OTL Extras logfile created on: 2012-11-13 18:46:46 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = H:\
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,25 Gb Total Physical Memory | 1,60 Gb Available Physical Memory | 49,41% Memory free
6,68 Gb Paging File | 5,23 Gb Available in Paging File | 78,29% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,59 Gb Total Space | 16,27 Gb Free Space | 16,18% Space Free | Partition Type: NTFS
Drive D: | 184,51 Gb Total Space | 44,86 Gb Free Space | 24,31% Space Free | Partition Type: NTFS
Drive E: | 180,66 Gb Total Space | 179,68 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
 
Computer Name: OEM-PC | User Name: oem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-3828063910-3716613409-77487195-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-3828063910-3716613409-77487195-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01B3C922-2515-4558-9AC5-516C85BE16EE}" = lport=139 | protocol=6 | dir=in | app=system | 
"{4C27BD96-1FEC-4D82-9F7C-B5DD51C36F1C}" = lport=49249 | protocol=6 | dir=in | name=akamai netsession interface | 
"{7BB151BE-5CBD-4BD5-9D94-6C85DC186BAD}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{871659FD-8B73-4B71-B1A4-79E193EDAD34}" = rport=445 | protocol=6 | dir=out | app=system | 
"{917A47E6-0301-4A3E-8609-F13853EB7063}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{9B8FA308-D2B8-4D9C-82DA-E25985FFF1B5}" = lport=445 | protocol=6 | dir=in | app=system | 
"{AEA2279F-9916-448B-A012-03F8600A1227}" = rport=138 | protocol=17 | dir=out | app=system | 
"{B5FB89DD-6362-4A3B-9B4B-F344388C0B09}" = rport=137 | protocol=17 | dir=out | app=system | 
"{BBFC7BF7-A6D0-42A7-9068-3773D98CB5DD}" = lport=137 | protocol=17 | dir=in | app=system | 
"{C40040F0-95A0-4200-9933-E4A49EC70D4F}" = rport=139 | protocol=6 | dir=out | app=system | 
"{CCB75835-3281-4265-9215-E072571B905E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{DA79E850-F3AE-410E-992D-FC42844D87D2}" = lport=138 | protocol=17 | dir=in | app=system | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01F53D48-D4D6-489D-A975-8C2BB84F4EE3}" = protocol=17 | dir=in | app=d:\assassin's creed\uplaybrowser.exe | 
"{0BE52C69-32A4-438A-92ED-2CB20F594F2F}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{0F2BAA5C-58AE-4618-8583-0C5D70FE7FA2}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{140EC4C6-1CE3-4AA7-9ACE-08F99D4B9413}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{1546C8BE-1EA3-420C-A654-ACA4B97254AC}" = protocol=17 | dir=in | app=c:\program files\thomson\st330\service\st330service.exe | 
"{15804F1F-682B-4A93-9C46-62E3270EBAC6}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{1A3ACE1B-5C12-4AAC-8ACC-02E8FD28DA27}" = protocol=6 | dir=in | app=c:\program files\thomson\st330\service\st330service.exe | 
"{1AA8876C-B766-496C-BC68-DC39271D4802}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{1D5C802C-ED9A-4F61-AEEC-90C6CF9FA3AA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{21F9F39F-7F67-47B1-B532-849B0EC4DD88}" = protocol=6 | dir=in | app=c:\program files\dibanet\dibanet.exe | 
"{29AEA661-1309-4BA7-BC42-3BF0C7D128E9}" = protocol=6 | dir=in | app=d:\wow\world of warcraft\launcher.patch.exe | 
"{2B73888B-8DA7-4B62-9934-36E9E5F894AE}" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{30ACF034-BFE3-4471-A8D8-C726F572EFC1}" = dir=in | app=c:\program files\avg\avg9\avgupd.exe | 
"{3A47C1CD-34C8-4312-83B2-1960F61F2206}" = protocol=6 | dir=in | app=c:\program files\imesh applications\mediabar\datamngr\toolbar\dtuser.exe | 
"{3D58A2C6-840E-420C-89F3-76307689ABDF}" = dir=in | app=c:\program files\avg\avg9\avgnsx.exe | 
"{41B428C6-A399-4F40-A264-C15944300691}" = protocol=17 | dir=in | app=d:\assassin's creed\assassinscreedii.exe | 
"{46781FE1-AECA-4D13-8113-35B3B687EE93}" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{4AA32F81-3161-44E0-A150-D973DDA8DFC0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{4D8F6DB2-74BA-4A27-B52B-D4DC0820B467}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{517C26B9-A36B-4042-9535-F5A0A6C621C5}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{61BC5AAD-FDC6-44AA-905F-FA7F009FF9A8}" = protocol=6 | dir=in | app=c:\program files\dibanet\renderacclient.exe | 
"{67B333FA-405F-43A9-A5D9-EEBE5809A90D}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{82358206-D109-4775-8673-96C56DEF5EAF}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{8C7E4BCD-2A41-4B33-9A57-C58C2D041AA2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{91E2E155-C29C-4B66-B089-B856D7568A7A}" = protocol=6 | dir=in | app=d:\multimo\installer.exe | 
