OTL Extras logfile created on: 2014-12-23 10:13:17 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sylwester Sobkowiak\Downloads
Windows Vista Business Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,43 Gb Total Physical Memory | 1,55 Gb Available Physical Memory | 45,27% Memory free
7,10 Gb Paging File | 5,11 Gb Available in Paging File | 72,06% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 21,21 Gb Free Space | 21,21% Space Free | Partition Type: NTFS
Drive D: | 363,75 Gb Total Space | 241,26 Gb Free Space | 66,33% Space Free | Partition Type: NTFS
Drive E: | 36,87 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Drive F: | 3,89 Gb Total Space | 3,87 Gb Free Space | 99,50% Space Free | Partition Type: NTFS
Drive X: | 224,98 Gb Total Space | 3,38 Gb Free Space | 1,50% Space Free | Partition Type: NTFS
Drive Y: | 224,98 Gb Total Space | 3,38 Gb Free Space | 1,50% Space Free | Partition Type: NTFS
Drive Z: | 224,98 Gb Total Space | 3,38 Gb Free Space | 1,50% Space Free | Partition Type: NTFS
 
Computer Name: SOBKOWIAK | User Name: Sylwester Sobkowiak | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = OperaStable] -- C:\Program Files\Opera\Launcher.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-4057883698-1414104491-491510895-1000\SOFTWARE\Classes\<extension>]
.html [@ = OperaStable] -- C:\Program Files\Opera\Launcher.exe (Opera Software)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- Reg Error: Key error.
Directory [AddToPlaylistVLC] -- "C:\Users\Sylwester Sobkowiak\Pictures\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Users\Sylwester Sobkowiak\Pictures\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusOverride" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"FirewallOverride" = 1
"UpdatesDisableNotify" = 0
"UacDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 1
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"UacDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-4057883698-1414104491-491510895-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableConfig" = 0
"DisableSR" = 1
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0013A92C-DBBD-4664-BACB-154B4C5F6818}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{048EC4B1-7B9B-437D-ACD9-6F0C3128D682}" = rport=138 | protocol=17 | dir=out | app=system | 
"{0DF3862A-CE8A-46C6-A523-102A5B3AED75}" = rport=445 | protocol=6 | dir=out | app=system | 
"{1177BEC3-0960-4255-9635-ABC1E9B78CAF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{2B213D14-A65C-46B6-B066-6C1B7843C635}" = lport=138 | protocol=17 | dir=in | app=system | 
"{2E02E9DA-D954-4502-8331-E95B17684843}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{2E0AC4DC-5F1E-4332-A7E5-E6B810815187}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2E2B203F-6EB1-4A58-BCBF-70D06D281EC7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{314A599D-9F69-433A-81EA-BDF940F60218}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{42911F14-D358-49DF-AF6C-833A14927C30}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{44F710C8-53B2-4DB4-95CD-B8BEDE901045}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{49530D7F-B1E3-4CF9-BCC3-9083A7E842EA}" = lport=139 | protocol=6 | dir=in | app=system | 
"{496CF423-FB8D-46B0-A63C-7B49312EC362}" = lport=137 | protocol=17 | dir=in | app=system | 
"{4AA90E38-CACB-4B67-A63E-F7BCB917C13F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{4ED6AB33-65CA-4FF3-8185-938DDCCD5BE3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{676FE5ED-2F09-4F86-B2BF-5F3F0B0EC3FD}" = rport=138 | protocol=17 | dir=out | app=system | 
"{67EFD7A7-0D36-40CB-8E23-177D1257CB31}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{69B06284-F9FD-4759-AD83-1CFCE8219C74}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{69CBD28A-07B4-47B6-B227-2154C5C48110}" = lport=445 | protocol=6 | dir=in | app=system | 
"{69FA9359-4FD6-4D79-94A4-4114EDA3DB7D}" = lport=139 | protocol=6 | dir=in | app=system | 
"{6A63C234-30AD-435B-A5B2-B226C8422E92}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{6D234570-8D33-4DAA-A051-2CD934920AB6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{6E900C33-E493-47D2-BB9E-C57EBC31BAE8}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{70CF4561-E1B3-4FBA-B14C-90523A30E461}" = rport=445 | protocol=6 | dir=out | app=system | 
"{729FC1B4-F4EE-4401-A20D-0C3C5148BE06}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{7645152D-6B46-4F8D-BC63-0F95999926DA}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{7F04AD5E-343E-4EBD-89A4-91ACA021198C}" = rport=139 | protocol=6 | dir=out | app=system | 
"{8151C31D-0E23-47A8-BD6E-BC8C481DDBFD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{8ADC0B65-2A29-4BA2-B3AF-218ADC14240F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{8CFDA4BA-D5F6-457F-8432-386AFDB7E2B7}" = lport=137 | protocol=17 | dir=in | app=system | 
"{8E21AE5F-1AD2-4C3C-B746-D3D47CFF950F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{94B260F2-DA2C-4B5D-9BD2-70B07F959AB7}" = lport=138 | protocol=17 | dir=in | app=system | 
