OTL Extras logfile created on: 2013-02-20 20:37:10 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = H:\
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,94 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 70,64% Memory free
3,79 Gb Paging File | 3,24 Gb Available in Paging File | 85,67% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 19,91 Gb Free Space | 33,98% Space Free | Partition Type: NTFS
Drive D: | 174,29 Gb Total Space | 174,22 Gb Free Space | 99,96% Space Free | Partition Type: NTFS
Drive F: | 0,06 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 3,73 Gb Total Space | 0,01 Gb Free Space | 0,39% Space Free | Partition Type: FAT32
 
Computer Name: 6E5D8DD602FD42F | User Name:   | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"2144:TCP" = 2144:TCP:*:Enabled:hcwiwy
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\hpwucli.exe" = C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"C:\WINDOWS\system32\wmpdb86.exe" = C:\WINDOWS\system32\wmpdb86.exe:*:Enabled:Windows Data Recovery
"C:\WINDOWS\system32\igfxsb86.exe" = C:\WINDOWS\system32\igfxsb86.exe:*:Enabled:Intel Service Driver
"C:\WINDOWS\system32\igfxsd86.exe" = C:\WINDOWS\system32\igfxsd86.exe:*:Enabled:Intel Data Service
"C:\WINDOWS\system32\wmpsl32.exe" = C:\WINDOWS\system32\wmpsl32.exe:*:Enabled:Windows Media Content
"C:\WINDOWS\system32\wmpsk32.exe" = C:\WINDOWS\system32\wmpsk32.exe:*:Enabled:Windows Media iCore
"C:\WINDOWS\system32\igfxvb32.exe" = C:\WINDOWS\system32\igfxvb32.exe:*:Enabled:Intel iBackup -- ()
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.)
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\hpwucli.exe" = C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"C:\Program Files\Cyanide\Igrzyska Zimowe 2007\WinterApp.exe" = C:\Program Files\Cyanide\Igrzyska Zimowe 2007\WinterApp.exe:*:Enabled:WinterChallenge
"C:\Program Files\Counter-Strike\hl.exe" = C:\Program Files\Counter-Strike\hl.exe:*:Enabled:Half-Life Launcher
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" = C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup
"C:\Program Files\DelphineSoft\Moto Racer 3 demo\Mr3.exe" = C:\Program Files\DelphineSoft\Moto Racer 3 demo\Mr3.exe:*:Disabled:Moto Racer 3 PC
"C:\WINDOWS\system32\dpnsvr.exe" = C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server -- (Microsoft Corporation)
"C:\Soldat\Soldat.exe" = C:\Soldat\Soldat.exe:*:Disabled:http://soldat.pl
"C:\Program Files\IQ Publishing\Agrar Simulator 2011\iupdate.dll" = C:\Program Files\IQ Publishing\Agrar Simulator 2011\iupdate.dll:*:Enabled:Agrar Simulator 2011
"C:\Program Files\IQ Publishing\Agrar Simulator 2011\farm.dll" = C:\Program Files\IQ Publishing\Agrar Simulator 2011\farm.dll:*:Enabled:Agrar Simulator 2011
"C:\Program Files\Symulator Farmy 2011\FarmingSimulator2011.exe" = C:\Program Files\Symulator Farmy 2011\FarmingSimulator2011.exe:*:Enabled:Symulator Farmy 2011 -- (GIANTS Software GmbH)
"C:\Program Files\Symulator Farmy 2011\game.exe" = C:\Program Files\Symulator Farmy 2011\game.exe:*:Enabled:Symulator Farmy 2011 -- (GIANTS Software GmbH)
"C:\Documents and Settings\ \Moje dokumenty\Pobieranie\SweetImSetup.exe" = C:\Documents and Settings\ \Moje dokumenty\Pobieranie\SweetImSetup.exe:*:Enabled:InHouseSDM Setup
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager -- (SweetIM Technologies Ltd.)