"{A335E7DC-D48C-4544-B771-3F7CE15DDF2A}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{AA4C09FB-F073-40B0-9A0F-3350E9196E63}" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{AC71B07F-C3AD-4702-AA25-BBFB4DE98FB0}" = protocol=17 | dir=in | app=d:\wow\world of warcraft\launcher.patch.exe | 
"{ACFDC68D-5AE8-4774-B832-D17013A8E506}" = protocol=17 | dir=in | app=d:\wow\world of warcraft\launcher.exe | 
"{AD067448-C465-4652-AD04-33E6024C2845}" = protocol=17 | dir=in | app=d:\multimo\st330_vista\st330v4103\sthiwv\stinstall.exe | 
"{B303124F-A8DC-42EC-A132-9BA118CAF0C0}" = protocol=17 | dir=in | app=d:\torrent\utorrent.exe | 
"{B5A12B89-EE1E-487B-9B9D-35FC9BCE8978}" = protocol=6 | dir=in | app=d:\torrent\utorrent.exe | 
"{B6ABD6DC-ACF0-4FA0-8D56-30D9BF08DA6B}" = protocol=17 | dir=in | app=c:\program files\imesh applications\mediabar\datamngr\toolbar\dtuser.exe | 
"{BA6BAD3C-188F-491D-8ED0-22450A74E704}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{C214C7F0-7A84-4DC0-B57F-8FA3297025A3}" = protocol=17 | dir=in | app=d:\multimo\installer.exe | 
"{C667D954-AFF3-438C-BB54-262E5EEE674A}" = protocol=17 | dir=in | app=c:\program files\dibanet\renderacclient.exe | 
"{D190B61F-0D19-48AF-B3F9-1E6711F89EBE}" = protocol=17 | dir=in | app=c:\program files\dibanet\dibanet.exe | 
"{D379544B-83C3-4F65-82F4-7A4AA61E5E04}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{DAE4DF81-B79E-494F-A2DC-2611DE5AFE97}" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\installer.exe | 
"{E0E11526-52D1-4227-9509-247385569238}" = protocol=6 | dir=in | app=d:\assassin's creed\assassinscreediigame.exe | 
"{E338420D-D854-4D02-927C-A1D240C481EC}" = protocol=17 | dir=in | app=d:\assassin's creed\assassinscreediigame.exe | 
"{E4A508FD-0937-463D-AB16-B8E453A0D307}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{E73817E5-42F3-4A71-9100-1FF4C05F0873}" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{E94C576F-E878-4371-901B-D98710F475F2}" = protocol=6 | dir=in | app=d:\wow\world of warcraft\launcher.exe | 
"{EA8B983D-5322-437C-AAB7-597D7634EA88}" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\installer.exe | 
"{F1B0CF34-E4FA-4216-8618-273B8CC5E2D9}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{F293C7D5-7BD3-4754-B033-FF166C5B4ED7}" = protocol=6 | dir=in | app=d:\assassin's creed\assassinscreedii.exe | 
"{FB4D6F1D-DE2F-4BB1-9C01-512176F106ED}" = protocol=6 | dir=in | app=d:\multimo\st330_vista\st330v4103\sthiwv\stinstall.exe | 
"{FF6358C7-DD34-4A63-95D3-9199E13E9DC5}" = protocol=6 | dir=in | app=d:\assassin's creed\uplaybrowser.exe | 
"TCP Query User{0616008E-AF4D-43DF-951A-C7C00C1DFFB4}C:\program files\imesh applications\imesh\imesh.exe" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"TCP Query User{07081592-0EF1-493B-BDE1-AF2693129D21}C:\users\oem\desktop\gry\metin2\mian.bat" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\mian.bat | 
"TCP Query User{0D003D99-159A-4341-961E-292541C13246}C:\users\oem\desktop\metin2\metin2\metin2.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2.exe | 
"TCP Query User{0FA96FDD-6D50-4134-9BB4-1C8B84A823EA}C:\users\oem\appdata\local\temp\shenlong.bin" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\shenlong.bin | 
"TCP Query User{1144916D-4AA8-4A54-8268-E2837BD2EE55}C:\users\oem\desktop\metin2\metin2\promt2.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\promt2.exe | 
"TCP Query User{11D58B39-AD11-4A59-9551-02A93B6DF732}C:\users\oem\appdata\local\temp\rar$ex01.977\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.977\tomypolacy\tomypolacy.exe | 
"TCP Query User{132B81FC-991F-49A0-8BA0-73207DD1D53C}C:\users\oem\desktop\gry\metin2\metin2.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2.bin | 
"TCP Query User{13DCE794-EAB3-4983-BD58-2F8AF465376E}C:\users\oem\appdata\local\temp\rar$ex02.964\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex02.964\tomypolacy\tomypolacy.exe | 
"TCP Query User{15A2513F-A7D2-4C14-822B-A2F7AA1C366A}C:\users\oem\appdata\local\temp\rar$ex01.884\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.884\tomypolacy\tomypolacy.exe | 
"TCP Query User{1801445E-F066-4458-8FF7-1A0A3649F7D2}C:\users\oem\desktop\gry\x-world\x-world.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\x-world\x-world.exe | 
