OTL Extras logfile created on: 2012-11-04 13:57:28 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kapr\Downloads Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,99 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 67,25% Memory free 5,98 Gb Paging File | 5,16 Gb Available in Paging File | 86,35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 466,26 Gb Total Space | 410,51 Gb Free Space | 88,04% Space Free | Partition Type: NTFS Drive D: | 465,16 Gb Total Space | 308,09 Gb Free Space | 66,23% Space Free | Partition Type: NTFS Drive E: | 7,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: KAPR-PC | User Name: Kapr | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{12A65985-741E-484C-AFF6-BB491F6B4E91}" = lport=137 | protocol=17 | dir=in | app=system | "{262245F5-C9D5-44E3-AE96-561065838E72}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{26B4D508-A252-44EE-B67F-B5B2C797286B}" = lport=1542 | protocol=17 | dir=in | name=realtek wps udp prot | "{27D88D25-3C01-413E-89E1-4A6D4D05CC5B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{3D8C0476-C6DD-40CC-9ECC-AA3FBF853F5E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{42E6861E-7518-410C-AEFC-F72EB63E1561}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{4DC86747-C90A-4DCC-AFAC-C2CCA83C8AF1}" = rport=137 | protocol=17 | dir=out | app=system | "{510B4299-2FF1-459B-9D7B-EF1EBBC1D9B5}" = lport=10243 | protocol=6 | dir=in | app=system | "{6FD72677-E2C9-49B6-A82E-6ABEE64946F9}" = rport=445 | protocol=6 | dir=out | app=system | "{71F01FDA-B4E8-40B5-BE8C-F27DF25003C5}" = lport=138 | protocol=17 | dir=in | app=system | "{80E350DC-E050-42FE-919B-02EC4526510F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{96C1FD6D-6862-483F-BAFC-58F1482D7545}" = lport=2869 | protocol=6 | dir=in | app=system | "{A1208013-CD88-4053-A9A5-871DE27F0412}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{B44EDA9C-5EA7-4AF5-AA00-CEB09269EBCC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{B91D9978-12A1-4933-BBF0-B2BBFB080415}" = lport=139 | protocol=6 | dir=in | app=system | "{C1A3C67C-467C-44A4-A9E1-63E18E221166}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C8E7E691-6B96-4793-94FE-41BC0EDCD622}" = lport=1542 | protocol=6 | dir=in | name=realtek wps tcp prot | "{CAA86DA1-D0A3-41BB-B1B0-29BA11BE1C90}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{D296237F-0446-43DD-8720-CD619946363E}" = lport=445 | protocol=6 | dir=in | app=system | "{D491C51F-5FFF-481F-A66A-BBD3511CA812}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{DA3D65A1-6D2A-4EF1-9AAE-128CDBF89CB5}" = rport=10243 | protocol=6 | dir=out | app=system | "{E74F62A9-8EDC-492B-B97C-E83B297B1A88}" = lport=53 | protocol=17 | dir=in | name=realtek ap udp prot | "{EFCC7C67-0CE4-423E-ABE3-C4D44F8E1C60}" = rport=139 | protocol=6 | dir=out | app=system | "{F3460975-DA20-4B06-9D5B-792744A32F3B}" = rport=138 | protocol=17 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00C322DE-C0F5-4CEE-A485-693D497B9C33}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{02459B4A-7B7F-4A9B-B27B-E60FC5CB3FF0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{084E1582-7208-45C4-9090-BE24574D1069}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | "{0AF68D0D-6A61-4BB0-9AA0-FBF5B73D0CDD}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\warhammer 40,000 space marine\spacemarine.exe | "{0D5A115C-6EA9-432B-A34E-3F2D66D9CD15}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\oddworld abes oddysee\abewin.exe | "{108AE365-986C-4799-953F-BF325B34AE71}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | "{15E5FBF0-490D-4F04-9EFB-2C80B3909EAD}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\warhammer 40,000 space marine\spacemarine.exe | "{164F05CD-997E-49BD-BFA5-6BA06C6A12B5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{1A70DF1D-A9FA-41A8-8473-CFD9F657C91C}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{1DB5F5F9-BC78-4323-97E0-BA79420C6070}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2033DB67-3BAB-4883-91E6-4734751736B6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{20EBEFE4-8F2D-443C-BF0C-AC78F1E864BF}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd.exe | "{25AD8221-4567-4C45-8238-C4352560EBC3}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | "{2A2C0FAF-F594-49AE-B34B-B7C5FC7AEDA9}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "{2B7D33B7-108B-41AC-8BD1-4B533CCE1952}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{2DB21C95-9E75-417A-AFE3-99C1313304AD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{34516E7C-AA23-4AD3-AA1B-E8E8B8837DA7}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | "{3AC235ED-42D0-43A6-84D2-9736382E83F4}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{42EA24DF-4682-435E-A0C1-9E5F5D846E06}" = protocol=6 | dir=in | app=c:\program files\asus\n10 wlan card utilities\rtwlan.exe | "{44EC8801-DFDD-45AC-AB2F-CF31F5C316A9}" = protocol=6 | dir=in | app=d:\steam\steam.exe | "{49975223-B189-40CC-991F-B6E1FF51F290}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\oddworld abes oddysee\abewin.exe | "{4D54921E-4D7B-441E-B3D9-904FD382A797}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dawn of war 2\dow2.exe | "{4EA567FD-9A92-49A2-AA1C-5DF2DD6CA9A0}" = protocol=6 | dir=in | app=d:\coh\relicdownloader\relicdownloader.exe | "{5795652C-B476-494E-BA97-C92B33E9B0C9}" = protocol=17 | dir=in | app=d:\steam\steam.exe | "{59E6BA3B-838D-4184-8C77-8E766748042B}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{5C7BE792-E612-47D4-8DDF-4376F06BED5E}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\warhammer 40,000 space marine\spacemarine.exe | "{60D3F4F4-CE88-4738-92F0-A7B049962B38}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{62ED3EA9-39CF-48C0-B178-EAA6B11DECCA}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\alan wake\alanwake.exe | "{642067A8-C452-4DF7-847D-F04392A557E5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{6CFD216B-FDE9-4FD9-8F9E-CEFBB74E0F67}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{6D47F5C4-7352-4CDA-9FF7-540B09AAAA7B}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{6F005B0F-3935-462A-9DEA-45D4F110F7D2}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\alan wake\alanwake.exe | "{6FE6BA20-C90A-462F-8D1C-8693C7D73093}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\oddworld abes exoddus\exoddus.exe | "{70666D89-67A3-48A7-99E7-D57738693FB0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{76F782E3-11DE-4CB7-89AF-FB31F02835F9}" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | "{7E13CFF7-1189-49E4-BBD6-E9B6CBE379BF}" = protocol=58 | dir=in | app=system | "{83ECA3F3-3CA5-4B7C-9CF4-B696D69CF206}" = protocol=6 | dir=in | app=d:\coh\reliccoh.exe | "{8DFCC460-C427-4884-9D95-9F72063B286C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{8E1497C9-1AF0-4E9C-BE58-1A32A9082F2C}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\oddworld abes exoddus\exoddus.exe | "{933FCEF4-26E2-4293-BC33-F7B7A2B31D97}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\warhammer 40,000 space marine\spacemarine.exe | "{95310D0A-62D9-4BBD-8A94-49542FE22324}" = protocol=6 | dir=out | app=system | "{953CEC8D-4A87-4F9A-80E5-B1D1BA688A41}" = protocol=6 | dir=in | app=c:\program files\origin games\mass effect 3\binaries\win32\masseffect3.exe | "{97C05575-F4B5-43F3-BE1D-11086AABD2B2}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{9EAA82AB-762E-4995-8AB1-324BE7DE6552}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | "{A2B5C08F-9280-4263-B868-0CE62E9EF113}" = protocol=6 | dir=in | app=d:\steam\steamapps\kapromer\team fortress 2\hl2.exe | "{A576AA4C-A448-4E61-AADD-B907BC9C62D3}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{A6DEFA97-F6FA-49A4-8C28-EB03BA1CF5AB}" = protocol=6 | dir=in | app=c:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe | "{AD4339F3-8EE7-48E4-B6D1-7A91BD61EDDA}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd.exe | "{AF05482F-41E5-478B-8FD3-62C23C773D1C}" = protocol=17 | dir=in | app=c:\program files\origin games\mass effect 3\binaries\win32\masseffect3.exe | "{B563072A-CDE8-4DDC-9B9A-D8688FBAECF0}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | "{BB2DDC35-5A0C-45B9-A001-BE49E6A74E3E}" = protocol=6 | dir=in | app=d:\steam\steam.exe | "{BC16B559-38BB-4D47-BCFE-74CB684B94D7}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\oddworld abes oddysee\abewin.exe | "{BC7EE8FD-8CD9-42E4-82EF-EC589B482612}" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | "{BD664D2D-EB1C-4BB6-9305-2D62230BDE53}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{BE6291D4-CE40-43AD-ADCC-B2236B13A486}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | "{C683DBB8-6A84-4CD6-98D6-00E106BD482D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{C72C5C4D-47F1-4FD8-8038-3A351517E9F9}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{CE5C4296-11AF-4BDF-9C32-1547A48A27B8}" = protocol=17 | dir=in | app=d:\coh\relicdownloader\relicdownloader.exe | "{D2A929C7-0E84-4428-9665-C07A20C6244C}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "{D386A99F-457E-452F-B253-794BFC9E4E3C}" = protocol=17 | dir=in | app=c:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe | "{D52C372E-22A4-4085-8AE8-09E55ABD0A4B}" = protocol=17 | dir=in | app=d:\coh\reliccoh.exe | "{D7DB6A4C-9D5A-4FC4-B734-0EC038DD6394}" = protocol=17 | dir=in | app=d:\steam\steam.exe | "{D9F8457E-FE49-4CAD-B1B7-CA52940F9573}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\oddworld abes oddysee\abewin.exe | "{DF11BB86-26EE-4BD7-8F4D-A072316F05C8}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | "{E982533C-FE21-430B-9D1D-CD7B91239C4F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{EC437BC1-A230-4F56-A60A-19F05C6A0765}" = protocol=17 | dir=in | app=d:\steam\steamapps\kapromer\team fortress 2\hl2.exe | "{ED5E3BB6-34A7-4511-B3A0-E3452BC9315D}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dawn of war 2\dow2.exe | "{F2ADA7B7-4894-4882-A723-DB0C3837D9CF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F5C2814D-FEBB-454B-8B66-B71C7FFD1167}" = protocol=17 | dir=in | app=c:\program files\asus\n10 wlan card utilities\rtwlan.exe | "TCP Query User{142F6205-7AA6-4476-BEF3-7869CC77E6BE}C:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe" = protocol=6 | dir=in | app=c:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe | "TCP Query User{2605F646-1418-4A05-9048-BD6728671885}D:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=d:\games\world_of_tanks\wotlauncher.exe | "TCP Query User{813985ED-09C7-401D-A98A-F8764ACCD95E}D:\steam\steamapps\common\call of duty black ops\blackops.exe" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty black ops\blackops.exe | "TCP Query User{92758754-2BE7-4F00-8C86-75480C677039}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | "TCP Query User{95A32D10-F0A8-4083-9EC9-14791149413C}D:\steam\steamapps\kapromer\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=d:\steam\steamapps\kapromer\team fortress 2\hl2.exe | "TCP Query User{B4D83665-7FD0-408F-A632-93483226A8E0}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | "TCP Query User{C7454BF1-48B8-4E65-B291-026F69819FAA}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "TCP Query User{C9C81A5D-6D28-44C5-BCAD-A573EA1A9A2E}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | "TCP Query User{DB7CC864-B430-4B1F-813C-3E79F5CB47A6}D:\ubisoft\related designs\anno 1404\tools\anno4web.exe" = protocol=6 | dir=in | app=d:\ubisoft\related designs\anno 1404\tools\anno4web.exe | "TCP Query User{EE539978-550A-4383-952D-B302867382CA}D:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=d:\games\world_of_tanks\worldoftanks.exe | "TCP Query User{F9EAB124-D7E1-4054-AACD-6EEB7AFA6BF6}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | "UDP Query User{22A0467A-7E5D-4C52-9DFF-F226F8B2B3C4}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | "UDP Query User{281856ED-BAB2-4BDC-B6AE-6787ED674A87}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | "UDP Query User{319A995C-FA07-47CB-AA19-441C87DC2569}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | "UDP Query User{3BFFE1AC-D522-4FE6-A82F-A2F3F545ACA1}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | "UDP Query User{563E50FF-FAE5-4842-ABC5-97F483C53D45}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | "UDP Query