OTL Extras logfile created on: 2015-01-03 16:51:17 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = D:\
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17501)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,84 Gb Total Physical Memory | 2,95 Gb Available Physical Memory | 76,90% Memory free
7,68 Gb Paging File | 6,85 Gb Available in Paging File | 89,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 100,08 Gb Total Space | 28,26 Gb Free Space | 28,23% Space Free | Partition Type: NTFS
Drive D: | 598,56 Gb Total Space | 194,69 Gb Free Space | 32,53% Space Free | Partition Type: NTFS
Drive G: | 7,45 Gb Total Space | 5,85 Gb Free Space | 78,50% Space Free | Partition Type: FAT32
 
Computer Name: SADO-KOMPUTER | User Name: Sado | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0495CAF8-AAA1-4E31-9FA1-5F2EC5B71C72}" = lport=445 | protocol=6 | dir=in | app=system | 
"{092735F3-FD12-46B2-841F-5F56680DA008}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{11740A91-6782-4602-8F5D-E35A67FC822F}" = lport=137 | protocol=17 | dir=in | app=system | 
"{2E9D95C6-F247-40FF-8C7E-3CFB3508370F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{33365211-15DB-4BAF-B561-80B77AD51534}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | 
"{4FC5BAF4-A9B0-4E93-BA66-B902D13447B3}" = lport=139 | protocol=6 | dir=in | app=system | 
"{5EE2B86B-0B68-4BC6-94A2-3C3DFDDE38F8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{630B1C0B-7D1D-4331-B894-A930AB3B846D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{6686C11A-5DEA-4BBF-9519-C1D2F4709B4D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{8D9D476C-4DC5-4833-8140-16D10CE04946}" = rport=445 | protocol=6 | dir=out | app=system | 
"{8FCCAF9F-D6D2-42A4-81BD-B994F43B270F}" = lport=50248 | protocol=6 | dir=in | name=autodesk content service | 
"{A0EF0063-718E-4077-85AB-70D800EDC08D}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{A3D2FD12-BB6F-4399-A01B-93845F319080}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B21FAF01-90B3-4C13-B5DB-005DAC8B0E27}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{B2FC0B88-27B0-4F2E-937C-D04D85E792B7}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{B405F3C6-03AE-4341-90E7-A251120C6770}" = rport=138 | protocol=17 | dir=out | app=system | 
"{B5548183-E473-4CFA-A1CB-81AA59AC94D5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C2ABECA7-FDF4-4E6E-AFB6-C29B38DAA6C0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C50488E8-AD32-4542-90FC-774544CDC500}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C63CB25E-0C8A-4324-8086-2662B99DF3C4}" = lport=138 | protocol=17 | dir=in | app=system | 
"{C9D05C72-CFC9-4BEB-9577-EE3AF6EF4A7E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D5E7C57D-25CC-4326-AF63-CE668A1502AE}" = rport=139 | protocol=6 | dir=out | app=system | 
"{F35E6DE5-988C-452B-88B9-BF324FBFA005}" = rport=137 | protocol=17 | dir=out | app=system | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{036203C2-23F6-4E0D-BC98-10B1B059F2EB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{07AE185B-6065-438F-911C-032FA45C458E}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 
"{1628C21C-0A4A-4C0A-91F4-C382314A0CDB}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{1836951D-6E8E-4A4C-8907-1CDB637EFB52}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{19158487-4E6B-4F6C-AE01-0E10B34DC919}" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"{1B3F44D2-3F67-494F-B9FC-452C079183FE}" = protocol=17 | dir=in | app=c:\users\sado\appdata\local\akamai\netsession_win.exe | 
"{34DCF7F3-E378-4AB2-AE2C-E7A78D78E6D3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{366C202A-FECA-4F18-B581-49D8B94CDF8D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{3A7D25BB-5D94-4E10-AF79-4BE063221AE5}" = protocol=17 | dir=in | app=d:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"{3F27AED9-CE12-496E-8780-63858A89BE42}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{4116129A-4B24-4306-9B4A-D46B7DB14BC3}" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"{41ACB4A5-95FD-49D6-B0B3-B020868D0EB0}" = protocol=17 | dir=in | app=d:\gry\mass effect 3\mass effect 3\binaries\win32\masseffect3.exe | 
"{48278EF4-9C18-430D-A3E8-01B9337FD463}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 
"{4E8850D4-0158-46A0-8231-D956E72CFE92}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 
"{5DA1A8D8-78CE-43EA-886A-ABADE05575B5}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | 
"{5DCAB638-04AA-4F5C-A3D8-382BD94C5A9A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5E40DF5E-8591-4575-95EC-827853B74908}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{6493880F-FE4F-4223-9A03-7A0FC8E708B0}" = protocol=6 | dir=in | app=d:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"{66993A5F-7C8D-4CD2-9691-CCEF22FD8442}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe | 
"{6836C284-EF56-4190-82F9-A761481F2116}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 
"{711FA744-DB97-40B0-BF5C-DBF30CDFD046}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\plants vs. zombies\plantsvszombies.exe | 
"{71672936-7FE6-4D87-A55B-AB5FB950D850}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | 
"{7CFFDE10-6CAB-464D-9153-4C7389F7B0E2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{802B7C4E-1D1B-43A2-B33E-B4D28DD7DABF}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{850F544D-EA23-4BAD-9264-058A049DE997}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{87E1C246-D437-494A-BD09-3F2B08C40E96}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{8EEF2D67-7C2B-4101-8486-E119C08635FD}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 
"{9605CBF8-A8AB-4B46-BD73-1111A77D7B00}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 
"{992F39C3-36CE-4317-8708-0C51B01C318F}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 
"{9F853DE5-433B-4A64-A71B-6FFAF3FAF8D5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{A16C62A3-4378-4D8B-A513-856776ABC37C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{A4D2E3B3-F8CE-4DB3-AD8B-33D7C3E55406}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 
"{A4E7FDAD-8C4C-44C0-A82E-D72BFA01557D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{A88426DF-B700-4FF5-8FF2-5408801D8869}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 
"{AE980A68-78DC-4177-88AC-FBE734FE1906}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{AF9F654A-6688-4546-B917-FC5ED162E122}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{B4F4FE3D-678D-483F-891D-7408BE460E10}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 
"{B52D26D7-8C7A-412D-9508-E3F665C8708C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B8D81945-4C41-47D8-B0B3-0337AB30878D}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 
"{BBF10233-6B4A-4DB2-852D-A72608E6AE9D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C4C292D3-B4B5-499C-A139-12DEB036DD3F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{C76801DD-2B7F-4562-881C-FE70BB6DDD02}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{CB7F4D51-D508-46A5-B0DF-61D8ED0262DA}" = protocol=6 | dir=in | app=d:\gry\mass effect 3\mass effect 3\binaries\win32\masseffect3.exe | 
"{D893B5BE-4219-4DAB-90AE-6CD8125C75B7}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | 
"{DCF8FEB5-6E1E-4A77-8BE6-34AE8DE1C72B}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 
"{DF5CD0AA-657D-4EB6-91DB-AA36EAD9F812}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 
"{E12C0BE9-999F-4FB3-BE59-0D5BA1F56CE5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{E55A978C-7D7D-46A6-A37E-62CDC8736EF6}" = protocol=6 | dir=out | app=system | 
"{E646548A-77AC-4CEC-B1DE-882E84F6E056}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 
"{EA272CA5-88B6-4BE0-94BB-12A9CD0ECF39}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe | 
"{F3DC748C-8C1C-4534-B29D-C39829A444B1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{F6FA1D06-980D-40DA-A90D-FBB867F8DE91}" = protocol=6 | dir=in | app=c:\users\sado\appdata\local\akamai\netsession_win.exe | 
"{F8D56A19-7744-4CED-9330-750B828D2B32}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{FAADBA44-7518-4192-8F18-69AAD52B02B5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{FBB49DB5-FBED-4ED8-BF6C-922B6025E669}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FFD62523-0347-43D4-BA12-F108A4594DE4}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"TCP Query User{93D46F68-2B05-4BD9-BABE-EE94B1234F7D}C:\users\sado\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\sado\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{A8F9D4BC-572F-4ACB-AB66-038746C792CD}D:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe" = protocol=6 | dir=in | app=d:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"TCP Query User{AD4E0AB1-C84B-43AA-B15C-F0A7893BC746}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"TCP Query User{CE8F9156-F770-4429-8805-8D6E6DC27E1E}C:\windows\syswow64\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"UDP Query User{0DCDD84F-203E-48EB-A2D9-FF33FBBD7878}C:\users\sado\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\sado\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{366C117F-ED8F-4D5A-9424-7A5102B42B5C}D:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe" = protocol=17 | dir=in | app=d:\gry\hirołsy 3\heroes of might and magic iii - zlota edycja\heroes3.exe | 
"UDP Query User{644C8B7D-9095-436E-ADAE-D2650551D4C2}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"UDP Query User{E6010DE9-A535-4584-BB13-1CFB548110EF}C:\windows\syswow64\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08257488-8829-46D4-892A-BEC4B4785B95}" = AVG 2014
"{0BB716E0-1500-0210-0000-097DC2F354DF}" = Autodesk Revit Interoperability for Inventor 2015
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{266597A9-1964-0000-1045-DCBF2B69166B}" = Autodesk Vault Basic 2015 (Client) Polish Language Pack
"{2F7441CB-A646-41F1-B1CB-518AB311138B}" = Eco Materials Adviser for Autodesk Inventor 2015 (64-bit)
"{31ABA3F2-0000-1033-0102-111D43815377}" = Autodesk ReCap
"{31ABA3F2-0010-1033-0102-111D43815377}" = Autodesk ReCap Language Pack-English
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{45F1F774-38B4-3CC3-BAAF-051E6D19E48E}" = Microsoft .NET Framework 4.5.1 (PLK)
"{4710662C-8204-4334-A977-B1AC9E547819}" = Broadcom Card Reader Driver Installer
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}" = Autodesk 360
"{5783F2D7-D001-0000-0102-0060B0CE6BBA}" = AutoCAD 2014 — Polski (Polish)
"{5783F2D7-D001-0415-1102-0060B0CE6BBA}" = AutoCAD 2014 Language Pack – Polski (Polish)
"{5783F2D7-D001-0415-2102-0060B0CE6BBA}" = AutoCAD 2014 — Polski (Polish)
"{5783F2D7-E028-0409-0100-0060B0CE6BBA}" = DWG TrueView 2015 - English
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6199B534-A1B6-46ED-873B-97B0ECF8F81E}" = Intel® Trusted Connect Service Client
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{7F4DD591-1964-0001-0000-7107D70F3DB4}" = Autodesk Inventor Professional 2015
"{7F4DD591-1964-0001-1045-7107D70F3DB4}" = Autodesk Inventor Professional 2015 Language Pack - Polski (Polish)
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{8F221493-6D10-4C81-9BEE-3C5DD53B94F6}" = AVG 2014
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
"{90120064-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x64)
"{90F60409-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) English
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski)
"{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}" = WIDCOMM Bluetooth Software
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 307.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 307.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.0613
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B46DECD1-1964-4EF1-0000-22D71E81877C}" = Autodesk Inventor Content Center Libraries 2015 (Desktop Content)
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom NetLink Controller
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{CF526A26-1964-0000-0000-02E95019B628}" = Autodesk Vault Basic 2015 (Client)
"AutoCAD 2014 — Polski (Polish)" = Autodesk AutoCAD 2014 — Polski (Polish)
"Autodesk Inventor Professional 2015" = Autodesk Inventor Professional 2015 - Polski (Polish)
"Autodesk Inventor Professional 2015_19001" = Inventor 2015 Heartbleed Hotfix Installer (INV19001)
"Autodesk ReCap" = Autodesk ReCap
"Autodesk Revit Interoperability for Inventor 2015" = Autodesk Revit Interoperability for Inventor 2015
"Autodesk Vault Basic 2015 (Client)" = Autodesk Vault Basic 2015 (Client)
"AVG" = AVG 2014
"DWG TrueView 2015 - English" = Autodesk DWG TrueView 2015 - English
"GIMP-2_is1" = GIMP 2.8.14
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{153DB567-6FF3-49AD-AC4F-86F8A3CCFDFB}" = Autodesk Design Review 2013
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 3.0.4
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 60
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{427F733F-4D6C-45BC-9324-EB743104C321}" = Autodesk Material Library 2015
"{46E776B9-37DE-4B71-8DF2-F4C75112CA27}_is1" = "Mass Effect 3"
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11
"{4FBC9635-AC56-4378-8FDE-C4D3ED072681}" = Autodesk Material Library Low Resolution Image Library 2015
"{51BF3210-B825-4092-8E0D-66D689916E02}" = Autodesk Material Library Base Resolution Image Library 2014
"{62F029AB-85F2-0000-866A-9FC0DD99DDBC}" = Autodesk Content Service
"{62F029AB-85F2-0001-866A-9FC0DD99DDBC}" = Autodesk Content Service Language Pack
"{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}" = NVIDIA PhysX
"{644E9589-F73A-49A4-AC61-A953B9DE5669}" = SketchUp Import for AutoCAD 2014
"{644F9B19-A462-499C-BF4D-300ABC2A28B1}" = Autodesk Material Library 2014
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6DA2B636-698A-3294-BF4A-B5E11B238CDD}" = Microsoft Visual C++ 2008 x64 MFC Runtime 9.0.30729
"{758A4269-70E5-4B11-B419-F692882408A9}" = Gothic
"{7682DFED-23C6-44C9-B9FD-109E0B630277}" = Secure Download Manager
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8A470330-70B2-49AD-86AF-79885EF9898A}" = FARO LS 1.1.501.0 (64bit)
"{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}" = Microsoft Visual C++ 2008 x64 OpenMP Runtime 9.0.30729
"{8F196892-666A-4A40-8587-6AE38F78A5C2}" = FARO LS 1.1.501.0
"{8FE324B0-B934-4D68-BAB5-DE2136036237}" = Configurator 360 addin
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}" = Autodesk Material Library Base Resolution Image Library 2015
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.10) - Polish
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C070121A-C8C5-4D52-9A7D-D240631BD433}" = Autodesk App Manager
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}" = Microsoft Visual C++ 2008 x64 ATL Runtime 9.0.30729
"{C897D9EC-13C6-4A22-ABF7-33F2126A7DB6}" = Autodesk Download Manager
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E4D4242C-FC14-4B4F-B1D9-6760D8C241D5}" = Mockup 360 Addin 2015
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}" = Microsoft Visual C++ 2008 x64 CRT Runtime 9.0.30729
"{F732FEDA-7713-4428-934B-EF83B8DD65D0}" = Autodesk Featured Apps
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"AIDA64 Extreme_is1" = AIDA64 Extreme v4.30
"Autodesk Application Manager" = Autodesk Application Manager
"Autodesk Content Service" = Autodesk Content Service
"Autodesk Design Review 2013" = Autodesk Design Review 2013
"AVG Web TuneUp" = AVG Web TuneUp
"Battlelog Web Plugins" = Battlelog Web Plugins
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2013-08-01
"DAEMON Tools Lite" = DAEMON Tools Lite
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"MEGAsync" = MEGAsync 1.0.22
"Mozilla Firefox 34.0.5 (x86 pl)" = Mozilla Firefox 34.0.5 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"Steam" = Steam
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR 5.00 (32-bit)
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2014-12-21 17:36:03 | Computer Name = Sado-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
 sygnatura czasowa: 0x5475dd5d  Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
 34.0.5.5443, sygnatura czasowa: 0x5475d664  Kod wyjątku: 0x80000003  Przesunięcie błędu:
 0x00001425  Identyfikator procesu powodującego błąd: 0x36cc  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01d01d39339c7977  Ścieżka aplikacji powodującej błąd: C:\Program
 Files (x86)\Mozilla Firefox\plugin-container.exe  Ścieżka modułu powodującego błąd:
 C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll  Identyfikator raportu: 5c5bab85-8959-11e4-8c12-b888e3abdf29
 
Error - 2014-12-21 18:30:51 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
Error - 2014-12-21 18:31:35 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
Error - 2014-12-21 19:55:23 | Computer Name = Sado-Komputer | Source = WinMgmt | ID = 10
Description = 
 
Error - 2014-12-21 20:35:06 | Computer Name = Sado-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 34.0.5.5443,
 sygnatura czasowa: 0x5475dd5d  Nazwa modułu powodującego błąd: mozalloc.dll, wersja:
 34.0.5.5443, sygnatura czasowa: 0x5475d664  Kod wyjątku: 0x80000003  Przesunięcie błędu:
 0x00001425  Identyfikator procesu powodującego błąd: 0x1124  Godzina uruchomienia aplikacji
 powodującej błąd: 0x01d01d7a79c7e28a  Ścieżka aplikacji powodującej błąd: C:\Program
 Files (x86)\Mozilla Firefox\plugin-container.exe  Ścieżka modułu powodującego błąd:
 C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll  Identyfikator raportu: 5ff0f54f-8972-11e4-93c0-b888e3abdf29
 
Error - 2014-12-22 06:09:59 | Computer Name = Sado-Komputer | Source = WinMgmt | ID = 10
Description = 
 
Error - 2014-12-22 06:11:16 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
Error - 2014-12-22 06:11:51 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
Error - 2014-12-22 11:19:48 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
Error - 2014-12-22 11:20:17 | Computer Name = Sado-Komputer | Source = MsiInstaller | ID = 11310
Description = 
 
[ OSession Events ]
Error - 2013-11-21 17:23:33 | Computer Name = Sado-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 599
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 2013-11-21 17:27:49 | Computer Name = Sado-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 247
 seconds with 180 seconds of active time.  This session ended with a crash.
 
Error - 2013-11-28 01:04:09 | Computer Name = Sado-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1435
 seconds with 720 seconds of active time.  This session ended with a crash.
 
Error - 2013-11-28 01:05:56 | Computer Name = Sado-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 12
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 2013-11-28 18:13:26 | Computer Name = Sado-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 3147
 seconds with 1260 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 2015-01-03 11:37:14 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:20 | Computer Name = Sado-Komputer | Source = DCOM | ID = 10005
Description = 
 
Error - 2015-01-03 11:37:20 | Computer Name = Sado-Komputer | Source = DCOM | ID = 10005
Description = 
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:37:21 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
Error - 2015-01-03 11:44:46 | Computer Name = Sado-Komputer | Source = Service Control Manager | ID = 7001
Description = Usługa Usługa listy sieci zależy od usługi Rozpoznawanie lokalizacji
 w sieci, której nie można uruchomić z powodu następującego błędu:   %%1068
 
 
< End of report >