phqghume.exe | 
"UDP Query User{67B67A4D-50B9-46A3-9837-76DE3888457C}C:\program files\factory metin2\metin2 factory\launcher.exe" = protocol=17 | dir=in | app=c:\program files\factory metin2\metin2 factory\launcher.exe | 
"UDP Query User{681C54CB-652B-4454-B82C-90E7D4721A0A}C:\users\gosia\desktop\m2\mxyt2_spol_by_lost.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\mxyt2_spol_by_lost.exe | 
"UDP Query User{6C1E75C6-E4EB-4AA0-AF5C-0570CA3B797B}C:\users\gosia\appdata\local\temp\rar$ex12.159\ggbwkfnq.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\ggbwkfnq.exe | 
"UDP Query User{71984E98-FFAA-4DDD-80C4-BC9837B03077}C:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\lryt2_spol_by_lost.exe | 
"UDP Query User{7234D6B2-2CE8-4B74-83CF-E509F20CF07B}C:\users\gosia\desktop\metin2_pl\zpmt2_by_dragon33.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\zpmt2_by_dragon33.exe | 
"UDP Query User{7FFDE849-DDC1-4D36-B7C9-322CCD150B0E}C:\users\gosia\desktop\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2.bin | 
"UDP Query User{8008DEA1-D813-4A43-B87D-4B2EB086503A}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{81DE53DD-04DD-4554-A85F-D4AF8C0E7850}C:\users\gosia\desktop\metin2_pl\server2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\server2.exe | 
"UDP Query User{84A6E151-DCA1-449A-B9E3-36E95EBEC2E4}C:\users\gosia\downloads\belenus.exe" = protocol=17 | dir=in | app=c:\users\gosia\downloads\belenus.exe | 
"UDP Query User{866CC8AD-78E1-4E63-921D-64410027E1B7}C:\users\gosia\desktop\metin2\spolszczenie by posterik.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2\spolszczenie by posterik.exe | 
"UDP Query User{86AA3D54-CC0F-4EF0-9EAF-C62374DF9AF6}C:\program files\ubisoft\heroes of might and magic iii - zlota edycja\heroes3.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"UDP Query User{8757DECD-7336-41D1-ABA4-C1569B56DB1C}C:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe | 
"UDP Query User{8792C853-5F96-4BD7-B259-52A766F20098}C:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe | 
"UDP Query User{8850EDDB-2984-4364-8B24-0DB1B8C4DB39}C:\program files\wnp\game.exe" = protocol=17 | dir=in | app=c:\program files\wnp\game.exe | 
"UDP Query User{905DA5F2-1627-4123-951E-78DF0E5959D1}C:\users\gosia\desktop\m2\csyt spol by mikepolak.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\csyt spol by mikepolak.exe | 
"UDP Query User{91E4B97D-442B-44E5-893B-497D71B69164}C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe" = protocol=17 | dir=in | app=c:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe | 
"UDP Query User{9EF4570A-64B4-4385-B5B0-4B4CE010A5E5}C:\users\gosia\desktop\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\runes of magic\client.exe | 
"UDP Query User{A39567F1-66C8-499A-9A47-9F2CAE77EFD8}C:\users\gosia\desktop\m2\metin2.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\metin2.bin | 
"UDP Query User{A4A4500F-02B9-4B8B-869C-D5BFAA3A9D1B}C:\program files\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"UDP Query User{A961F3CF-7ADD-4389-9D50-63EE53A21ACE}C:\users\gosia\desktop\metin2\avalonmt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2\avalonmt2.exe | 
"UDP Query User{AF2F33CF-9ADD-4533-8766-B9575D2479D7}E:\program files\metin2\wz1980_spol_by_mradiex.exe" = protocol=17 | dir=in | app=e:\program files\metin2\wz1980_spol_by_mradiex.exe | 
"UDP Query User{B1FA6C06-74E7-430D-8382-16D9AF14A62A}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{B832DF52-8D5E-4FDD-8556-2B19784AF082}C:\users\gosia\desktop\zozolmt2\ogmmt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\zozolmt2\ogmmt2.exe | 
"UDP Query User{BB220BD1-6FC7-4475-8808-BFBEFFF50285}C:\users\gosia\desktop\metin2\ogmmt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2\ogmmt2.exe | 
"UDP Query User{C638D595-27CF-4E96-8E56-1BDEF93ABE29}C:\users\gosia\appdata\local\temp\rar$ex12.159\phqghume.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\rar$ex12.159\phqghume.exe | 
"UDP Query User{C80554A9-156D-4CE7-8DAA-0CBDCF0206D4}C:\users\gosia\desktop\elitemt2\elitemt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\elitemt2\elitemt2.exe | 
"UDP Query User{CA694243-238F-4B2A-A595-14700461A4D9}E:\program files\metin2\mcmetinpro_www.przeklej.pl.exe" = protocol=17 | dir=in | app=e:\program files\metin2\mcmetinpro_www.przeklej.pl.exe | 
"UDP Query User{CB076F5A-B5FC-40CA-9374-6C74FD133AC2}E:\program files\metin2\metin5ch2.exe" = protocol=17 | dir=in | app=e:\program files\metin2\metin5ch2.exe | 
"UDP Query User{CBD42683-51B5-4CD5-B6D6-1CE95F10135E}C:\users\gosia\desktop\metin2_pl\metin_zpmt2_s1_by_boy4538.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin_zpmt2_s1_by_boy4538.exe | 
"UDP Query User{CCCC68D4-6432-40B8-88BC-41F2A4CEBCF9}C:\users\gosia\desktop\zozolmt2\metin2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\zozolmt2\metin2.exe | 
"UDP Query User{D11FBFC8-A626-4872-95CB-84FC52F30ED6}C:\windows\system32\dpnsvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dpnsvr.exe | 
"UDP Query User{D8E00100-1B27-4C62-8431-4F81B6BF7896}C:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\metin2_pl\metin2_zuiaipk.exe | 
"UDP Query User{DE37662A-1A53-4F40-9E34-4343AFA7FAA6}C:\program files\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"UDP Query User{DF9E8ADB-E1DF-4CE6-9F99-BF124CB3C775}C:\program files\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files\valve\hl.exe | 