User{69387D37-3AC9-447E-8AA8-A8F5BA62DBB9}C:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe" = protocol=17 | dir=in | app=c:\users\kapr\appdata\local\temp\93c1a772810648a5ac82ba16b25fc1a1\relicdownloader.exe | "UDP Query User{9F11D5BD-5976-40DC-AE93-978FF7988B43}D:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=d:\games\world_of_tanks\worldoftanks.exe | "UDP Query User{BAC28601-2001-46B4-AE4D-950B6E821EB2}D:\steam\steamapps\kapromer\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=d:\steam\steamapps\kapromer\team fortress 2\hl2.exe | "UDP Query User{C1B663AF-B25F-4195-A2BE-42B9F6B1BFD4}D:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=d:\games\world_of_tanks\wotlauncher.exe | "UDP Query User{EA628B8A-5DB0-4891-8DDB-FD2FB3AA0490}D:\ubisoft\related designs\anno 1404\tools\anno4web.exe" = protocol=17 | dir=in | app=d:\ubisoft\related designs\anno 1404\tools\anno4web.exe | "UDP Query User{F876FAF8-8524-4A27-BE37-3EAAEA078C00}D:\steam\steamapps\common\call of duty black ops\blackops.exe" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty black ops\blackops.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{06C9AC04-E960-9AB2-776D-9D540E5ADCC5}" = CCC Help Finnish "{14574B7F-75D1-4718-B7F2-EBF6E2862A35}" = Company of Heroes - FAKEMSI "{190E6FBD-BC93-397D-F3B2-5AEDE9C0BB1B}" = Catalyst Control Center "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 "{199E6632-EB28-4F73-AECB-3E192EB92D18}" = Company of Heroes - FAKEMSI "{19A492A0-888F-44A0-9B21-D91700763F62}" = Catalyst Control Center - Branding "{1D6ACDA2-8272-F683-37FD-5313DB60719B}" = CCC Help Dutch "{25724802-CC14-4B90-9F3B-3D6955EE27B1}" = Company of Heroes - FAKEMSI "{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7 "{275A7997-4C4A-DDE0-FC63-E6FDAEB985EC}" = ATI AVIVO Codecs "{28CF3C17-0631-C92F-37B9-0EB916166FBE}" = CCC Help Chinese Traditional "{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}" = Microsoft Games for Windows - LIVE Redistributable "{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}" = Company of Heroes - FAKEMSI "{3B13A3BF-9B10-6A8E-F101-B1F4DF31C35E}" = CCC Help Korean "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E13F1E6-CC89-8C89-CFB1-5567FAAA396B}" = Catalyst Control Center Graphics Previews Common "{50193078-F553-4EBA-AA77-64C9FAA12F98}" = Company of Heroes - FAKEMSI "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{51D718D1-DA81-4FAD-919F-5C1CE3C33379}" = Company of Heroes - FAKEMSI "{534A31BD-20F4-46b0-85CE-09778379663C}" = Mass Effect™ 3 "{556BEFE2-30FF-4113-98F4-01234396DF2B}" = ASUS 802.11n WLAN Card Utilities & Driver "{5D540B95-1238-79D5-359D-390732F2DC17}" = CCC Help Chinese Standard "{5F6DBC94-5102-850E-11F6-C6B894437463}" = CCC Help Spanish "{61D6862D-C3E2-6026-2E10-B3DBFECE729E}" = CCC Help Swedish "{625386A4-B6B6-4911-A6E8-23189C3F2D15}" = Microsoft .NET Compact Framework 2.0 SP1 "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{66F78C51-D108-4F0C-A93C-1CBE74CE338F}" = Company of Heroes - FAKEMSI "{6759B364-88B8-BCFE-913F-09303A7A664E}" = CCC Help Japanese "{6B9D937D-807A-B6BE-134F-5610110DCA4C}" = CCC Help German "{6C3168E7-1D35-EAED-9328-F157A05B0709}" = CCC Help Portuguese "{6D0F581B-8FBF-4668-18EA-D502371E426A}" = CCC Help Hungarian "{6D570D82-0F28-2404-B297-EA36D47487ED}" = ccc-utility "{6D6C45E4-3F9E-E4DE-47D9-27B9372C40A4}" = AMD Media Foundation Decoders "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}" = Company of Heroes - FAKEMSI "{7FB413C8-3CAD-49F7-A67C-6EFEB4B04050}" = LogMeIn Hamachi "{80D03817-7943-4839-8E96-B9F924C5E67D}" = Company of Heroes - FAKEMSI "{829A80DF-E9D4-DA84-79A6-6CDF2C515C7D}" = CCC Help Thai "{8531767F-C76F-9D60-F7A7-FF6DC3655D99}" = CCC Help French "{89A617DB-ECEA-3C50-7EED-68E38190AC4E}" = CCC Help Danish "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8B1CFC9A-C44F-23D3-76DA-3FCB80207D4D}" = CCC Help Russian "{912B04B3-7C7C-4929-AE68-EC2A4CCB4E73}" = Microsoft Mouse and Keyboard Center "{95120000-003F-0409-0000-0000000FF1CE}" = Microsoft Office Excel Viewer "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9530AE42-DAE1-4619-9594-B23487285D17}" = NVIDIA PhysX "{96A78FFD-B42B-2985-F806-A9AD8855DED4}" = ATI