"TCP Query User{1985F22B-68D7-4EF6-AC40-47116F519A97}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{1B6349A9-C4C6-44E2-A761-A8462957C2C5}C:\users\oem\downloads\utorrent(2).exe" = protocol=6 | dir=in | app=c:\users\oem\downloads\utorrent(2).exe | 
"TCP Query User{1DC5B16B-6CC0-49D5-A38E-F0115E564C84}C:\users\oem\desktop\metin2\metin2\duli spol by mrzaqqq.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\duli spol by mrzaqqq.exe | 
"TCP Query User{2188EA55-265A-4FC6-8F15-3E2B34FB56EF}C:\program files\ogniem i mieczem - dzikie pola\mb-oim.exe" = protocol=6 | dir=in | app=c:\program files\ogniem i mieczem - dzikie pola\mb-oim.exe | 
"TCP Query User{241A206C-3FA9-48EB-8029-7B09B8509925}C:\users\oem\appdata\local\temp\rar$ex00.585\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.585\tomypolacy\tomypolacy.exe | 
"TCP Query User{2482BB27-6E3F-40DF-A62F-97FDFE471909}C:\users\oem\appdata\local\temp\rar$ex00.631\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.631\tomypolacy\tomypolacy.exe | 
"TCP Query User{2685CBD8-E7C4-48D9-BA8E-EC43CEA26775}C:\users\oem\desktop\metin2\metin2\yiytian\yitian2\metin2client.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\yiytian\yitian2\metin2client.bin | 
"TCP Query User{29F95A18-2A8C-42C5-AFB9-E009ADA13591}C:\users\oem\desktop\gry\metin2\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\tomypolacy\tomypolacy.exe | 
"TCP Query User{2BA86311-E680-4BA9-A0B4-F37457BFFE5E}C:\users\oem\appdata\local\temp\rar$ex00.552\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.552\tomypolacy\tomypolacy.exe | 
"TCP Query User{2E5CFF18-25F1-4347-A6F6-800E0A1ABE0A}C:\users\oem\desktop\gry\metin2\feragonmt285.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\feragonmt285.exe | 
"TCP Query User{2E86871D-3573-4ADD-B53A-4A95E83595B0}C:\users\oem\appdata\local\temp\rar$ex00.865\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.865\tomypolacy\tomypolacy.exe | 
"TCP Query User{4BE045D3-63B5-45D4-A2D6-6840D8E9BEE1}C:\users\oem\desktop\metin2\metin2\metin2mod.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2mod.bin | 
"TCP Query User{4D573D81-C5A1-4C16-9812-6890277DF64A}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{5786AD6D-76BC-4197-BE18-1C6903E556AF}C:\users\oem\desktop\metin2\virtual\virtualmt2\virtualmt2.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\virtual\virtualmt2\virtualmt2.exe | 
"TCP Query User{58B4AF35-515E-4A94-A53F-9F7C97EFBA5E}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{65885896-957F-412E-8445-3DB51CC17BBD}C:\users\oem\appdata\local\temp\rar$ex00.737\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.737\tomypolacy\tomypolacy.exe | 
"TCP Query User{6DE10DAA-11CF-4E8A-8E3D-CC5B1454196E}C:\users\oem\desktop\gry\metin2\metin2client.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2client.bin | 
"TCP Query User{7136B7C2-568B-45CC-88F2-3BAEA0F976B8}D:\wow\world of warcraft\temp\wow-4.2.1.2617-enus-tools-downloader.exe" = protocol=6 | dir=in | app=d:\wow\world of warcraft\temp\wow-4.2.1.2617-enus-tools-downloader.exe | 
"TCP Query User{76417888-331A-4262-8C08-387BDF218969}D:\wiedźmin 2\wiedźmin2\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\wiedźmin 2\wiedźmin2\bin\witcher2.exe | 
"TCP Query User{76A2CCA2-A8A0-41B4-82D0-F88943A3DFBD}C:\users\oem\desktop\gry\metin2\csyt2.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\csyt2.exe | 
"TCP Query User{7988D9B3-90D4-47AF-8C68-45A2D80AE729}C:\users\oem\desktop\metin2\metin2\metin2 dedyk\starter.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2 dedyk\starter.exe | 
"TCP Query User{7A75D156-E3C3-47F5-9E63-A6C2613C8C02}C:\users\oem\desktop\metin2\metin2\metin2.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2.bin | 
"TCP Query User{7BC01C92-4DEB-429B-B831-B4177F499CBE}C:\users\oem\appdata\local\temp\rar$ex01.669\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.669\tomypolacy\tomypolacy.exe | 
"TCP Query User{7D02D5C3-6C02-4293-B036-C68B924CBCDF}C:\users\oem\appdata\local\temp\rar$ex00.848\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.848\tomypolacy\tomypolacy.exe | 
"TCP Query User{7DDE8D57-99FB-4808-B0AD-210F7A6264B9}C:\users\oem\appdata\local\temp\rar$ex00.315\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.315\tomypolacy\tomypolacy.exe | 
"TCP Query User{7F99C5CF-A563-450E-9B41-BE475313E121}C:\users\oem\appdata\local\temp\rar$ex02.480\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex02.480\tomypolacy\tomypolacy.exe | 
