OTL Extras logfile created on: 2012-07-31 16:08:29 - Run 2 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\Piotrek\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,87 Gb Total Physical Memory | 2,32 Gb Available Physical Memory | 60,08% Memory free 7,73 Gb Paging File | 6,05 Gb Available in Paging File | 78,26% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 421,81 Gb Total Space | 349,94 Gb Free Space | 82,96% Space Free | Partition Type: NTFS Drive D: | 29,00 Gb Total Space | 16,06 Gb Free Space | 55,40% Space Free | Partition Type: NTFS Computer Name: PIOTREK-PIOTREK | User Name: Piotrek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Aurora\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 1 "AntiVirusOverride" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{025E1B1C-123C-46AF-9B74-EDA15616376C}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{1618CCEC-F34A-4EE2-96EA-BEEFC9C60117}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{2D409E4F-D242-4B24-B2A7-F04D9E22A2BF}" = rport=445 | protocol=6 | dir=out | app=system | "{336B1010-FD17-4049-908B-E358047809DB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{3455CEA2-387A-442D-855A-37A64274E1B5}" = rport=138 | protocol=17 | dir=out | app=system | "{453A5963-2A72-41D1-B1DC-BB152975E0FD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{508D0938-BC65-4445-B585-D572B5321980}" = rport=139 | protocol=6 | dir=out | app=system | "{5093C5D0-FAE2-4C8B-8782-8B80ED27A400}" = lport=138 | protocol=17 | dir=in | app=system | "{53EE1159-465D-4597-9CDD-498370E45A66}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5C67304A-AC06-459C-B011-B4FF3B3163D5}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{6669F5EB-A1CE-478C-A1EF-D888BB076DD4}" = lport=137 | protocol=17 | dir=in | app=system | "{6962B280-E5A2-4AAB-B7DD-8C24E5C534D2}" = rport=10243 | protocol=6 | dir=out | app=system | "{799C3FCB-14FB-4359-BEB1-4EA1E3D33670}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{8EB236B4-58BA-44FF-B6C2-3B650EC17670}" = rport=137 | protocol=17 | dir=out | app=system | "{941BE351-45DB-4D35-87F0-F3960154CF37}" = lport=2869 | protocol=6 | dir=in | app=system | "{A13B81FB-8312-48DC-8DB5-25A09CC45D4F}" = lport=445 | protocol=6 | dir=in | app=system | "{A80D520D-8C7E-4189-8AEA-F8DE1DE27A71}" = lport=139 | protocol=6 | dir=in | app=system | "{BD86F7FC-517F-4E3C-9BB6-806AE725D147}" = lport=10243 | protocol=6 | dir=in | app=system | "{C4735BFD-FA0A-4841-8B95-0CB4956C983F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C4863590-C173-4C00-8CCB-8225D351C3D9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{C7B2164E-154C-495C-AECB-040E36400F89}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{CB304D80-8842-4A56-B7F1-62BE10E6BC0A}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{CDFDFA60-1E18-4F63-8FF5-8C9FD1CCB877}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{D7188DD7-F00F-40C8-8882-DB935E539650}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{EC27406D-B590-4740-A6A0-51670EFD9ECE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{ED8C4FF3-8E52-47FB-963A-33057FEE8C3B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{FD06809C-0EA9-46DA-9E62-926D2822BFD8}" = lport=2869 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{009BB28B-F3E2-4A96-869A-4EE6CD69CD26}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{03038D74-5937-41DC-8824-05C45A344746}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{053019B3-E4F3-45AB-90FB-32E38D098611}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{07BC4E76-80F4-411C-9943-B335513A685C}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{0F701507-3898-4181-9E95-1DD72E4D1583}" = dir=in | app=c:\program files\lenovo\readycomm\projectionist.exe | "{106698D4-2AC5-449E-9D25-0C8E567697CA}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | "{158BAD6D-F4F3-4371-91EF-B567F6743228}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{276AD26C-7481-4AB8-A521-07756F98E506}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{2EC04B0F-5C47-4D99-9A28-F7AD3BA23C81}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{32BB441B-B33B-410C-B192-522342476B88}" = dir=in | app=c:\program files\lenovo\readycomm\connsvc.exe | "{33373A12-5B5B-4601-8ABF-5C89501C38EB}" = dir=out | app=c:\program files\lenovo\readycomm\connsvc.exe | "{3FCBF19A-B9E5-4E4F-BFAE-1B4AF90EABC1}" = dir=in | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{4142D9CC-D0FC-4013-8FAA-26BF2B9C3AC7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{4529D4D9-1E3F-4570-B5B9-FA9B1776667C}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{4C87F997-1615-4A7A-BB60-99E1EC1086E0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{6199C09B-D0D3-4F99-ABF0-AE556A85E368}" = dir=out | app=c:\program files\lenovo\readycomm\appsvc.exe | "{67BEDC01-053D-4325-BE02-E77B007C1C6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{690EDEDB-4FBC-47B3-A066-ABDE8382B63C}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{6967AC23-309B-45B4-BD9B-3B7B5DE389A2}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{851716D3-DEEB-4500-97CC-543C47B3DDD1}" = dir=out | app=c:\windows\system32\igrssvcs.exe | "{8652B6AD-EC72-4D7D-8465-50AAD0A5DE54}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{90E217BE-4DBB-4941-816D-0359F464CC3B}" = dir=out | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{920F487F-16BB-4045-9763-5A78F4051777}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{92EB76DA-D799-4B43-9326-9E3BCBA37B5C}" = dir=out | app=c:\program files\lenovo\readycomm\readycomm.exe | "{93CC9795-8CEC-4662-B002-97729AD2FF82}" = protocol=6 | dir=out | app=system | "{A2936B66-8DDF-4E52-9FE4-F785C80896BF}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{B442CC8A-958B-4953-83A2-5A5E7156ABB7}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe | "{BA724A78-FACA-4A28-B694-9B3849B2EC36}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{BE91EB16-1FED-4875-A302-314AC1FE8B9A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{BEC91BFD-6755-43C9-A1BF-0A369EF9ABA4}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{C3739A4E-E8A7-4423-A50D-101210D146AA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{C589282B-0929-463F-8E3D-AC796E18085E}" = dir=in | app=c:\program files\lenovo\readycomm\appsvc.exe | "{C735A5FD-C224-4511-92D7-A1272A90E665}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{CBA2736E-D635-47AD-BDBD-ED4CBC47C0AD}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{CD866D40-499E-4BB6-B2FD-EECE666E7189}" = dir=in | app=c:\windows\system32\igrssvcs.exe | "{CF2CF793-AFF2-4F3D-9895-C65406D3938D}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe | "{CF8C20E0-277D-4E75-90AD-9E2AB6E327FF}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | "{D3379ED7-9152-4680-9AEC-B0852BE2689E}" = dir=in | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{DAD3921F-42CA-4D06-A921-A871BC3D2AB1}" = dir=out | app=c:\program files (x86)\lenovo\readycomm\common\igrs.exe | "{DCEDBBA3-1F9D-4554-AC99-27B0521D92D6}" = dir=in | app=c:\users\piotrek\appdata\local\facebook\video\skype\facebookvideocalling.exe | "{E899F7E5-3B56-4890-8FF1-03B8F8992BF2}" = dir=in | app=c:\program files\lenovo\readycomm\readycom.exe | "{EE12C886-4103-4996-B1E6-864C06590987}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F2365507-AB51-4883-9A75-2C4CF5AE7956}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{F287EA49-D674-45C9-8539-CC92AC787774}" = dir=out | app=c:\program files\lenovo\readycomm\projectionist.exe | "{F3D2B83A-1D0D-4E6D-A90A-9E2A43B6422A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{FD4C9C5A-13A4-45A0-B1F5-02AB968B59BF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "TCP Query User{0A3567F7-7933-45B3-A369-EAC413F14828}C:\program files (x86)\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea sports\fifa 11\game\fifa.exe | "TCP Query User{5F0242FF-3571-483C-B7D0-0055816B62F5}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "TCP Query User{6251761E-4EED-4217-B517-D12B5FED353C}C:\users\piotrek\appdata\roaming\sook\masoku.exe" = protocol=6 | dir=in | app=c:\users\piotrek\appdata\roaming\sook\masoku.exe | "TCP Query User{70EED721-2E31-4CE6-A6A5-9CE4A6DC994C}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "TCP Query User{7AB07775-408F-4D5D-8685-CFEE2B3F5C5A}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{9BA37372-AC0B-4589-9EC5-FCE72941ED96}C:\program files (x86)\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea sports\fifa 11\game\fifa.exe | "TCP Query