OTL Extras logfile created on: 2012-07-25 14:30:53 - Run 3 OTL by OldTimer - Version 3.2.54.1 Folder = H:\2004 - Street's Disciple Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1.25 Gb Total Physical Memory | 0.76 Gb Available Physical Memory | 61.07% Memory free 1.48 Gb Paging File | 1.21 Gb Available in Paging File | 81.92% Paging File free Paging file location(s): c:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 13.37 Gb Total Space | 2.90 Gb Free Space | 21.68% Space Free | Partition Type: FAT32 Drive D: | 29.90 Gb Total Space | 0.80 Gb Free Space | 2.66% Space Free | Partition Type: NTFS Drive E: | 31.25 Gb Total Space | 7.04 Gb Free Space | 22.52% Space Free | Partition Type: NTFS Drive H: | 7.40 Gb Total Space | 4.63 Gb Free Space | 62.49% Space Free | Partition Type: FAT32 Computer Name: NAMERTY-A29A0E3 | User Name: Dom | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l .txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-2000478354-1214440339-725345543-1003\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- E:\ilustrator\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- E:\Office\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "FirewallDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "1700:TCP" = 1700:TCP:*:Enabled:MioNet Remote Drive Access "1641:TCP" = 1641:TCP:*:Enabled:MioNet Remote Drive Verification "7330:TCP" = 7330:TCP:*:Enabled:BitComet 7330 TCP "7330:UDP" = 7330:UDP:*:Enabled:BitComet 7330 UDP "24705:TCP" = 24705:TCP:*:Enabled:BitComet 24705 TCP "24705:UDP" = 24705:UDP:*:Enabled:BitComet 24705 UDP "8461:TCP" = 8461:TCP:*:Enabled:GoD High Port "8462:TCP" = 8462:TCP:*:Enabled:GoD Low Port "25071:TCP" = 25071:TCP:*:Enabled:BitComet 25071 TCP "25071:UDP" = 25071:UDP:*:Enabled:BitComet 25071 UDP "24757:TCP" = 24757:TCP:*:Enabled:BitComet 24757 TCP "24757:UDP" = 24757:UDP:*:Enabled:BitComet 24757 UDP "139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\DC++\DCPlusPlus.exe" = C:\Program Files\DC++\DCPlusPlus.exe:*:Enabled:DC++ "E:\eMule\eMule.exe" = E:\eMule\eMule.exe:*:Enabled:eMule Plus "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program glowny "D:\GryAdam\NFSU\Speed.exe" = D:\GryAdam\NFSU\Speed.exe:*:Disabled:Speed "C:\Program Files\Gadu-Gadu\ggphone\ggphone.exe" = C:\Program Files\Gadu-Gadu\ggphone\ggphone.exe:*:Enabled:TODO: "E:\Shareaza\Shareaza.exe" = E:\Shareaza\Shareaza.exe:*:Disabled:Shareaza Ultimate File Sharing "D:\GryAdam\Gadu-Gadu\gg.exe" = D:\GryAdam\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny "D:\GryAdam\FIFA 2005\FIFA2005.EXE" = D:\GryAdam\FIFA 2005\FIFA2005.EXE:*:Enabled:FIFA2005 "D:\GryAdam\Warcraft III\Warcraft III.exe" = D:\GryAdam\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III "D:\GryAdam\wiggles\Wiggles.exe" = D:\GryAdam\wiggles\Wiggles.exe:*:Enabled:Wiggles "D:\GryAdam\CS\hl.exe" = D:\GryAdam\CS\hl.exe:*:Enabled:Half-Life Launcher "D:\GryAdam\HI\hltv.exe" = D:\GryAdam\HI\hltv.exe:*:Enabled:HLTV Launcher "D:\GryAdam\BitDownload\BitDownload.exe" = D:\GryAdam\BitDownload\BitDownload.exe:*:Disabled:Torrent P2P application "D:\GryAdam\tibicam\TibiCam\TibiCAM.exe" = D:\GryAdam\tibicam\TibiCam\TibiCAM.exe:*:Enabled:TibiCAM "D:\GryAdam\Kazaa Lite Rewolucja\kazaalite.kpp" = D:\GryAdam\Kazaa Lite Rewolucja\kazaalite.kpp:*:Enabled:kazaalite "E:\Program Files\BearShare Applications\BearShare\BearShare.exe" = E:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Disabled:BearShare "D:\GryAdam\CS\hlds.exe" = D:\GryAdam\CS\hlds.exe:*:Enabled:HLDS Launcher "D:\GryAdam\hamachi\hamachi.exe" = D:\GryAdam\hamachi\hamachi.exe:*:Enabled:Hamachi Client "D:\GryAdam\Evolution 0.7.8 XML BEST\Evolution 0.7.8 XML BEST\Evolutions 0.7.8 XML\Evolutions-XML.exe" = D:\GryAdam\Evolution 0.7.8 XML BEST\Evolution 0.7.8 XML BEST\Evolutions 0.7.8 XML\Evolutions-XML.exe:*:Enabled:Evolutions-XML "E:\Kaspersky Anti-Virus 6.0\avp.exe" = E:\Kaspersky Anti-Virus 6.0\avp.exe:*:Enabled:Kaspersky Anti-Virus "D:\GryAdam\Evoevo\Evolutions 0.7.9 XML\Evolutions-XML.exe" = D:\GryAdam\Evoevo\Evolutions 0.7.9 XML\Evolutions-XML.exe:*:Enabled:Evolutions-XML "D:\GryAdam\bearshare light\BearShare.exe" = D:\GryAdam\bearshare light\BearShare.exe:*:Enabled:BearShare "D:\GryAdam\metin2\metin2.bin" = D:\GryAdam\metin2\metin2.bin:*:Enabled:metin2 "D:\GryAdam\Gunz\GunzLauncher.exe" = D:\GryAdam\Gunz\GunzLauncher.exe:*:Enabled:GunzLauncher "F:\Nightfire\Bond.exe" = F:\Nightfire\Bond.exe:*:Disabled:Bond "D:\GryAdam\motocross\mcm2.exe" = D:\GryAdam\motocross\mcm2.exe:*:Enabled:Microsoft® Motocross Madness 2 "C:\WINDOWS\System32\dpvsetup.exe" = C:\WINDOWS\System32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus "C:\Program Files\Winamp Remote\bin\Orb.exe" = C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb "C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client "D:\GryAdam\Devland_XML__0.7_\Devland XML (0.7)\DevLand-XML.exe" = D:\GryAdam\Devland_XML__0.7_\Devland XML (0.7)\DevLand-XML.exe:*:Enabled:DevLand-XML "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\counter-strike\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\counter-strike\hl.exe:*:Enabled:Half-Life Launcher "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\condition zero\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\condition zero\hl.exe:*:Enabled:Half-Life Launcher "C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation) "D:\GryAdam\fifa 2008\FIFA08.exe" = D:\GryAdam\fifa 2008\FIFA08.exe:*:Enabled:FIFA08 "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\deathmatch classic\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\deathmatch classic\hl.exe:*:Enabled:Half-Life Launcher "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\ricochet\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\ricochet\hl.exe:*:Enabled:Half-Life Launcher "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\day of defeat\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\day of defeat\hl.exe:*:Enabled:Half-Life Launcher "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent "E:\DC++\DCPlusPlus.exe" = E:\DC++\DCPlusPlus.exe:*:Enabled:DC++ -- () "D:\GryAdam\Azureus\Azureus.exe" = D:\GryAdam\Azureus\Azureus.exe:*:Enabled:Azureus "D:\Gry Adam\BitComet\BitComet.exe" = D:\Gry Adam\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client "D:\GryAdam\cs 1.6 steam\SteamApps\manius997\condition zero deleted scenes\hl.exe" = D:\GryAdam\cs 1.6 steam\SteamApps\manius997\condition zero deleted scenes\hl.exe:*:Enabled:Half-Life Launcher "D:\GryAdam\CS\hltv.exe" = D:\GryAdam\CS\hltv.exe:*:Enabled:HLTV Launcher "D:\GryAdam\Tibia bot\TibiaTekBot.exe" = D:\GryAdam\Tibia bot\TibiaTekBot.exe:*:Enabled:TibiaTek Bot "C:\Program Files\DNA\btdna.exe" = C:\Program Files\DNA\btdna.exe:*:Enabled:DNA "D:\GryAdam\BitTorrent\bittorrent.exe" = D:\GryAdam\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent "D:\GryAdam\Bid For Power\quake3.exe" = D:\GryAdam\Bid For Power\quake3.exe:*:Enabled:quake3 "D:\GryAdam\flashget\FlashGet.exe" = D:\GryAdam\flashget\FlashGet.exe:*:Enabled:Flashget "D:\GryAdam\Counter-Strike Source\hl2.exe" = D:\GryAdam\Counter-Strike Source\hl2.exe:*:Enabled:hl2 "D:\GryAdam\Gunz\Gunz.exe" = D:\GryAdam\Gunz\Gunz.exe:*:Enabled:Gunz "C:\Documents and Settings\Dom\Ustawienia lokalne\Dane aplikacji\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" = C:\Documents and Settings\Dom\Ustawienia lokalne\Dane aplikacji\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe:*:Enabled:Main program for Octoshape client "D:\GryAdam\Alien Arena 2008\crx.exe" = D:\GryAdam\Alien Arena 2008\crx.exe:*:Enabled:crx "D:\GryAdam\Postal2\System\Postal2MP.exe" = D:\GryAdam\Postal2\System\Postal2MP.exe:*:Disabled:Postal2MP "D:\GryAdam\BitComet\BitComet.exe" = D:\GryAdam\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client "D:\GryAdam\FlashGet universal\flashget.exe" = D:\GryAdam\FlashGet universal\flashget.exe:*:Enabled:flashget "D:\GryAdam\hallo\Halo CE 2.0\haloce.exe" = D:\GryAdam\hallo\Halo CE 2.0\haloce.exe:*:Enabled:Halo "D:\GryAdam\FarCry\Bin32\FarCry.exe" = D:\GryAdam\FarCry\Bin32\FarCry.exe:*:Enabled:Far Cry "D:\GryAdam\S4Client.exe" = D:\GryAdam\S4Client.exe:*:Enabled:Project S4 Client.exe "D:\GryAdam\S4League\S4Client.exe" = D:\GryAdam\S4League\S4Client.exe:*:Enabled:Project S4 Client.exe "D:\GryAdam\cs 1.6 steam\Steam.exe" = D:\GryAdam\cs 1.6 steam\Steam.exe:*:Enabled:Steam "D:\GryAdam\Wru\Wru.exe" = D:\GryAdam\Wru\Wru.exe:*:Enabled:Wru P2P Client "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger "D:\GryAdam\Nowe Gadu-Gadu\gg.exe" = D:\GryAdam\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu "D:\GryAdam\Władca Pierścienia\game.dat" = D:\GryAdam\Władca Pierścienia\game.dat:*:Enabled:Bitwa o Śródziemie (tm) "D:\GryAdam\pes2009.exe" = D:\GryAdam\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 "D:\GryAdam\PES2009\pes2009.exe" = D:\GryAdam\PES2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 "D:\GryAdam\FIFA08\FIFA08.exe" = D:\GryAdam\FIFA08\FIFA08.exe:*:Enabled:FIFA08 "D:\GryAdam\heroes\HEROES3.EXE" = D:\GryAdam\heroes\HEROES3.EXE:*:Enabled:Heroes of Might and Magic® III "C:\WINDOWS\System32\dplaysvr.exe" = C:\WINDOWS\System32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "D:\GryAdam\Real Alternative\Media Player Classic\mplayerc.exe" = D:\GryAdam\Real Alternative\Media Player Classic\mplayerc.exe:*:Enabled:Media Player Classic -- (Gabest) "E:\Skype\Skype.exe" = E:\Skype\Skype.exe:*:Enabled:Skype -- () "E:\Skype\Plugin Manager\skypePM.exe" = E:\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager "D:\GryAdam\bluetooth\BlueSoleil.exe" = D:\GryAdam\bluetooth\BlueSoleil.exe:*:Enabled:BlueSoleil -- (IVT Corporation.) "C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe" = C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2011 32-bit "C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe" = C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe:*:Enabled:mental ray satellite server for Autodesk 3ds Max 2011 32-bit "C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32.exe" = C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32.exe:*:Enabled:mental ray satellite for Autodesk 3ds Max 2011 32-bit "C:\Program Files\Autodesk\Backburner\monitor.exe" = C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor -- (Autodesk, Inc.) "C:\Program Files\Autodesk\Backburner\manager.exe" = C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager -- (Autodesk, Inc.) "C:\Program Files\Autodesk\Backburner\server.exe" = C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server -- (Autodesk, Inc.) "E:\3d studio max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe" = E:\3d studio max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe:*:Enabled:mental ray satellite for Autodesk 3ds Max 2012 32-bit - English -- (mental images GmbH) "E:\3d studio max 2012\3ds Max 2012\3dsmax.exe" = E:\3d studio max 2012\3ds Max 2012\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2012 32-bit - English -- (Autodesk, Inc.) "E:\3d studio max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe" = E:\3d studio max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe:*:Enabled:mental ray satellite server for Autodesk 3ds Max 2012 32-bit - English -- () "E:\Office\Office12\OUTLOOK.EXE" = E:\Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) "E:\Office\Office12\GROOVE.EXE" = E:\Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation) "E:\Office\Office12\ONENOTE.EXE" = E:\Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation) "D:\GryAdam\Re-Volt\REVOLT.EXE" = D:\GryAdam\Re-Volt\REVOLT.EXE:*:Enabled:REVOLT -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] ""SubEdit-Player"" = "SubEdit-Player" "#1 DVD Ripper" = #1 DVD Ripper 7.2.1 "{007B37D9-0C45-4202-834B-DD5FAAE99D63}" = ArcSoft Print Creations - Slimline Card "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86 "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel "{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help "{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD "{16B6279B-9FF5-41fb-8BF9-404324F5DD1F}}_is1" = Media Access Startup "{174D5678-D941-433C-BD23-58A5C7B0D36D}" = Jasc Animation Shop 3 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{2300EE96-0A41-4FAB-BD03-989EC44577A0}" = Acronis Disk Director Suite "{2315B23D-3E21-4920-837D-AE6460934ECB}" = FIFA 09 "{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java(TM) 6 Update 32 "{2A5FBE73-76DA-4A31-BD86-1B0E01DC33F8}" = Windows Live Messenger "{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt "{2DFA85ED-588F-4CE3-A175-29E52C3804A8}}_is1" = Folder Size 1.2.0.0 "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{38D95956-E92C-4473-904B-CD877EA04410}" = Philips SPC210NC Webcam "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2012.0.0 "{42938595-0D83-404D-9F73-F8177FDD531A}" = ESScore "{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg "{466D379F-D2A4-4F9B-86E2-E2CBA6056D87}" = Aplikacja KODAK do obslugi przycisku Share "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4DFF1415-4C29-44A8-BFD4-2BCE249C4991}" = SpPhones "{51958BA7-21E4-4A8B-9098-CD8375BD17B2}" = Asystent rejestracji usługi Windows Live "{5316DFC9-CE99-4458-9AB3-E8726EDE0210}" = skin0001 "{560F47F7-EB23-44B1-AAFC-667F1CD8FE5C}" = Sp5 "{56589DFE-0C29-4DFE-8E42-887B771ECD23}" = ArcSoft Print Creations - Photo Book "{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86 "{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr "{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012 "{67574624-BF0F-0409-AF6D-19FBD86FF7F7}" = Autodesk 3ds Max 2011 32-bit "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic "{6C3959C6-943E-44B3-BAAD-570B04B134E5}" = SpCommon "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS "{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini "{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012 "{8F85CC2C-4B26-4CF6-B835-DC59BCEDD287}" = Bluesoleil2.7.0.13 VoIP Release 071227 "{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard "{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12 "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007 "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9591C049-5CAE-4E89-A8D9-191F1899628B}" = ArcSoft Print Creations - Funhouse "{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}" = Adobe Illustrator CS5 "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5 "{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK "{B0D83FCD-9D42-43ED-8315-250326AADA02}" = ArcSoft Print Creations - Scrapbook "{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI "{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore "{B5751715-EC10-43D9-8C95-62E1368433EF}" = Autodesk Material Library Medium Resolution Image Library 2012 "{B6892A3F-51F5-4BA4-92E5-3F4A1A10720D}" = Podstawowe programy Windows Live "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C49F8E1C-0BAE-4836-A670-AE76BA32BE90}" = ChomikBox "{C5096216-7703-409E-B85A-8A6EE7395128}}_is1" = System Search Dispatcher "{CA9ED5E4-1548-485B-A293-417840060158}" = ArcSoft Print Creations - Photo Calendar "{CAE8A0F1-B498-4C23-95FA-55047E730C8F}" = ArcSoft Print Creations "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86 "{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Oprogramowanie Kodak EasyShare "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86 "{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR "{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player "{E415C943-37E5-473F-8BAE-043C56734124}" = Sp5TTInt "{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}" = NVIDIA PhysX v8.10.17 "{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 "{E6083921-A185-0409-B058-ACB1DB615AD9}" = Autodesk 3ds Max 2012 32-bit - English "{E6B4117F-AC59-4B13-9274-EB136E8897EE}" = ArcSoft Print Creations - Album Page "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{F04F9557-81A9-4293-BC49-2C216FA325A7}" = ArcSoft Print Creations - Greeting Card "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 "{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK "{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FB81C624-5E87-4120-9E47-779662D93937}_is1" = EMCO Malware Destroyer 6 "{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock "{FD4B33E1-24AE-4535-AA7B-162B30FB57CD}" = Sp5Intl "{FEC02973-0781-49C7-9F04-28DA9BAF0372}" = Composite 2012 "7-Zip" = 7-Zip 9.20 "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE "Adobe Shockwave Player" = Adobe Shockwave Player 11 "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "ATI Display Driver" = (DNA 3.5.4.12) "Audacity_is1" = Audacity 1.2.6 "Autodesk 3ds Max 2012 32-bit - English" = Autodesk 3ds Max 2012 32-bit - English "Autodesk FBX Plug-in 2012.0 - 3ds Max 2012" = Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 "Avidemux 2.5" = Avidemux 2.5 (32-bit) "Browsers Protector" = Browsers Protector "Bubble Bobble Gold Edition" = Bubble Bobble Gold Edition "Bubble Bobble Nostalgie_is1" = Bubble Bobble Nostalgie "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "DC++" = DC++ 0.791 "Deckadance" = Deckadance "ENTERPRISE" = Microsoft Office Enterprise 2007 "FL Studio 10" = FL Studio 10 "Football Manager 2012_is1" = Football Manager 2012 "Gadu-Gadu 10" = Gadu-Gadu 10 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "IL Download Manager" = IL Download Manager "InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 Demo "KLiteCodecPack_is1" = K-Lite Codec Pack 6.4.0 (Full) "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NeroMultiInstaller!UninstallKey" = Nero Suite "Niezbędnik CD_is1" = Niezbędnik CD "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "PhotoFiltre" = PhotoFiltre "POD-Bot 2.5" = POD-Bot 2.5 "PokerStars" = PokerStars "PunkBusterSvc" = PunkBuster Services "RealAlt_is1" = Real Alternative 2.0.0 "Shockwave" = Shockwave "Skype_is1" = Onet.pl - Skype (BETA) "Slownik jezyka polskiego 3t" = Słownik języka polskiego PWN "Soldat_is1" = Soldat 1.4.0 "Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4 "StartSearch Toolbar" = StartSearch Toolbar 1.3 "Sukoku" = Sukoku 1.0 build 125 "Super Mario 3 : Mario Forever" = Super Mario 3 : Mario Forever "Tasker_is1" = Tasker version 3.13 "Tibia_is1" = Tibia "Totalcmd" = Total Commander (Remove or Repair) "Virtual Turntables" = Virtual Turntables "vShare.tv plugin" = vShare.tv plugin 1.3 "WIC" = Windows Imaging Component "Winamp" = Winamp "Winamp Toolbar" = Winamp Toolbar "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WinGimp-2.0_is1" = GIMP 2.6.11 "WinLiveSuite_Wave3" = Podstawowe programy Windows Live "WinRAR archiver" = Archiwizator WinRAR "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "WorldUnlock Codes Calculator" = WorldUnlock Codes Calculator [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2000478354-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Game Organizer" = EasyBits GO "Google Chrome" = Google Chrome "gridforshim" = CiD Help "Pokemon Evolution 2.0" = Pokemon Evolution 2.0 [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-07-24 17:58:34 | Computer Name = NAMERTY-A29A0E3 | Source = crypt32 | ID = 131080 Description = Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: The server name or address could not be resolved Error - 2012-07-25 04:22:11 | Computer Name = NAMERTY-A29A0E3 | Source = crypt32 | ID = 131080 Description = Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej listy innych firm z: , wystąpił błąd: The server name or address could not be resolved [ System Events ] Error - 2012-07-25 07:31:14 | Computer Name = NAMERTY-A29A0E3 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: aswSnx Error - 2012-07-25 07:40:25 | Computer Name = NAMERTY-A29A0E3 | Source = sptd | ID = 262148 Description = Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla . Error - 2012-07-25 07:40:25 | Computer Name = NAMERTY-A29A0E3 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Aavmker4 aswSnx Fips intelppm sptd StarOpen Error - 2012-07-25 07:40:27 | Computer Name = NAMERTY-A29A0E3 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2012-07-25 07:40:56 | Computer Name = NAMERTY-A29A0E3 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi StiSvc z argumentami „” w celu uruchomienia serwera: {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 2012-07-25 07:51:03 | Computer Name = NAMERTY-A29A0E3 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi StiSvc z argumentami „” w celu uruchomienia serwera: {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 2012-07-25 07:56:15 | Computer Name = NAMERTY-A29A0E3 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2012-07-25 07:57:24 | Computer Name = NAMERTY-A29A0E3 | Source = sptd | ID = 262148 Description = Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla . Error - 2012-07-25 07:57:57 | Computer Name = NAMERTY-A29A0E3 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2012-07-25 07:58:51 | Computer Name = NAMERTY-A29A0E3 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Aavmker4 aswSnx Fips intelppm StarOpen < End of report >