"TCP Query User{8024E31E-06F6-4393-B6CA-1D9F7C8767EF}D:\wiedźmin\wiedźmin2\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\wiedźmin\wiedźmin2\bin\witcher2.exe | 
"TCP Query User{8239339F-2EAC-4FA5-80CA-C428C89F7742}C:\users\oem\appdata\local\temp\rar$ex00.192\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.192\tomypolacy\tomypolacy.exe | 
"TCP Query User{8380C93E-0365-4BF3-9D7C-B31B7CB8BFCB}C:\users\oem\desktop\gry\metin2\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\tomypolacy.exe | 
"TCP Query User{8490985B-8A27-4741-B222-2D26C5FE01C4}C:\users\oem\appdata\local\temp\rar$ex00.959\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.959\tomypolacy\tomypolacy.exe | 
"TCP Query User{853ACB7D-495D-4133-B605-B6C4BAF5F9E3}C:\users\oem\appdata\local\temp\rar$ex00.784\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.784\tomypolacy\tomypolacy.exe | 
"TCP Query User{8AA3D2C2-11A1-494E-B984-FC305311EFDA}C:\users\oem\appdata\local\temp\rar$ex00.332\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.332\tomypolacy\tomypolacy.exe | 
"TCP Query User{8C0883F3-AA24-42D5-A9D3-491BB63F616F}C:\users\oem\appdata\local\temp\rar$ex22.7148\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex22.7148\tomypolacy\tomypolacy.exe | 
"TCP Query User{8D816B45-4D10-4FA2-A40A-AD427629A09D}C:\users\oem\desktop\gry\metin2\mt2pol.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\mt2pol.exe | 
"TCP Query User{91B905E7-5DF7-4251-9CFD-A06C2C666589}C:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"TCP Query User{A6BA457B-11E1-4DBC-BDDE-F9958CA42175}D:\wow\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=d:\wow\world of warcraft\backgrounddownloader.exe | 
"TCP Query User{AAF8CA28-D95E-4151-B913-00E0E4B30E27}C:\users\oem\desktop\metin2\2008 rok mt2\metin2.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\2008 rok mt2\metin2.bin | 
"TCP Query User{B16351D1-6E3E-4FF4-A6C6-08D6C82B9B5E}C:\program files\metin2_pl\metin2.bin" = protocol=6 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"TCP Query User{B94403BA-8623-4F6F-8379-1F3752ADC128}C:\users\oem\desktop\gry\metin2\0_insanemt2_spol_by_lost.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\0_insanemt2_spol_by_lost.exe | 
"TCP Query User{B9E64364-5857-45F1-BBEF-9925B2CF7AC6}C:\users\oem\desktop\metin2\metin2\cylj2.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\cylj2.bin | 
"TCP Query User{BE537557-1C8F-49B0-B69C-591EDF67EE7C}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{BEF2E533-3DB7-4DF3-9E06-1FA07E732964}C:\users\oem\appdata\local\temp\rar$ex04.462\metin2zzyt2\metin_zzyt2.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex04.462\metin2zzyt2\metin_zzyt2.exe | 
"TCP Query User{C1575121-74F7-4218-9B73-5A5B513AF63D}C:\users\oem\desktop\metin2\virtual\virtualmt2\metin2mod_2011sf.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\virtual\virtualmt2\metin2mod_2011sf.exe | 
"TCP Query User{C1B52BBF-59E7-4ACD-8F49-CE3713244F1B}C:\users\oem\desktop\gry\metin2\metin2mod.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2mod.bin | 
"TCP Query User{C6DC03AD-DCC1-4597-9A01-1BDFBF7111C7}C:\users\oem\desktop\nowy folder\metin2\metin2mod.bin" = protocol=6 | dir=in | app=c:\users\oem\desktop\nowy folder\metin2\metin2mod.bin | 
"TCP Query User{CFB8ACC8-915E-4AA8-83F1-AE734F1AACDD}C:\users\oem\desktop\x-world\x-world.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\x-world\x-world.exe | 
"TCP Query User{DD9ED55D-7750-44C9-A254-C91A6717B1FA}C:\users\oem\appdata\local\temp\rar$ex01.973\tomypolacy\tomypolacy.exe" = protocol=6 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.973\tomypolacy\tomypolacy.exe | 
"TCP Query User{E3783D0E-0652-4E50-AC03-BDB9C386FC32}C:\users\oem\desktop\metin2\metin2\xenox\xenox_mt2_klient(nowy patch 03.09.2011r)\xenoxmt2 launcher.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\metin2\metin2\xenox\xenox_mt2_klient(nowy patch 03.09.2011r)\xenoxmt2 launcher.exe | 
"TCP Query User{E3D2A17E-3B6B-4A8C-8DFB-39EC249D4668}C:\users\oem\desktop\gry\metin2\cityofmetin2 by lether.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\cityofmetin2 by lether.exe | 
"TCP Query User{EF0E3CFB-9F0A-439E-9AB1-493CFB8EA188}C:\program files\nero\nero 7\nero showtime\showtime.exe" = protocol=6 | dir=in | app=c:\program files\nero\nero 7\nero showtime\showtime.exe | 
"TCP Query User{FF3EEECE-21DF-45E2-9384-2E97456DAF22}C:\users\oem\desktop\gry\metin2\novamt2.exe" = protocol=6 | dir=in | app=c:\users\oem\desktop\gry\metin2\novamt2.exe | 