"{AE1EBFCD-3117-4EB4-BDCE-313F967BFDDE}" = rport=137 | protocol=17 | dir=out | app=system | 
"{BDF430FD-B21A-4D1C-885C-5555463D2AED}" = lport=445 | protocol=6 | dir=in | app=system | 
"{D5B46DCC-BADF-44C8-8ABD-7B854993272E}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe | 
"{DA546AB9-3098-4805-A138-E77E85AD1612}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{DACA209D-9DEC-401C-ADEE-2E53927210C6}" = rport=137 | protocol=17 | dir=out | app=system | 
"{EA98E662-4C79-4CE1-B2F9-EBCB6DF83DDB}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | 
"{EF376459-B995-4DCE-B9B1-168A06F07790}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{EF865607-324A-4F83-A40E-B1FA6DB570CE}" = rport=139 | protocol=6 | dir=out | app=system | 
"{FB0E784D-3C5B-4A5A-A625-68D7B288678B}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{13352222-CB9A-4F74-B0B2-1ED6BD48139B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{168B5F5E-89F3-4951-AA3C-AF4DBC8325BD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{22824889-BA87-4F46-8DD7-F0D1AC8F1CD1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{2B287E88-4722-4E97-A821-08DE3FE71AEA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{2D0E72ED-E347-4251-800D-B1B593A53528}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{32511F72-8333-4245-8FB2-1D4F4C8257E1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{32DEB90B-30E4-4F61-8790-F3B23FE83020}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{4E6ADDAD-FBBF-428B-9F13-9AF95D1DE3F5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{63E192A2-B88B-4FDD-921C-5C5FA031D64E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{6BD80F45-3DE3-4DD9-B3F8-934C5F12A155}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{6FFD73E5-A029-4EC2-AD3C-B7A38BF62F27}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{718775CA-7CE6-4EC9-8F9A-8F0FCB171500}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{7F28A039-55AA-4264-9945-3D688E9A228B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{83528518-FB8A-45CE-894F-EA99C5C32906}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{84A6B385-7143-42FC-8CE0-893372F40F71}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{85BDA02D-0847-4E8F-86D8-13B4BB58E3FA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{A4B78B5C-E19C-45D4-AD81-21355BE7A3C9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B28C19E8-76A8-468E-8D95-F8B3C2C97BA6}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"{B6B5D39B-510C-44F3-8C01-151B56D03D6F}" = protocol=6 | dir=out | app=system | 
"{C14963D1-C113-4960-A375-86FA09C28B93}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{C25084E2-F8EC-4855-B783-26C1069C4BCB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{D24CDCA9-A505-40A0-B252-2A9C4AC87915}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D5D2C593-7C37-4852-8635-C9460666493D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{D61C8BF5-D1FD-405D-B3ED-B293928B4C7B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{DBC821DF-29A1-49DC-A54F-677367636C1E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{DD2B262F-AC65-4416-AE8D-F331B65241EF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{DEC8FF0A-68CA-43F3-85B6-50C96950AAE8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E8FBC729-96F1-41DE-8DB0-B405DEFA5726}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{F61E0E02-FABE-43A2-8138-E83315BD1B4B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"TCP Query User{0D12CA20-4EC4-4C4F-BEF0-523853FA3C29}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{11868BB3-8517-4F98-B25D-BD18149426D1}C:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"TCP Query User{6ED52B22-9922-4520-82F3-E20E85E30B77}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | 
"TCP Query User{7854A539-FE2D-4C5E-B143-AA7A13948EFE}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe | 
"TCP Query User{9F383AAE-95E8-4735-829A-3AC9207FF32A}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"TCP Query User{A05DEC39-0AD7-4C07-A21D-EB53C007161F}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{A6063AEC-79C0-49F7-9857-27723AA5AFDF}C:\program files\common files\nero\nero web\setupx.exe" = protocol=6 | dir=in | app=c:\program files\common files\nero\nero web\setupx.exe | 
"TCP Query User{A68FA7ED-9475-4432-9C19-C8B1D0D275B0}C:\program files\microsoft office\office14\groove.exe" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
"TCP Query User{AC23274B-0EBB-49A4-B8AF-8BF623A42F0A}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"TCP Query User{F9E86433-3298-466F-BE2C-C64E22AF019F}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"UDP Query User{3A7C6366-9563-4662-B2E9-B7F6D69CBC24}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{48328F03-88C7-4D75-9BF2-E13702DD4792}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | 