"UDP Query User{E0F4B470-AE92-4751-91A8-B79D4ACD6095}C:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049.exe" = protocol=17 | dir=in | app=c:\users\gosia\downloads\fogdownloader-rom_2_1_6_2049.exe | 
"UDP Query User{E11BB389-91CA-4A1A-A962-04B94A15FCB1}C:\users\gosia\appdata\local\temp\ghwww_by_narutosiklolzal121.exe" = protocol=17 | dir=in | app=c:\users\gosia\appdata\local\temp\ghwww_by_narutosiklolzal121.exe | 
"UDP Query User{E15D9323-FC22-4D04-A7A1-71FED17E6729}C:\users\gosia\desktop\pandoramt2\pandoramt2.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\pandoramt2\pandoramt2.exe | 
"UDP Query User{E80781D5-AE1D-41BF-B6C1-C5132135ED19}C:\users\gosia\desktop\gry\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\gry\metin2_pl\metin2.bin | 
"UDP Query User{E8268B9A-8901-4B03-A0B2-5D3D5C9565FF}C:\users\gosia\desktop\counter-strike 1.6 non steam\hl.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 non steam\hl.exe | 
"UDP Query User{EB2B54C9-4BC3-4E15-A261-150E47C0DC00}C:\users\gosia\desktop\m2\metin2.bin" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\metin2.bin | 
"UDP Query User{EC1D6EA6-3E57-4D3A-BE3B-787B2E8760AF}C:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\m2\wz1980_spol_by_mradiex.exe | 
"UDP Query User{EDA3A54A-6C23-4DA3-B0C7-9FF0C53BA042}C:\program files\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | 
"UDP Query User{F1BA69B0-915A-47B6-ABE3-758F077F0205}E:\program files\metin2\clientlauncher.exe" = protocol=17 | dir=in | app=e:\program files\metin2\clientlauncher.exe | 
"UDP Query User{FD702BF2-2996-4B37-8DA3-9E83492BFC2D}C:\users\gosia\desktop\counter-strike 1.6 non steam\hlds.exe" = protocol=17 | dir=in | app=c:\users\gosia\desktop\counter-strike 1.6 non steam\hlds.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{1023383E-D9F6-478C-A965-23A4657B3C9A}" = Sacred 2
"{10A1F097-163E-4FF0-84FE-CABA296685A4}" = Webzen Fx3 Game Starter
"{15B4652F-38E8-4252-8374-EFE88AA2FDA7}" = Empire Earth II Demo Single Player
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{255FC1CF-2620-4B64-BE02-79B9E609BB3D}" = Webzen Game Starter
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{306B39C9-3AB1-4161-8567-9C7E50B41AE3}" = Microsoft Works
"{3138EAD3-700B-4A10-B617-B3F8096EE30D}" = Dell Edoc Viewer
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{491DFBAA-77EF-4B06-8676-2FC66EEE049A}" = LogMeIn Hamachi
"{4DBF3C3D-5B6D-45B2-A08B-B06490E2666F}_is1" = Wru! 1.1.3
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{5B09BD67-4C99-46A1-8161-B7208CE18121}" = QuickTime
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8B743AA0-53B2-11D2-808A-00600895FB43}" = Heroes of Might and Magic III - Złota Edycja
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00AF-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (Polish)
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{99D467AE-03D8-442C-AF74-EB5DA85DCA12}" = Heroes of Might and Magic II
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}" = Counter-Strike 1.6
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A12EA295-32EA-42BB-8442-2C2BE852D4AA}" = inSSIDer 2.0
"{AB3F9176-E74A-4F28-9A09-4F22349B145E}" = livebox tp
"{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish
"{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}" = ubi.com
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}" = Apple Software Update
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C4972073-2BFE-475D-8441-564EA97DA161}" = QuickSet
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DF315348-721C-40B8-BAE2-58C6C7D935A2}" = Empire Earth II
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{F111FC82-5923-44C7-BFFB-0D3DAE787F31}" = ZMU S4 May 09 Release
"{F57CEB84-3D22-4657-8EDA-F8CD5217B83E}" = Mu
"{ORAHSS}.UninstallSuite" = Livebox
"4StoryPL_is1" = 4Story 1.5
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Akamai" = Akamai NetSession Interface
"Alien Shooter 2 Demo_is1" = Alien Shooter 2 Demo v 1.2
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"Client_0" = Client 1, 0, 3, 0
"EADM" = EA Download Manager
"ElfBot NG_is1" = ElfBot NG 4.5.9
"Gimnazjum klasa 1 - Puls życia" = Gimnazjum klasa 1 - Puls życia
"GoD_is1" = GoD 1.95
"Gwiezdny Mściciel" = Gwiezdny Mściciel
"HD Tune Pro_is1" = HD Tune Pro 4.60
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"Lionheart" = Lionheart
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.5.13)" = Mozilla Firefox (3.5.13)
"Nowe Gadu-Gadu" = Nowe Gadu-Gadu
"ots24.net_is1" = TIBIA 7.92 OTS24.NET
"PokerStars" = PokerStars
"Sąsiedzi z Piekła Rodem 2_is1" = Sąsiedzi z Pekła Rodem 2 - Na wakacjach
"Sąsiedzi z Piekła Rodem_is1" = Sąsiedzi z Pekła Rodem - Słodka zemsta
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"Sigma Team Toolbar" = Sigma Team Toolbar
"Steam App 10" = Counter-Strike
"Talisman of World 1553.1.1" = Talisman of World 1553.1.1
"Talisman Online_is1" = Talisman Online Ver.1534
"Testy B 2009_is1" = Testy B 2009
"Tibia_is1" = Tibia
"TMIPC" = Tibia MULTI-ip changer
"Totalcmd" = Total Commander (Remove or Repair)
"Winamp" = Winamp
"WinRAR archiver" = Archiwizator WinRAR
"Wyprawa na Północ" = Wyprawa na Północ
"Xfire" = Xfire (remove only)
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-2249310747-3679619916-2194120341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Detektor Winampa
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2011-04-23 10:28:49 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 2011-04-23 10:28:49 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 9002
Description = 
 