"UDP Query User{0434C340-E1B2-4A3C-A4C0-AAC4E10351F5}C:\users\oem\desktop\metin2\metin2\xenox\xenox_mt2_klient(nowy patch 03.09.2011r)\xenoxmt2 launcher.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\xenox\xenox_mt2_klient(nowy patch 03.09.2011r)\xenoxmt2 launcher.exe | 
"UDP Query User{080D159B-62DB-4362-9D33-E0AB58B8F03F}C:\users\oem\downloads\utorrent(2).exe" = protocol=17 | dir=in | app=c:\users\oem\downloads\utorrent(2).exe | 
"UDP Query User{0BDB8C25-4E88-4E9C-9391-581BCAFC959D}C:\users\oem\appdata\local\temp\rar$ex00.631\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.631\tomypolacy\tomypolacy.exe | 
"UDP Query User{182DA901-A588-4390-A2F8-A0DB541A766F}C:\users\oem\appdata\local\temp\rar$ex04.462\metin2zzyt2\metin_zzyt2.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex04.462\metin2zzyt2\metin_zzyt2.exe | 
"UDP Query User{1E3F5813-CFB3-40CF-A77C-44B8A25829C3}C:\users\oem\appdata\local\temp\rar$ex01.973\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.973\tomypolacy\tomypolacy.exe | 
"UDP Query User{1F79774D-E741-4F24-B970-5B955F4490DC}C:\users\oem\appdata\local\temp\rar$ex00.848\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.848\tomypolacy\tomypolacy.exe | 
"UDP Query User{214E5A48-CCA8-424C-A58B-22409A04B89C}C:\users\oem\desktop\metin2\metin2\metin2.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2.bin | 
"UDP Query User{224EC8FB-23C7-4684-8C81-7685FE298C73}C:\users\oem\appdata\local\temp\rar$ex00.784\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.784\tomypolacy\tomypolacy.exe | 
"UDP Query User{24E9C110-9951-42D6-867D-51064EB9F4E3}C:\users\oem\appdata\local\temp\rar$ex01.669\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.669\tomypolacy\tomypolacy.exe | 
"UDP Query User{25D02BE4-A4DA-4752-911A-057803715EAF}C:\users\oem\appdata\local\temp\rar$ex00.192\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.192\tomypolacy\tomypolacy.exe | 
"UDP Query User{2A21C602-C8D0-4119-B535-AA15F022FC3A}C:\users\oem\desktop\metin2\metin2\metin2.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2.exe | 
"UDP Query User{2D243B65-9CD4-49E8-B5B3-B7F2C671A549}C:\users\oem\desktop\metin2\metin2\metin2mod.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2mod.bin | 
"UDP Query User{354F8C9A-6917-4DDC-8259-FBF708AEAE73}C:\users\oem\desktop\metin2\virtual\virtualmt2\virtualmt2.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\virtual\virtualmt2\virtualmt2.exe | 
"UDP Query User{366301E1-C240-4E59-8350-2085CE323A03}C:\users\oem\appdata\local\temp\rar$ex00.959\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.959\tomypolacy\tomypolacy.exe | 
"UDP Query User{3ABD6AB6-ED50-47F1-AAE6-56778918E643}C:\users\oem\desktop\metin2\metin2\yiytian\yitian2\metin2client.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\yiytian\yitian2\metin2client.bin | 
"UDP Query User{4E366D6F-F1B8-418B-921B-3792779F3517}C:\users\oem\desktop\nowy folder\metin2\metin2mod.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\nowy folder\metin2\metin2mod.bin | 
"UDP Query User{527019BD-79E9-4C28-A575-23941A604959}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{555F2D95-0375-4771-A29C-93CCE106BB05}C:\users\oem\desktop\gry\metin2\novamt2.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\novamt2.exe | 
"UDP Query User{635FFEDD-D3E2-4EAD-827F-0C044F3AD7D8}C:\program files\ogniem i mieczem - dzikie pola\mb-oim.exe" = protocol=17 | dir=in | app=c:\program files\ogniem i mieczem - dzikie pola\mb-oim.exe | 
"UDP Query User{6582BB2D-7B5E-43DC-95A0-CD9317A3C090}C:\users\oem\desktop\metin2\metin2\promt2.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\promt2.exe | 
"UDP Query User{69D30663-90DB-4AD3-BC46-764249E6767C}C:\users\oem\desktop\gry\metin2\feragonmt285.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\feragonmt285.exe | 
"UDP Query User{6BBEEF90-7E26-43D8-B39A-19C88A160714}C:\users\oem\desktop\x-world\x-world.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\x-world\x-world.exe | 
"UDP Query User{767AC90D-F06A-42B3-B7FC-03FB98B19F76}C:\users\oem\desktop\gry\metin2\metin2.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2.bin | 
"UDP Query User{7B7C7333-EA28-44B3-BA1C-0B700C625282}C:\users\oem\appdata\local\temp\rar$ex00.865\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.865\tomypolacy\tomypolacy.exe | 
"UDP Query User{7C642377-BDFA-4F63-B439-D0DDB966F307}C:\users\oem\desktop\gry\metin2\mian.bat" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\mian.bat | 