"UDP Query User{62160F4B-31F6-4F76-8E47-9CCCD3B0822E}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"UDP Query User{8C800369-DEFB-4550-BC5C-357A96B8A913}C:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"UDP Query User{A2C2679C-33EF-4549-ACCA-9A54831AA5C6}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"UDP Query User{C0EF0988-EB67-42DD-96EA-039081C0FD91}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"UDP Query User{C4345CF0-0FD9-4B98-8A06-AE2B0D5386B8}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{E44F98F6-6462-44F8-8AFC-C5BB0E3C1C5A}C:\program files\common files\nero\nero web\setupx.exe" = protocol=17 | dir=in | app=c:\program files\common files\nero\nero web\setupx.exe | 
"UDP Query User{E7CF02D0-9922-4F05-84E4-224B9CD110CE}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe | 
"UDP Query User{F1DF80C6-7577-44EC-869B-AF701D329CFD}C:\program files\microsoft office\office14\groove.exe" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{ADDBE07D-95B8-4789-9C76-187FFF9624B4}" = CorelDRAW Essential Edition 3
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C42593A-B604-4A99-A0BE-F4AD9025F448}" = EN
"{0C6994E1-3AE1-4CDD-A760-1628E6B8CD03}" = Windows Live Family Safety
"{123DE6D6-9566-4777-AC81-E6D86FFA95DA}" = HL-4150CDN
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{26A24AE4-039D-4CA4-87B4-2F83218025F0}" = Java 8 Update 25
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2F926AE7-9FB7-4B34-906F-9C29A6D146A7}" = SystemDiagnostics
"{346D3826-6AD5-4E01-A04C-FFCE37E7F787}" = Jupiter 2011 Standard
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11
"{543E6ACA-51B7-4283-82F2-57C0582A53C5}" = Windows Live UX Platform Language Pack
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5A0C892E-FD1C-4203-941E-0956AED20A6A}" = APC PowerChute Personal Edition
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6C626E7E-9FD0-4414-8B6A-CE55D4A01045}" = Nero 8 Essentials
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{7B8E0D63-C8FB-4F04-8B3A-029C4707693A}" = HP Deskjet D2600 Printer Driver 14.0 Rel. 5
"{85D4B12C-E234-4915-88BA-A5AEBBE67293}" = DJ_SF_05_D2600_Software_Min
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{9F00D1CA-CA68-4AAE-B76D-22E627088A61}" = ESET Remote Administrator Console
"{9FA93155-472F-4778-87A8-95244FD1535D}" = OLYMPUS Master 2
"{A50DE037-B5C0-4C8A-8049-B0C576B313D1}" = Google+ Auto Backup
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB7B06D2-406D-41A1-82EB-E96D3200E740}" = KONICA MINOLTA magicolor 2590MF Scanner
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Polish
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{ADDBE07D-95B8-4789-9C76-187FFF9624B4}" = CorelDRAW Essential Edition 3
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BCF77577-8D2C-3261-28FD-0F50AA2772D8}" = e-Deklaracje Desktop
"{C83B8B35-C2C4-3302-9A6E-C2AF1A59E8D6}" = Microsoft .NET Framework 4.5.1 (PLK)
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"7-Zip" = 7-Zip 9.10 beta
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop
"Foxit Reader" = Foxit Reader
"Gadu-Gadu" = Gadu-Gadu 7.7
"Google Chrome" = Google Chrome
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{346D3826-6AD5-4E01-A04C-FFCE37E7F787}" = Jupiter 2011 Standard
"InstallShield_{AB7B06D2-406D-41A1-82EB-E96D3200E740}" = KONICA MINOLTA magicolor 2590MF Scanner
"IsoBuster_is1" = IsoBuster 2.7
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.0.0 (Basic)
"KONICA MINOLTA magicolor 2590MF" = KONICA MINOLTA magicolor 2590MF
"LAB-EL LBX" = LAB-EL LBX 1.7.72
"LB486" = LB486 2.64
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.4.1028
"Master Converter_is1" = Master Converter 2.8.3
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Opera 26.0.1656.24" = Opera Stable 26.0.1656.24
"PhotoFiltre" = PhotoFiltre
"Picasa 3" = Picasa 3
"PIT Format 2011_is1" = PIT Format 2011
"PIT Format 2013_is1" = PIT Format 2013
"PITy 2005_is1" = PITy 2005 dla Windows kompilacja:1.0.1.38
"Pity 2008_is1" = Pity 2008
"Pity 2009_is1" = Pity 2009
"PITy 2012_is1" = PITy 2012
"Pity Format 2010_is1" = Pity Format 2010
"PROSet" = Intel(R) Network Connections Drivers
"Przepisy kucharskie" = Przepisy kucharskie
"Samsung SCX-4x21 Series" = Samsung SCX-4x21 Series
"STATGRAPHICS Plus 5.0" = STATGRAPHICS Plus 5.0
"Totalcmd" = Total Commander (Remove or Repair)
"VLC media player" = VLC media player 2.1.3
"Winamp" = Winamp
"WinLiveSuite" = Podstawowe programy Windows Live
"WinRAR archiver" = WinRAR archiver
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google+ Auto Backup" = Google+ Auto Backup
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google+ Auto Backup" = Google+ Auto Backup
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-4057883698-1414104491-491510895-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2014-12-02 07:22:03 | Computer Name = Sobkowiak | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd OLYMPUS Master.exe, wersja 2.3.0.2, sygnatura
 czasowa 0x4b0d15c5, moduł powodujący błąd unknown, wersja 0.0.0.0, sygnatura czasowa
 0x00000000, kod wyjątku 0xc0000005, przesunięcie błędu 0x5f73bb89,  identyfikator
 procesu 0x1314, godzina rozpoczęcia aplikacji 0x01d00e22222809d5.
 