User{B7BE9F35-E2EC-4A37-9531-8E8EF4334D8A}C:\users\piotrek\appdata\roaming\sook\masoku.exe" = protocol=6 | dir=in | app=c:\users\piotrek\appdata\roaming\sook\masoku.exe | "TCP Query User{BE77D661-B271-422F-AF82-C54A7BCD9ADD}C:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe" = protocol=6 | dir=in | app=c:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe | "TCP Query User{C3CB8F1F-7A02-4CD5-A8BA-A03FA3B34083}C:\program files (x86)\origin games\fifa 12\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe | "TCP Query User{D8D077F3-7AA8-44FF-9A36-A74324D9E495}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{E99E893C-244C-4C9A-8493-9744B1C2521E}C:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe" = protocol=6 | dir=in | app=c:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe | "UDP Query User{0CE7A8F7-8299-46F3-8E01-D9A76E8019C4}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{41EF6D54-F7AE-40F0-93AD-462F12A7A02F}C:\program files (x86)\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea sports\fifa 11\game\fifa.exe | "UDP Query User{6C84A328-B76F-46C0-8C69-D4BD14108386}C:\program files (x86)\origin games\fifa 12\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe | "UDP Query User{76F41E71-9770-450F-8E76-BC822BA4FB7C}C:\users\piotrek\appdata\roaming\sook\masoku.exe" = protocol=17 | dir=in | app=c:\users\piotrek\appdata\roaming\sook\masoku.exe | "UDP Query User{984B708B-D234-4647-82CA-A2AE6295E8F9}C:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe" = protocol=17 | dir=in | app=c:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe | "UDP Query User{9A4A1C69-9403-465B-B4EA-0836533F0AB8}C:\program files (x86)\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea sports\fifa 11\game\fifa.exe | "UDP Query User{CDCD387D-2D09-4F2F-9605-7778EE31881B}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{D8CB1BEC-26FD-4174-88AE-BBB92DEBB709}C:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe" = protocol=17 | dir=in | app=c:\users\piotrek\appdata\roaming\myuwfov\hoossu.exe | "UDP Query User{D9048861-FEFE-4E33-B950-269128AFF0FF}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "UDP Query User{DB6DDACF-C6B1-4004-983B-EF3C01CDA49E}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "UDP Query User{EFE183EC-0013-47C0-B464-5671094E2617}C:\users\piotrek\appdata\roaming\sook\masoku.exe" = protocol=17 | dir=in | app=c:\users\piotrek\appdata\roaming\sook\masoku.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources "{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Centrum obsługi urządzeń z systemem Windows Mobile "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90140000-006D-0415-1000-0000000FF1CE}" = Moduł Szybka instalacja pakietu Microsoft Office 2010 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Lenovo Bluetooth with Enhanced Data Rate Software "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{C02C2C22-2EB1-47C8-B74F-8AB1A62FAE31}" = Windows Live Family Safety "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "0A4175B489A1B4A6E07E11B063A6263480C51D71" = Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (10/19/2009 5.4.0.1) "3BA80AB4C7E9F8497C115C844953A3D4BEB84D21" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) "6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) "6B8550A319DDC8B17F35F4A89988705E4592349B" = Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) "CNXT_AUDIO_HDA" = Conexant HD Audio "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "NVIDIA Drivers" = NVIDIA Drivers "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0CE226F3-EB27-4ECD-BBF5-F088716779FD}" = Energy Management "{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime "{129E626B-882E-4F97-96D8-CADD1D0E1FE8}" = Settlers III - Złota Edycja "{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31 "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources "{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger "{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}" = Windows Live Sync "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11 "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{543E6ACA-51B7-4283-82F2-57C0582A53C5}" = Windows Live UX Platform Language Pack "{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{670A2206-F20A-490C-8C13-25EA88BF8E54}_is1" = e-pity 2011 "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25 "{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live "{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159 "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later "{8991E763-21F5-4DEA-A938-5D9D77DCB488}" = Broadcom 802.11 Wireless Driver "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{90140011-0066-0415-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Polski "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010 "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{A2DC5896-2F0E-43E3-B4E0-2029426AAD77}" = Settlers IV - Złota Edycja "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1) "{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}" = Lenovo EasyCamera "{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych "{B2164CCB-C002-4B80-8550-7535D80DF237}" = Lenovo DirectShare "{BD8DA595-F501-4ABE-85A0-5C23E82472A0}" = Pomocnik Messenger "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh "{C28422FB-F2CD-427A-ADED-9F281745CDB2}" = Secure Download Manager "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}" = Bing Bar "{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel(R) Turbo Boost Technology Driver "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DFB19121-0609-49C1-92B1-546E5A940FE8}" = Onekey Theater "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer "{EA8ADAA9-6671-4839-A51E-0C6792B78F3E}" = FIFA 12 "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "ALLPlayer_is1" = ALLPlayer V4.X "Aurora 16.0a2 (x86 pl)" = Aurora 16.0a2 (x86 pl) "Avira AntiVir Desktop" = Avira Free Antivirus "DAEMON Tools Lite" = DAEMON Tools Lite "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "Gadu-Gadu 10" = Gadu-Gadu 10 "Gutscheinmieze - Toolbar" = Gutscheinmieze - Toolbar "Hard Disk Low Level Format Tool_is1" = Hard Disk Low Level Format Tool 4.25 "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "InstallShield_{B2164CCB-C002-4B80-8550-7535D80DF237}" = Lenovo DirectShare "ipla" = ipla 2.3.5 "KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic) "McAfee Security Scan" = McAfee Security Scan Plus "MozillaMaintenanceService" = Mozilla Maintenance Service "Office14.Click2Run" = Moduł Szybka instalacja pakietu Microsoft Office 2010 "Origin" = Origin "PIT Format 2011_is1" = PIT Format 2011 "PLAY ONLINE" = PLAY ONLINE "SADK" = The Settlers - Narodziny kultur "SoftwareUpdUtility" = Download Updater (AOL LLC) "Super Kulki_is1" = Super Kulki "TomTom HOME" = TomTom HOME 2.8.3.2499 "VeriFace" = VeriFace "Winamp" = Winamp "Winamp Toolbar" = Winamp Toolbar "WinLiveSuite" = Podstawowe programy Windows Live "WinRAR archiver" = WinRAR 4.01 (32-bitowy) [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Live Security Platinum" = Live Security Platinum "T-Mobile Ekstraklasa Patch" = T-Mobile Ekstraklasa Patch "Winamp Detect" = Detektor Winampa "Winamp Toolbar" = Winamp Toolbar [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-02-12 05:05:22 | Computer Name = Piotrek-Piotrek | Source = CVHSVC | ID = 100 Description = Tylko informacje. (Patch task for {90140011-0066-0415-0000-0000000FF1CE}): DownloadLatest Failed: Obecnie nie ma aktywnych połączeń sieciowych. Usługa inteligentnego transferu w tle (BITS) ponowni próbę po podłączeniu karty. Error - 2012-02-12 05:38:21 | Computer Name = Piotrek-Piotrek | Source = Application Hang | ID = 1002 Description = Program firefox.exe w wersji 12.0.0.4419 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 162c Godzina rozpoczęcia: 01cce968f5755f61 Godzina zakończenia: 12 Ścieżka aplikacji: C:\Program Files (x86)\Aurora\firefox.exe Identyfikator raportu: 47c03056-555d-11e1-88bc-001e101f82a0 Error - 2012-02-12 11:20:59 | Computer Name = Piotrek-Piotrek | Source = CVHSVC | ID = 100 Description = Tylko informacje. (Patch task for {90140011-0066-0415-0000-0000000FF1CE}): DownloadLatest Failed: Nie można określić nazwy serwera lub adresu. Error - 2012-02-12 13:03:05 | Computer Name = Piotrek-Piotrek | Source = Google Update | ID = 20 Description = Error - 2012-02-12 18:22:15 | Computer Name = Piotrek-Piotrek | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: fm.exe, wersja: 12.0.2.33515, sygnatura czasowa: 0x4e9d7cb7 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0xfe9626c8 Identyfikator procesu powodującego błąd: 0xc7c Godzina uruchomienia aplikacji powodującej błąd: 0x01cce9cf712f36bf Ścieżka aplikacji powodującej błąd: D:\Piotrek\Football.Manager.2012.STEAM.UNLOCKED-ALI213\football manager 2012\fm.