"UDP Query User{7CF6865D-145F-4693-A297-FA98AC10AEAC}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{7ED83C55-B0BA-4715-BE45-7EC37E8197CE}C:\users\oem\desktop\metin2\metin2\metin2 dedyk\starter.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\metin2 dedyk\starter.exe | 
"UDP Query User{83E037B8-8DB9-45B6-893C-4940C6782E64}D:\wiedźmin 2\wiedźmin2\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\wiedźmin 2\wiedźmin2\bin\witcher2.exe | 
"UDP Query User{84518D89-B7B4-4471-85E8-E4E1C19D944E}C:\program files\metin2_pl\metin2.bin" = protocol=17 | dir=in | app=c:\program files\metin2_pl\metin2.bin | 
"UDP Query User{8B00E84E-6C46-47F9-8197-DEB84778AF37}C:\users\oem\desktop\gry\metin2\csyt2.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\csyt2.exe | 
"UDP Query User{8B97F436-E209-407E-B913-44DE1DCBBA0E}C:\users\oem\appdata\local\temp\rar$ex01.884\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.884\tomypolacy\tomypolacy.exe | 
"UDP Query User{8D2FEF7B-95B6-4144-ACBE-153A8014AC99}D:\wiedźmin\wiedźmin2\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\wiedźmin\wiedźmin2\bin\witcher2.exe | 
"UDP Query User{8D32AC5C-D061-4C9E-A052-6B6B3C7FB6E0}D:\wow\world of warcraft\temp\wow-4.2.1.2617-enus-tools-downloader.exe" = protocol=17 | dir=in | app=d:\wow\world of warcraft\temp\wow-4.2.1.2617-enus-tools-downloader.exe | 
"UDP Query User{8E511FC2-0F0A-43E7-BC3E-1CBDFBEEA0C4}C:\users\oem\desktop\metin2\2008 rok mt2\metin2.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\2008 rok mt2\metin2.bin | 
"UDP Query User{91EAED90-01E1-4F00-91C3-B09A3857619C}C:\users\oem\appdata\local\temp\rar$ex02.480\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex02.480\tomypolacy\tomypolacy.exe | 
"UDP Query User{97A11A2A-8BED-4F22-BB43-BA6746524247}C:\users\oem\appdata\local\temp\rar$ex22.7148\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex22.7148\tomypolacy\tomypolacy.exe | 
"UDP Query User{99F008D6-7446-4CEF-93D5-7CDE4D9D8800}C:\users\oem\desktop\gry\metin2\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\tomypolacy.exe | 
"UDP Query User{9D497A9F-F88B-4692-9CE9-C55EE2393E3B}C:\users\oem\appdata\local\temp\rar$ex00.315\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.315\tomypolacy\tomypolacy.exe | 
"UDP Query User{9DBF91F8-5F2A-4713-A4F2-755C78A2878A}C:\program files\nero\nero 7\nero showtime\showtime.exe" = protocol=17 | dir=in | app=c:\program files\nero\nero 7\nero showtime\showtime.exe | 
"UDP Query User{9EB00DDC-C2C6-435E-936B-2819C50982C6}C:\users\oem\appdata\local\temp\rar$ex00.552\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.552\tomypolacy\tomypolacy.exe | 
"UDP Query User{A447DE35-9844-4F37-A178-C17C283BC63E}C:\users\oem\appdata\local\temp\rar$ex00.585\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.585\tomypolacy\tomypolacy.exe | 
"UDP Query User{AACEB5AC-7026-48D6-985A-1D9265194E09}C:\users\oem\appdata\local\temp\rar$ex01.977\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex01.977\tomypolacy\tomypolacy.exe | 
"UDP Query User{AB8524D4-0A9B-44A8-98CC-D85029A1F37D}C:\users\oem\appdata\local\temp\rar$ex00.737\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.737\tomypolacy\tomypolacy.exe | 
"UDP Query User{AE207B84-2E3C-4866-BE06-E649AB7D5A79}C:\program files\imesh applications\imesh\imesh.exe" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"UDP Query User{AF305753-A4BF-40C5-9BA4-1F4D2C7C17DD}C:\users\oem\desktop\gry\metin2\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\tomypolacy\tomypolacy.exe | 
"UDP Query User{B1E2DA57-106F-4F0B-8BED-BAB9686206F6}C:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"UDP Query User{BE4B5622-1FC1-4688-82DD-2D4F10E539B0}C:\users\oem\desktop\metin2\metin2\cylj2.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\cylj2.bin | 
"UDP Query User{D6A34C42-C475-4D0B-8400-3C71F004D896}C:\users\oem\desktop\gry\metin2\metin2client.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2client.bin | 
"UDP Query User{D987E835-54B8-4C8B-8CA5-5E384548FDA4}C:\users\oem\desktop\gry\metin2\0_insanemt2_spol_by_lost.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\0_insanemt2_spol_by_lost.exe | 
"UDP Query User{DA1D08CB-EF6A-4281-868A-F039D9A15A57}C:\users\oem\desktop\gry\metin2\cityofmetin2 by lether.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\cityofmetin2 by lether.exe | 
"UDP Query User{DB8489E3-F894-4575-95EF-ED5E794921B3}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{E0C401E4-61B5-4BBC-BD15-B688BCC68B7F}C:\users\oem\desktop\gry\x-world\x-world.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\x-world\x-world.exe | 
"UDP Query User{E3DFF133-1443-4D4F-884E-39C5F43FF2C0}C:\users\oem\desktop\gry\metin2\metin2mod.bin" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\metin2mod.bin | 
"UDP Query User{E7F51485-E54E-4BB0-8D24-BBF0FAB2AEE1}C:\users\oem\appdata\local\temp\rar$ex00.332\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex00.332\tomypolacy\tomypolacy.exe | 
"UDP Query User{E9D93A99-DF7B-43A2-86D6-BF06FDCEF66C}D:\wow\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=d:\wow\world of warcraft\backgrounddownloader.exe | 
"UDP Query User{EADEE1C3-3296-4676-AEBF-E8299C971C06}C:\users\oem\desktop\metin2\virtual\virtualmt2\metin2mod_2011sf.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\virtual\virtualmt2\metin2mod_2011sf.exe | 
"UDP Query User{EC8EC2B8-5053-44AE-BD58-85B9F594309D}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{F11CF7D2-92E6-4558-AEBC-B17C2D0EC736}C:\users\oem\desktop\gry\metin2\mt2pol.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\gry\metin2\mt2pol.exe | 
"UDP Query User{F1DC1506-4D6E-418C-928A-16E314CE43FE}C:\users\oem\appdata\local\temp\shenlong.bin" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\shenlong.bin | 
"UDP Query User{FD307D3C-3FD4-48D2-B5C8-FBE8046AF6DD}C:\users\oem\appdata\local\temp\rar$ex02.964\tomypolacy\tomypolacy.exe" = protocol=17 | dir=in | app=c:\users\oem\appdata\local\temp\rar$ex02.964\tomypolacy\tomypolacy.exe | 
"UDP Query User{FE6302A3-E06D-43FE-BA59-535AD2240620}C:\users\oem\desktop\metin2\metin2\duli spol by mrzaqqq.exe" = protocol=17 | dir=in | app=c:\users\oem\desktop\metin2\metin2\duli spol by mrzaqqq.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0817A2F5-F1FC-4FA0-9C40-3E12B41DDD73}_is1" = HEXelon Free 5.00
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1A6A6531-08FC-47AD-BAC4-C41497E71045}" = Nero 7 Essentials
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23DD6DAA-DDEF-41F5-A527-CECF07FA2CAF}" = 1500
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83217001FF}" = Java(TM) 7 Update 1
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{32E2F180-247C-4077-B06A-20F9868568E0}_is1" = UltraMixer 2.3.7.1
"{3A14DB5B-8D96-400C-BD97-A5656779099D}" = ArcSoft PhotoStudio 5.5
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF010}" = Tribes Ascend Open Beta
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51B46054-AE28-4BCD-8DE8-3901354F0A1C}" = Multimedia Keyboard Driver
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{6E65247F-58F9-41CA-BE69-0316F7907170}" = Disc2Phone
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{79403CDD-FDC6-4365-9C4E-16484A37D714}_is1" = Rus: XIII Century v 0.620
"{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax
"{7EE9145D-C430-44E6-B5ED-61FF9C332100}_is1" = Battle of the Immortals
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}_PROHYBRIDR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISER_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISER_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}_PROHYBRIDR_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISER_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}_PROHYBRIDR_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISER_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A2101ACC-DC36-42AA-A576-6FD6A8D466DA}" = 1500_Help
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{A4C6B32D-5088-40AF-B74D-CDABEF144F04}" = 1500Trb
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 280.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.4.28
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B395BC1D-CC06-425E-9049-4CD985EFF004}" = LightScribe  1.8.15.1
"{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{BF7A03E2-F7E4-4A91-8C17-E1BFCDAC0418}" = Jak rozpętałem II Wojnę Światową
"{C4B9D1E2-088C-4918-B7C7-DE3F0128367E}_is1" = VoxBox 2.52
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{EB87675F-5281-4767-A54B-31931794C23D}" = OpenOffice.org 3.3
"{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF47D09C-9392-487A-B7E5-986F6DB7B189}" = DibaNet 8.07
"{F0E2B312-D7FD-4349-A9B6-E90B36DB1BD0}" = Paint.NET v3.5.5
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp
"{FF35F637-72B9-43BE-A281-06EB2854393A}" = 3DMark03
"7-Zip" = 7-Zip 4.42
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AVG9Uninstall" = AVG Free 9.0
"CCleaner" = CCleaner
"dBpowerAMP Music Converter" = dBpowerAMP Music Converter
"ENTERPRISER" = Microsoft Office Enterprise 2007
"Gadu-Gadu 10" = Gadu-Gadu 10
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0
"iMesh" = iMesh
"InstallShield_{51B46054-AE28-4BCD-8DE8-3901354F0A1C}" = Multimedia Keyboard Driver
"InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 3.9.0
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mafia II_is1" = Mafia II
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mixxx (1.8.2)" = Mixxx 1.8.2
"Mount&Blade" = Mount&Blade
"Mozilla Firefox 16.0.2 (x86 pl)" = Mozilla Firefox 16.0.2 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MySSID_is1" = Vtune 7.21
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Traktor DJ Studio 3" = Native Instruments Traktor DJ Studio 3
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"PIT Format 2011_is1" = PIT Format 2011
"PROHYBRIDR" = 2007 Microsoft Office system
"PunkBusterSvc" = PunkBuster Services
"SpeedTouch 330" = SpeedTouch 330
"Spolszczenie" = Spolszczenie 1.0
"Steam" = Steam
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"V9Software" = V9 Homepage Uninstaller
"Warcraft III" = Warcraft III
"Winamp" = Winamp
"WinRAR archiver" = WinRAR archiver
"Xfire" = Xfire (remove only)
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3828063910-3716613409-77487195-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"FoxTab PDF Reader" = FoxTab PDF Reader
"Google Chrome" = Google Chrome
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-11-07 15:35:01 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd ntdll.dll, wersja 6.0.6002.18541, sygnatura
 czasowa 0x4ec3e3d5, kod wyjątku 0xc0000008, przesunięcie błędu 0x00074490,  identyfikator
 procesu 0xa8, godzina rozpoczęcia aplikacji 0x01cdbd1c95e2bc7f.
 
Error - 2012-11-11 16:53:55 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd kernel32.dll, wersja 6.0.6002.18449, 
sygnatura czasowa 0x4da47967, kod wyjątku 0xe06d7363, przesunięcie błędu 0x0003fc56,
identyfikator
 procesu 0x1e4c, godzina rozpoczęcia aplikacji 0x01cdc0487c964ec7.
 
Error - 2012-11-12 08:43:24 | Computer Name = oem-PC | Source = Application Hang | ID = 1002
Description = Program League of Legends.exe w wersji 1.0.0.150 zatrzymał interakcję
 z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej
 informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania
 raportami i rozwiązaniami problemów.  Identyfikator procesu: 160c  Godzina rozpoczęcia:
 01cdc0d32edbbfab  Godzina zakończenia: 40
 
Error - 2012-11-12 13:46:10 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x1690, godzina rozpoczęcia aplikacji 0x01cdc0fb3334e2a5.
 
Error - 2012-11-12 13:46:10 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x173c, godzina rozpoczęcia aplikacji 0x01cdc0fd59fd86b5.
 
Error - 2012-11-12 13:46:15 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x1984, godzina rozpoczęcia aplikacji 0x01cdc0fd9cfe6b55.
 
Error - 2012-11-12 13:46:16 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x19f8, godzina rozpoczęcia aplikacji 0x01cdc0fd9d708645.
 
Error - 2012-11-12 13:52:06 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x11bc, godzina rozpoczęcia aplikacji 0x01cdc0fe4ba9bf71.
 
Error - 2012-11-12 13:52:06 | Computer Name = oem-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 9.0.8112.16450, sygnatura
 czasowa 0x503723f6, moduł powodujący błąd IEBHO.dll, wersja 3.0.0.56544, sygnatura
 czasowa 0x4f537a29, kod wyjątku 0xc0000417, przesunięcie błędu 0x00091b32,  identyfikator
 procesu 0x1238, godzina rozpoczęcia aplikacji 0x01cdc0fe4dfc6201.
 
Error - 2012-11-13 10:24:52 | Computer Name = oem-PC | Source = EventSystem | ID = 4609
Description = 
 
[ System Events ]
Error - 2012-11-13 10:26:24 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-13 10:26:26 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-13 10:28:35 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-13 10:28:35 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-13 10:28:37 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-13 10:31:50 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 2012-11-13 12:32:33 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 2012-11-13 12:48:09 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 2012-11-13 12:48:09 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 2012-11-13 13:00:49 | Computer Name = oem-PC | Source = Service Control Manager | ID = 7026
Description = 
 
 
< End of report >