Catalyst Install Manager "{97E5205F-EA4F-438F-B211-F1846419F1C1}" = Company of Heroes - FAKEMSI "{99A7722D-9ACB-43F3-A222-ABC7133F159E}" = Company of Heroes - FAKEMSI "{99BD80FE-6035-B86F-BD2C-26590A1B3B79}" = AMD Drag and Drop Transcoding "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A93D7BA-AE4D-57AE-D976-A8A9EF893794}" = CCC Help English "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A03CFE07-071C-1F3A-F0B1-B25D06F2AB23}" = CCC Help Czech "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime "{A48CE6DE-1E75-EBE2-8EF7-6E6EA51962AC}" = HydraVision "{A683088F-4D85-3E5F-7AA8-2B49F190E3E8}" = CCC Help Turkish "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3 "{BA801B94-C28D-46EE-B806-E1E021A3D519}" = Company of Heroes - FAKEMSI "{C27B9A80-6A57-ECCF-F952-DC8F27AA67B7}" = Catalyst Control Center InstallProxy "{D4D244D1-05E0-4D24-86A2-B2433C435671}" = Company of Heroes - FAKEMSI "{DE068074-A5F4-55EC-ED6C-0B2A6F0AF255}" = Catalyst Control Center Localization All "{E684CD9B-CE1D-3955-5554-14D1636F676E}" = CCC Help Polish "{E81C8F78-42DF-9A7C-D8E7-9ED95A97A027}" = CCC Help Norwegian "{EA5BCA5B-C0B2-6ED5-CD9D-63CACBD69CD1}" = CCC Help Greek "{EAF636A9-F664-4703-A659-85A894DA264F}" = Company of Heroes - FAKEMSI "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{EE4AE8EC-7A6D-75EB-1547-F08D4A999A93}" = CCC Help Italian "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{F112F66E-25CA-42DD-983C-6118EB38F606}" = Microsoft Games for Windows - LIVE "5513-1208-7298-9440" = JDownloader 0.9 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Company of Heroes" = Company of Heroes "LogMeIn Hamachi" = LogMeIn Hamachi "McAfee Security Scan" = McAfee Security Scan Plus "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft Mouse and Keyboard Center" = Microsoft Mouse and Keyboard Center "Mozilla Firefox 16.0.2 (x86 pl)" = Mozilla Firefox 16.0.2 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Origin" = Origin "Picasa 3" = Picasa 3 "Steam App 10180" = Call of Duty: Modern Warfare 2 "Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer "Steam App 108710" = Alan Wake "Steam App 15620" = Warhammer® 40,000™: Dawn of War® II "Steam App 15700" = Oddworld: Abe's Oddysee "Steam App 15710" = Oddworld: Abe's Exoddus "Steam App 20570" = Warhammer® 40,000™: Dawn of War® II - Chaos Rising™ "Steam App 400" = Portal "Steam App 41000" = Serious Sam HD: The First Encounter "Steam App 42680" = Call of Duty: Modern Warfare 3 "Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer "Steam App 55150" = Warhammer 40,000 Space Marine "Steam App 56400" = Warhammer® 40,000™: Dawn of War® II – Retribution™ "Winamp" = Winamp "WinRAR archiver" = WinRAR 4.20 (32-bit) [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "GG" = GG "JDownloader Download Accelerator Packages" = JDownloader Download Accelerator Packages "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-10-29 06:31:23 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x7b8 Faulting application start time: 0x01cdb5c088679c30 Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: c88a20be-21b3-11e2-ab53-ed3b13c37071 Error - 2012-10-29 06:31:43 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0xc8c Faulting application start time: 0x01cdb5c0959d4c9b Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: d464e5ba-21b3-11e2-ab53-fc2ffebcf946 Error - 2012-10-29 21:10:26 | Computer Name = Kapr-PC | Source = Application Hang | ID = 1002 Description = The program hl2.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 430 Start Time: 01cdb61faaf56caa Termination Time: 660 Application Path: d:\steam\steamapps\kapromer\team fortress 2\hl2.exe Report Id: Error - 2012-10-30 05:52:53 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x71c Faulting application start time: 0x01cdb68450278e16 Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: 92157c37-2277-11e2-a4f0-bda216f65f72 Error - 2012-10-30 06:48:52 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x6fc Faulting application start time: 0x01cdb68c2129cbac Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: 