Error - 2014-12-02 07:52:38 | Computer Name = Sobkowiak | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16592, sygnatura
 czasowa 0x544e95a7, moduł powodujący błąd igdumdx32.dll, wersja 8.15.10.2302, sygnatura
 czasowa 0x4d558979, kod wyjątku 0xc0000005, przesunięcie błędu 0x00009754,  identyfikator
 procesu 0x1430, godzina rozpoczęcia aplikacji 0x01d00e2676f86995.
 
Error - 2014-12-02 07:52:42 | Computer Name = Sobkowiak | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16592, sygnatura
 czasowa 0x544e95a7, moduł powodujący błąd igdumdx32.dll, wersja 8.15.10.2302, sygnatura
 czasowa 0x4d558979, kod wyjątku 0xc0000005, przesunięcie błędu 0x00009754,  identyfikator
 procesu 0x16cc, godzina rozpoczęcia aplikacji 0x01d00e2679bdba05.
 
Error - 2014-12-03 02:31:02 | Computer Name = Sobkowiak | Source = Windows Search Service | ID = 3024
Description = Nie można rozpocząć aktualizacji, ponieważ źródła zawartości są niedostępne.
 Napraw błędy i spróbuj przeprowadzić aktualizację ponownie.  Kontekst: aplikacja 
, wykaz SystemIndex 
 
Error - 2014-12-08 05:35:56 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
Error - 2014-12-15 06:27:22 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
Error - 2014-12-16 04:25:30 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
Error - 2014-12-17 03:06:20 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
Error - 2014-12-17 06:17:22 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
Error - 2014-12-17 06:54:36 | Computer Name = Sobkowiak | Source = APC UPS Service | ID = 61456
Description = PowerChute nie komunikuje się z zasilaczem UPS.
 
[ System Events ]
Error - 2014-12-23 02:30:48 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7002
Description = 
 
Error - 2014-12-23 02:30:48 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 2014-12-23 02:32:20 | Computer Name = Sobkowiak | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description = 
 
Error - 2014-12-23 02:35:56 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 02:36:03 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 02:36:40 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 02:48:09 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 02:49:54 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 04:37:52 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
Error - 2014-12-23 05:01:08 | Computer Name = Sobkowiak | Source = Service Control Manager | ID = 7030
Description = 
 
 
< End of report >