Error - 2011-04-23 10:28:49 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 2011-04-23 10:28:50 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 2011-04-23 10:28:50 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 2011-04-23 10:28:50 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 2011-04-23 10:28:50 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 3028
Description = 
 
Error - 2011-04-23 10:28:50 | Computer Name = komputerdomowz | Source = Windows Search Service | ID = 3058
Description = 
 
Error - 2011-04-23 10:29:05 | Computer Name = komputerdomowz | Source = WinMgmt | ID = 10
Description = 
 
Error - 2011-04-23 10:29:11 | Computer Name = komputerdomowz | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd IAAnotif.exe, wersja 8.2.0.1001, sygnatura
 czasowa 0x48224ad2, moduł powodujący błąd ISDI.dll, wersja 6.0.6001.22777, sygnatura
 czasowa 0x4cb72ffe, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009cf4,  identyfikator
 procesu 0x7f4, godzina rozpoczęcia aplikacji 0x01cc01c2c939c36e.
 
[ Broadcom Wireless LAN Events ]
Error - 2011-03-30 10:04:32 | Computer Name = komputerdomowz | Source = WLAN-Tray | ID = 0
Description = 16:04:30, Wed, Mar 30, 11 Error - Unable to gain access to user store

 
Error - 2011-04-23 09:03:40 | Computer Name = komputerdomowz | Source = WLAN-Tray | ID = 0
Description = 15:03:40, Sat, Apr 23, 11 Error - Unable to decode string, error 13

 
[ System Events ]
Error - 2009-09-09 14:36:23 | Computer Name = komputerdomowz | Source = HTTP | ID = 15016
Description = 
 
Error - 2009-09-09 14:37:48 | Computer Name = komputerdomowz | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 2009-09-09 14:37:48 | Computer Name = komputerdomowz | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >