OTL Extras logfile created on: 13/05/2012 00:39:23 - Run 4
OTL by OldTimer - Version 3.2.42.3     Folder = C:\Users\JWMC\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
3.97 Gb Total Physical Memory | 2.49 Gb Available Physical Memory | 62.69% Memory free
4.94 Gb Paging File | 3.58 Gb Available in Paging File | 72.55% Paging File free
Paging file location(s): c:\pagefile.sys 1000 8000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 282.49 Gb Total Space | 100.08 Gb Free Space | 35.43% Space Free | Partition Type: NTFS
 
Computer Name: JWMC_SHADOW | User Name: JWMC | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06F00EE0-A69A-4F06-B54A-8883F8329B06}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{0989B104-FE8F-43AF-ACCC-13B40C1AB80D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{0DC72D37-0666-4D60-9C91-4C9680CE10AD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{1D0CB43A-87D0-40D6-ACE8-39AE4297F853}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1F33FBC3-7439-444C-9048-A8DDD2384B94}" = lport=7777 | protocol=17 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{201955BC-347F-44AE-9FA5-A12BA845C560}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{2E85B94A-4E6B-492E-B9DE-47B9F102211E}" = rport=139 | protocol=6 | dir=out | app=system | 
"{309BF8DE-3296-4916-B127-38E7B75D681D}" = lport=138 | protocol=17 | dir=in | app=system | 
"{39994923-E164-48A8-BDF3-7B1405289231}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{3E73C65C-30D2-4FF7-96F1-57D3ABF02DB7}" = lport=554 | protocol=6 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{425490DC-FB30-4186-B643-53AD93110DAA}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{5034C125-16A8-48E2-8B00-3B24A26D0C0C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{52E596FD-C3F2-4D69-80BA-2F5A04D6E49F}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{53561259-E029-4952-A735-CA52681E6A65}" = lport=7777 | protocol=17 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{56440053-8EBB-4D0E-9142-ACC06E0F1E22}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{59F5C285-DBD5-4BCF-900B-C71782D02258}" = lport=137 | protocol=17 | dir=in | app=system | 
"{6B328AD3-99F4-41EB-83F7-253087440E40}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{6C6EEBAF-19BF-4B75-957F-9695D2ABE7F5}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{74613365-FE17-4156-8E76-DD18734E0043}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{78537AF6-3E5C-46DF-AF08-049897AB3B6B}" = lport=139 | protocol=6 | dir=in | app=system | 
"{7F7EC5B7-9538-47DC-A978-A957B3D57FF2}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{9A0A8EAE-B65F-4B2F-8612-BED033280880}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{ABEB8CD3-1ED4-40FE-AD52-D9BD0CC018A9}" = lport=16823 | protocol=17 | dir=in | name=bitcomet 16823 udp | 
"{AD4D5234-0B9A-4FB1-BED4-5404DF29DA07}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{ADB62522-6233-4E37-9A00-B11A75ABECD0}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{AFBD230F-FF3C-40D6-AF7C-5C2FC9DCF350}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{B2D81E61-4AEF-43FB-9AEF-F8C0B8E9B72B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{B3F2B712-9C83-471E-96C5-6BB6FAE3A9A1}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{B7204CF6-14AB-48C6-97D6-F33204AAD0B8}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{B7DDEDAF-B007-4701-B2A1-A2639218232D}" = rport=137 | protocol=17 | dir=out | app=system | 
"{C1896DF3-59D8-44C5-B3EF-BF27810E2462}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{C277FCCA-2043-43D4-BD77-4A31D918F441}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C2B14F46-FF82-4C51-8657-2ACB2747D746}" = rport=445 | protocol=6 | dir=out | app=system | 
"{C3524B3A-DCD5-4FC1-954D-ADEA490BB61D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C3B33CF3-AEC8-428E-8CFB-A2A1C6ACB5D4}" = rport=138 | protocol=17 | dir=out | app=system | 
"{CA84B5E0-B586-4444-AFF1-C0FC9776E066}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{CCABE462-DFE7-4ED0-94CE-9E63B8DDC4A0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{CCE2C726-19AC-487D-BD91-CD9B5FD666FA}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{CD7C71C7-DB51-46CF-ADA7-25C6887B4B5F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{CFDE25AD-A57F-4D43-9DDA-4CBD1379CA2D}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{DA5CC488-3C5E-4775-819B-93526CDC1105}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{DC587123-69D8-42E0-B384-DCA3DBF458CB}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{DCC2B6A5-6793-4A99-83C0-6131EC1FC12F}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{E3A43B40-D91C-409E-A7C9-CA2984B25791}" = lport=445 | protocol=6 | dir=in | app=system | 
"{EAB9E021-A982-4828-9722-3479353138F0}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{FBF6A972-F76D-4DF8-B445-977D64ED5B79}" = lport=554 | protocol=6 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{FDEAB4C1-0876-4CF8-8785-94B3973CF6FC}" = lport=16823 | protocol=6 | dir=in | name=bitcomet 16823 tcp | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0561A5A9-95D9-4D18-8B98-02023C6094C8}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{0BFEBAA2-DCA8-42FF-9C13-65C862555A45}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{0F9CF50D-DBC2-46EF-9F5B-F40C835ABC6E}" = protocol=6 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{13274F9C-6D59-4B5E-9354-95F8970FA2EE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{17FBA57E-B9E2-4DE2-8FE8-91BC25AFC1D1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{198959F5-F9F1-4C46-8872-FFCDC9951DB9}" = protocol=6 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{19D8ECBA-0471-4703-8CAA-18817B457F85}" = protocol=6 | dir=out | svc=mcx2svc | app=c:\windows\system32\svchost.exe | 
"{1A96F2FB-B44B-4D9A-B502-AB110323E06B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{1FCDD88D-0185-4E28-BA6C-1F81F0DFE927}" = protocol=17 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\backupsvc.exe | 
"{262D82E2-6132-4877-9ACD-0410C0496A06}" = protocol=6 | dir=out | app=c:\windows\ehome\mcrmgr.exe | 
"{298158A4-A79D-4D80-B9FF-8F561425CD3E}" = protocol=6 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet.exe | 
"{2FFB359D-F4CA-4C2D-87F7-A00A017ABA3B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{312C72EB-5FCF-4786-8AE4-32CE3C4AAA9D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{36579D56-F9A6-4AB4-B74D-DAE7F0012FEE}" = dir=in | app=c:\program files (x86)\acer\acer vcm\vc.exe | 
"{3F884155-9F18-4BDF-B09F-7A69F5E20CCF}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{415316C2-EB90-4A7E-9C55-1E9CAD3315E5}" = protocol=17 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet_x64.exe | 
"{4624CAE8-D8FA-4DAD-8907-077D637CDB97}" = protocol=17 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{4CF61330-04EF-41BB-976E-60DC74F7EB0C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4E5D6154-1427-43D2-909B-1383BB004695}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{561AA3FE-F5D4-4FBE-ACBC-FF8A4453D348}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{5831B9A9-31EE-410C-99FC-DBE61647FC81}" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2.bin | 
"{5A1DE98A-8ED9-4FE9-BC1E-E7887F318F24}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{5C072F1D-BD19-4057-AD7D-CDF3D8A32790}" = protocol=6 | dir=out | app=c:\windows\ehome\mcrmgr.exe | 
"{654C4470-B722-4A9C-AA97-62B5DC137D77}" = protocol=6 | dir=out | app=c:\windows\ehome\mcx2prov.exe | 
"{6AD699C0-298F-44B6-8EE8-9436D5347E4B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{6F395BA2-41BA-46B0-88F7-27FDC99E78AF}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{7082C328-372E-42B8-8436-40DC2307FD1B}" = protocol=6 | dir=out | svc=mcx2svc | app=c:\windows\system32\svchost.exe | 
"{72C91EDA-23A1-42E9-AA56-F42EFDE6FEBA}" = protocol=6 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\backupsvc.exe | 
"{7639C81B-5B12-46AA-A729-0C802278E5C1}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | 
"{7900154B-41FC-48A6-A5F3-87EC7D8E7831}" = protocol=6 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe | 
"{7CC17095-E6F3-4878-AC6C-15C598CB2CE8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{851AE5B7-C688-4942-BF06-205B9ADD45AF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{97FF1ED7-ACC4-4BB7-ABF4-2379882E80A3}" = protocol=17 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe | 
"{99726A74-27A2-4569-87BA-94813ECDE725}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9B6DBD37-7A8F-4202-927C-F883DBD143E5}" = protocol=17 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet.exe | 
"{9E230FA8-A103-423E-B92F-304FD929B785}" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2.bin | 
"{A96DD679-9845-4440-A0D0-FD760A66C683}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{AD058833-8DE1-478C-9C95-E9E74F2ABDA2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B5CB4E59-B2F1-4AA2-94D8-A51CB3360D39}" = protocol=6 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{B7197331-DC06-4B69-9DC2-3B355E1E61C6}" = protocol=6 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{CD15CD60-41BF-475A-89B0-7EF26FFB8914}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{D193EED0-D40F-4D23-95AF-C7E443718348}" = protocol=6 | dir=out | app=c:\windows\ehome\mcx2prov.exe | 
"{D4FE2168-3530-43E4-89DA-7837637616ED}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E18C6FCE-30A0-4EEF-A79C-DDC19E6422F3}" = protocol=6 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet_x64.exe | 
"{E334AAE0-806E-47A7-B251-3AA7BBE0F2D4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{E78CF773-92C2-45FB-AF5C-37905AA02417}" = protocol=17 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{EDF141D2-314B-445D-9045-7ED7B24C94C0}" = protocol=6 | dir=out | app=system | 
"{EF883659-EF95-4D5E-9767-12A61E65B61A}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{EFD0478D-B958-4A5E-9B4A-BF3B196AB5D5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{F3CA70EE-F4DB-4CF4-957C-F9345E1696E3}" = dir=in | app=c:\program files (x86)\acer\acer vcm\rs_service.exe | 
"{FC80E782-CD0C-48D4-8F9A-B565FD170A3A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"TCP Query User{03144BD8-ECE0-449E-82A8-96934E2EA0F3}C:\program files (x86)\metin2\metin2client.bin" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin | 
"TCP Query User{06114985-4758-4A1D-9230-E393B42EE3EB}C:\program files (x86)\metin2\metin2client.bin" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin | 
"TCP Query User{113521E6-D55E-426E-91E1-B77D276650A5}C:\program files (x86)\metin2\metin2.bin" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2.bin | 
"TCP Query User{3C2279C7-464B-430A-94A0-F34D53A522EC}C:\program files (x86)\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet.exe | 
"TCP Query User{3EC63220-564F-4D7A-904D-0580D030C1CA}C:\program files (x86)\runes of magic\launcher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\runes of magic\launcher.exe | 
"TCP Query User{4545F49D-5425-477D-B600-866022EE8288}C:\users\jwmc\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\jwmc\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{4A33A79A-BCA3-4C66-8D92-4149ED90A815}C:\program files (x86)\runes of magic\launcher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\runes of magic\launcher.exe | 
"TCP Query User{531B4B1A-A03B-49ED-8AED-AD7D926A81A0}C:\program files (x86)\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\program files (x86)\runes of magic\client.exe | 
"TCP Query User{7BE04614-D1D8-40CC-964B-6EE8D488F421}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | 
"TCP Query User{91B5B607-1EB9-4773-B1E0-98DD5C642D95}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"TCP Query User{983B43FB-5822-421D-BCFA-8F94CFF8EAB0}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"TCP Query User{AFAE176E-F7D1-4BB6-A33F-0E59FFAF187C}C:\users\jwmc\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\jwmc\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{D7E9DE3C-2D5E-4661-B2D5-F12C49F986FF}C:\program files (x86)\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\program files (x86)\runes of magic\client.exe | 
"TCP Query User{D923EDCC-2A23-4CFB-BB7F-95AE8760A39C}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | 
"TCP Query User{E8206C91-24A8-45BA-B89B-9562DB43CC56}C:\Program Files (x86)\Metin2\metin2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2.exe | 
"UDP Query User{2CD876A2-40E4-403D-B313-982219ABEB9D}C:\program files (x86)\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\program files (x86)\runes of magic\client.exe | 
"UDP Query User{3A37B4AD-2E7F-417A-A1D7-F4EA79C2D75C}C:\program files (x86)\runes of magic\launcher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\runes of magic\launcher.exe | 
"UDP Query User{5AF13C26-D50C-40AD-AC0E-405C3E432FCF}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"UDP Query User{613C23A4-2748-4BC1-A136-B899676F5151}C:\program files (x86)\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitcomet\bitcomet.exe | 
"UDP Query User{61DA756B-67A1-476D-AF66-A51BFAE689BD}C:\program files (x86)\metin2\metin2.bin" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2.bin | 
"UDP Query User{6248180C-0E69-49E0-B502-6C995E782CA2}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | 
"UDP Query User{65B6CC40-44A1-4D41-B6E0-BB5F379D010C}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | 
"UDP Query User{789AADB3-282C-4EE5-8E40-B19E5AAFF2D8}C:\program files (x86)\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\program files (x86)\runes of magic\client.exe | 
"UDP Query User{9F334C70-CED3-4F9A-8ECA-1E0C1B229715}C:\users\jwmc\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\jwmc\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{A844DF33-7A77-4004-B2B2-233791E69A0C}C:\program files (x86)\metin2\metin2client.bin" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin | 
"UDP Query User{AAA4A302-30F5-41EF-AF95-E015A611C977}C:\program files (x86)\metin2\metin2client.bin" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin | 
"UDP Query User{B5108E54-4F43-48C2-88CB-D0C1BEE25F47}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | 
"UDP Query User{B604844D-985C-40B0-8AB5-37E78F6C282C}C:\users\jwmc\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\jwmc\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{BFF4AA12-137B-457A-8CD9-7D3ABAFC497A}C:\Program Files (x86)\Metin2\metin2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2.exe | 
"UDP Query User{F5222162-6E0F-46D1-AD22-0D1A7753C9C6}C:\program files (x86)\runes of magic\launcher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\runes of magic\launcher.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{3ED4AD02-F631-4A4C-AAC8-2325996E5A56}" = Microsoft IntelliPoint 8.1
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 301.27
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.12.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{C616FD4F-11F5-11E0-A38F-0013D3D69929}" = Vegas Pro 10.0 (64-bit)
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"CCleaner" = CCleaner
"EPSON SX130 Series" = Odinstaluj drukarkę EPSON SX130 Series
"Microsoft IntelliPoint 8.1" = Microsoft IntelliPoint 8.1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1111706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0
"{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83217004FF}" = Java(TM) 7 Update 4
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{27996809-446F-7261-6C69-6B654C656F6E}" = 
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer PowerSmart Manager
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{67E03279-F703-408F-B4BF-46B5FC8D70CD}" = Microsoft Works
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1" = Auslogics BoostSpeed
"{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Backup Manager Basic
"{7760D94E-B1B5-40A0-9AA0-ABF942108755}" = Acer Crystal Eye Webcam
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Polish
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E21DC406-9F79-4094-AFA5-E66154F7D28C}" = Vodafone Mobile Connect Lite
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1" = Uniblue SpeedUpMyPC
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F86B5FF0-E0C0-41AA-9FD3-5E9090FED323}" = Mumble 1.2.3
"{fc8208f2-b1c1-4253-9e89-d518e983b7bb}" = Ad-Aware Antivirus
"{FCC662D1-01A8-4034-B67D-2AD91F723154}" = Acer Arcade Instant On
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"Acer Screensaver" = Acer ScreenSaver
"Acer Welcome Center" = Welcome Center
"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Akamai" = Akamai NetSession Interface Service
"avast" = avast! Free Antivirus
"Avira AntiVir Desktop" = Avira Free Antivirus
"BitComet" = BitComet 1.29
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"EPSON Scanner" = EPSON Scan
"foobar2000" = foobar2000 v1.0.3
"Gadu-Gadu 10" = Gadu-Gadu 10
"GridVista" = Acer GridVista
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
"InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Acer Backup Manager
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.61.0.1400
"Metin2_is1" = Metin2
"mIRC" = mIRC
"NapiProjekt_is1" = NapiProjekt 1.0.6.9
"Smart Defrag 2_is1" = Smart Defrag 2
"The KMPlayer" = The KMPlayer (remove only)
"Totalcmd" = Total Commander (Remove or Repair)
"WinRAR archiver" = WinRAR archiver
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-640910136-900881898-1062532648-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 12/11/2011 11:41:15 | Computer Name = JWMC_shadow | Source = McLogEvent | ID = 5046
Description = 
 
Error - 12/11/2011 11:41:33 | Computer Name = JWMC_shadow | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 12/11/2011 11:44:24 | Computer Name = JWMC_shadow | Source = BugSplat | ID = 1
Description = 
 
Error - 12/11/2011 14:22:57 | Computer Name = JWMC_SHADOW | Source = Winlogon | ID = 4005
Description = Proces usługi logowania systemu Windows został nieoczekiwanie zakończony.
 
Error - 12/11/2011 14:23:29 | Computer Name = JWMC_SHADOW | Source = McLogEvent | ID = 5046
Description = 
 
Error - 12/11/2011 14:23:37 | Computer Name = JWMC_SHADOW | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 12/11/2011 14:27:25 | Computer Name = JWMC_SHADOW | Source = McLogEvent | ID = 5046
Description = 
 
Error - 12/11/2011 14:27:47 | Computer Name = JWMC_SHADOW | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 13/11/2011 05:23:39 | Computer Name = JWMC_shadow | Source = BugSplat | ID = 1
Description = 
 
Error - 13/11/2011 15:00:02 | Computer Name = JWMC_shadow | Source = Windows Backup | ID = 4103
Description = 
 
[ Media Center Events ]
Error - 13/04/2012 16:38:57 | Computer Name = JWMC_shadow | Source = MCUpdate | ID = 0
Description = 21:38:57 - Failed to retrieve ClientUpdate (Error: The underlying 
connection was closed: An unexpected error occurred on a receive.)  
 
Error - 13/04/2012 16:40:01 | Computer Name = JWMC_shadow | Source = MCUpdate | ID = 0
Description = 21:40:00 - Failed to retrieve MCESpotlight (Error: The underlying 
connection was closed: An unexpected error occurred on a receive.)  
 
Error - 13/04/2012 16:41:03 | Computer Name = JWMC_shadow | Source = MCUpdate | ID = 0
Description = 21:40:21 - Failed to retrieve MCEClientUX (Error: The underlying connection
 was closed: An unexpected error occurred on a receive.)  
 
Error - 13/04/2012 16:41:37 | Computer Name = JWMC_shadow | Source = MCUpdate | ID = 0
Description = 21:41:21 - Failed to retrieve Broadband (Error: The underlying connection
 was closed: An unexpected error occurred on a receive.)  
 
Error - 13/04/2012 16:43:05 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 301
Description = 
 
Error - 29/04/2012 19:44:16 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 800
Description = 
 
Error - 29/04/2012 19:51:43 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 800
Description = 
 
Error - 30/04/2012 13:15:01 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 800
Description = 
 
Error - 30/04/2012 13:28:03 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 800
Description = 
 
Error - 01/05/2012 11:31:34 | Computer Name = JWMC_shadow | Source = Microsoft-Windows-Media Center Extender | ID = 800
Description = 
 
[ System Events ]
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 17:49:37 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 19:39:19 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 19:39:19 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 19:39:28 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
Error - 12/05/2012 19:39:28 | Computer Name = JWMC_shadow | Source = Service Control Manager | ID = 7001
Description = Usługa Menedżer połączeń usługi Dostęp zdalny zależy od usługi Telefonia,
 której nie można uruchomić z powodu następującego błędu:   %%1058
 
 
< End of report >