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 03f13e32-55c8-11e1-a14e-c0cb38dbb7cd Error - 2012-02-13 10:39:33 | Computer Name = Piotrek-Piotrek | Source = CVHSVC | ID = 100 Description = Tylko informacje. (Patch task for {90140011-0066-0415-0000-0000000FF1CE}): DownloadLatest Failed: Obecnie nie ma aktywnych połączeń sieciowych. Usługa inteligentnego transferu w tle (BITS) ponowni próbę po podłączeniu karty. Error - 2012-02-13 16:16:29 | Computer Name = Piotrek-Piotrek | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: fm.exe, wersja: 12.0.2.33515, sygnatura czasowa: 0x4e9d7cb7 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0xfe9626c8 Identyfikator procesu powodującego błąd: 0x65c Godzina uruchomienia aplikacji powodującej błąd: 0x01ccea8168c91a98 Ścieżka aplikacji powodującej błąd: D:\Piotrek\Football.Manager.2012.STEAM.UNLOCKED-ALI213\football manager 2012\fm.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 9c958b9b-567f-11e1-889c-c0cb38dbb7cd Error - 2012-02-15 05:19:57 | Computer Name = Piotrek-Piotrek | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: fm.exe, wersja: 12.0.2.33515, sygnatura czasowa: 0x4e9d7cb7 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0xabd0fe15 Identyfikator procesu powodującego błąd: 0x988 Godzina uruchomienia aplikacji powodującej błąd: 0x01ccebb6eb57ad83 Ścieżka aplikacji powodującej błąd: D:\Piotrek\Football.Manager.2012.STEAM.UNLOCKED-ALI213\football manager 2012\fm.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 3a2cf156-57b6-11e1-b915-c0cb38dbb7cd Error - 2012-02-16 06:33:17 | Computer Name = Piotrek-Piotrek | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: fm.exe, wersja: 12.0.2.33515, sygnatura czasowa: 0x4e9d7cb7 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0xfe9626c8 Identyfikator procesu powodującego błąd: 0x122c Godzina uruchomienia aplikacji powodującej błąd: 0x01ccec916f30a257 Ścieżka aplikacji powodującej błąd: D:\Piotrek\Football.Manager.2012.STEAM.UNLOCKED-ALI213\football manager 2012\fm.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: a2ba55f8-5889-11e1-a9bd-c0cb38dbb7cd Error - 2012-02-16 07:41:22 | Computer Name = Piotrek-Piotrek | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: fm.exe, wersja: 12.0.2.33515, sygnatura czasowa: 0x4e9d7cb7 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0xfe9626c8 Identyfikator procesu powodującego błąd: 0x10d0 Godzina uruchomienia aplikacji powodującej błąd: 0x01ccec9f51d89d49 Ścieżka aplikacji powodującej błąd: D:\Piotrek\Football.Manager.2012.STEAM.UNLOCKED-ALI213\football manager 2012\fm.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 25a335d9-5893-11e1-a9bd-c0cb38dbb7cd [ System Events ] Error - 2012-07-31 09:36:31 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi PLAY ONLINE. OUC z powodu następującego błędu: %%1053 Error - 2012-07-31 09:36:44 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: wayuia Error - 2012-07-31 09:38:03 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Windows Search. Error - 2012-07-31 09:38:03 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Windows Search z powodu następującego błędu: %%1053 Error - 2012-07-31 09:38:03 | Computer Name = Piotrek-Piotrek | Source = DCOM | ID = 10005 Description = Error - 2012-07-31 09:39:20 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi ReadyComm.DirectRouter z powodu następującego błędu: %%2 Error - 2012-07-31 09:47:19 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą PLAY ONLINE. OUC. Error - 2012-07-31 09:47:19 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi PLAY ONLINE. OUC z powodu następującego błędu: %%1053 Error - 2012-07-31 09:47:34 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: wayuia Error - 2012-07-31 09:49:38 | Computer Name = Piotrek-Piotrek | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi ReadyComm.DirectRouter z powodu następującego błędu: %%2 < End of report >