64329fca-227f-11e2-8e72-926754ed7373 Error - 2012-10-31 05:03:15 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x794 Faulting application start time: 0x01cdb7468c9b747d Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: cdeaa1ef-2339-11e2-84e4-942f1d95e271 Error - 2012-11-01 13:08:14 | Computer Name = Kapr-PC | Source = Application Hang | ID = 1002 Description = The program Steam.exe version 1.0.1446.623 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: e08 Start Time: 01cdb80809ea2b28 Termination Time: 103 Application Path: D:\Steam\Steam.exe Report Id: a945244a-2446-11e2-bfaf-b78542697641 Error - 2012-11-02 06:50:02 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x750 Faulting application start time: 0x01cdb8e7cca92f16 Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: 0d89181a-24db-11e2-b57a-b5e9aa30bb71 Error - 2012-11-03 09:44:58 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0xbfc Faulting application start time: 0x01cdb9c961778405 Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: a7d9cc58-25bc-11e2-b57a-bbeac768ff41 Error - 2012-11-04 07:57:19 | Computer Name = Kapr-PC | Source = Application Error | ID = 1000 Description = Faulting application name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Faulting module name: RtWlan.exe, version: 1.0.0.9, time stamp: 0x4d8b6c0f Exception code: 0xc000000d Fault offset: 0x00084540 Faulting process id: 0x770 Faulting application start time: 0x01cdba83876e21e0 Faulting application path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Faulting module path: C:\Program Files\ASUS\N10 WLAN Card Utilities\RtWlan.exe Report Id: c886224d-2676-11e2-a012-edc0a8307f70 [ Media Center Events ] Error - 2012-09-05 17:16:53 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 23:16:53 - Error connecting to the internet. 23:16:53 - Unable to contact server.. Error - 2012-09-05 21:13:32 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 03:13:32 - Error connecting to the internet. 03:13:32 - Unable to contact server.. Error - 2012-09-05 22:29:54 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 04:29:54 - Error connecting to the internet. 04:29:54 - Unable to contact server.. Error - 2012-09-05 23:30:55 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 05:30:55 - Error connecting to the internet. 05:30:55 - Unable to contact server.. Error - 2012-09-06 00:35:46 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 06:35:46 - Error connecting to the internet. 06:35:46 - Unable to contact server.. Error - 2012-09-07 05:25:27 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 11:25:26 - Error connecting to the internet. 11:25:26 - Unable to contact server.. Error - 2012-09-09 16:09:24 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 22:09:24 - Error connecting to the internet. 22:09:24 - Unable to contact server.. Error - 2012-09-09 16:09:34 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 22:09:29 - Error connecting to the internet. 22:09:29 - Unable to contact server.. Error - 2012-09-21 04:13:22 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 10:13:21 - Error connecting to the internet. 10:13:22 - Unable to contact server.. Error - 2012-09-21 04:13:31 | Computer Name = Kapr-PC | Source = MCUpdate | ID = 0 Description = 10:13:27 - Error connecting to the internet. 10:13:27 - Unable to contact server.. [ System Events ] Error - 2012-11-04 08:46:20 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:51:12 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:51:12 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:51:12 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:53:28 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:53:28 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:53:28 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:58:20 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:58:20 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error - 2012-11-04 08:58:20 | Computer Name = Kapr-PC | Source = Service Control Manager | ID = 7001 Description = The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 < End of report >