"C:\Program Files\Counter-Strike\cstrike.exe" = C:\Program Files\Counter-Strike\cstrike.exe:*:Disabled:Half-Life Launcher
"C:\Documents and Settings\ \Dane aplikacji\FE8.exe" = C:\Documents and Settings\ \Dane aplikacji\FE8.exe:*:C:\WINDOWS\csdrive32.exe
"C:\WINDOWS\system32\wmpdb86.exe" = C:\WINDOWS\system32\wmpdb86.exe:*:Enabled:Windows Data Recovery
"C:\WINDOWS\system32\igfxsb86.exe" = C:\WINDOWS\system32\igfxsb86.exe:*:Enabled:Intel Service Driver
"C:\WINDOWS\system32\igfxsd86.exe" = C:\WINDOWS\system32\igfxsd86.exe:*:Enabled:Intel Data Service
"C:\WINDOWS\system32\wmpsl32.exe" = C:\WINDOWS\system32\wmpsl32.exe:*:Enabled:Windows Media Content
"C:\WINDOWS\system32\wmpsk32.exe" = C:\WINDOWS\system32\wmpsk32.exe:*:Enabled:Windows Media iCore
"C:\WINDOWS\system32\igfxvb32.exe" = C:\WINDOWS\system32\igfxvb32.exe:*:Enabled:Intel iBackup -- ()
"C:\Documents and Settings\ \Dane aplikacji\12DA.exe" = C:\Documents and Settings\ \Dane aplikacji\12DA.exe:*:C:\WINDOWS\yadrive32.exe
"C:\Documents and Settings\ \Dane aplikacji\1410.exe" = C:\Documents and Settings\ \Dane aplikacji\1410.exe:*:C:\WINDOWS\yadrive32.exe
"C:\Documents and Settings\ \Dane aplikacji\1466.exe" = C:\Documents and Settings\ \Dane aplikacji\1466.exe:*:C:\WINDOWS\yodrive32.exe
"C:\Documents and Settings\ \Dane aplikacji\1486.exe" = C:\Documents and Settings\ \Dane aplikacji\1486.exe:*:C:\WINDOWS\yodrive32.exe -- ()
"C:\Documents and Settings\ \Dane aplikacji\1761.exe" = C:\Documents and Settings\ \Dane aplikacji\1761.exe:*:C:\WINDOWS\yodrive32.exe -- (fikivloxxx)
"C:\Documents and Settings\ \Dane aplikacji\1790.exe" = C:\Documents and Settings\ \Dane aplikacji\1790.exe:*:C:\WINDOWS\yodrive32.exe -- (fikivloxxx)
"C:\Documents and Settings\ \Dane aplikacji\1756.exe" = C:\Documents and Settings\ \Dane aplikacji\1756.exe:*:C:\WINDOWS\yodrive32.exe -- (fikivloxxx)
"C:\Documents and Settings\ \Dane aplikacji\1732.exe" = C:\Documents and Settings\ \Dane aplikacji\1732.exe:*:C:\WINDOWS\yodrive32.exe -- (fikivloxxx)
"C:\Documents and Settings\ \Dane aplikacji\173C.exe" = C:\Documents and Settings\ \Dane aplikacji\173C.exe:*:C:\WINDOWS\yodrive32.exe -- (fikivloxxx)
"C:\Documents and Settings\ \Dane aplikacji\1768.exe" = C:\Documents and Settings\ \Dane aplikacji\1768.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"C:\Documents and Settings\ \Dane aplikacji\17A1.exe" = C:\Documents and Settings\ \Dane aplikacji\17A1.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" = SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List:*:enabled:@shell32.dll,-1
"C:\Documents and Settings\ \Dane aplikacji\180C.exe" = C:\Documents and Settings\ \Dane aplikacji\180C.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\Documents and Settings\ \Dane aplikacji\18AE.exe" = C:\Documents and Settings\ \Dane aplikacji\18AE.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\Program Files\Farming Simulator 2013\FarmingSimulator2013.exe" = C:\Program Files\Farming Simulator 2013\FarmingSimulator2013.exe:*:Enabled:Farming Simulator 2013 -- (GIANTS Software GmbH)
"C:\Program Files\Farming Simulator 2013\FarmingSimulator2013Game.exe" = C:\Program Files\Farming Simulator 2013\FarmingSimulator2013Game.exe:*:Enabled:Farming Simulator 2013 -- (GIANTS Software GmbH)
"C:\Documents and Settings\ \Dane aplikacji\1875.exe" = C:\Documents and Settings\ \Dane aplikacji\1875.exe:*:C:\WINDOWS\ywdrive32.exe -- (Gerald)
"C:\Documents and Settings\ \Dane aplikacji\1851.exe" = C:\Documents and Settings\ \Dane aplikacji\1851.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\Documents and Settings\ \Dane aplikacji\1857.exe" = C:\Documents and Settings\ \Dane aplikacji\1857.exe:*:C:\WINDOWS\ywdrive32.exe
"C:\Documents and Settings\ \Dane aplikacji\1883.exe" = C:\Documents and Settings\ \Dane aplikacji\1883.exe:*:C:\WINDOWS\ywdrive32.exe -- (Gerald)
"C:\Documents and Settings\ \Dane aplikacji\189C.exe" = C:\Documents and Settings\ \Dane aplikacji\189C.exe:*:C:\WINDOWS\ywdrive32.exe -- (Enola)
"C:\Documents and Settings\ \Dane aplikacji\18B4.exe" = C:\Documents and Settings\ \Dane aplikacji\18B4.exe:*:C:\WINDOWS\ywdrive32.exe -- (ACCE)
"C:\Documents and Settings\ \Dane aplikacji\18A7.exe" = C:\Documents and Settings\ \Dane aplikacji\18A7.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\Documents and Settings\ \Dane aplikacji\18A8.exe" = C:\Documents and Settings\ \Dane aplikacji\18A8.exe:*:C:\WINDOWS\ywdrive32.exe -- (Enola)
"C:\Documents and Settings\ \Dane aplikacji\190E.exe" = C:\Documents and Settings\ \Dane aplikacji\190E.exe:*:C:\WINDOWS\ywdrive32.exe -- (Clown)
"C:\Documents and Settings\ \Dane aplikacji\18DD.exe" = C:\Documents and Settings\ \Dane aplikacji\18DD.exe:*:C:\WINDOWS\ywdrive32.exe -- (ACCE)
"C:\Program Files\Ski Region Simulator 2012 Demo\SkiRegionSimulator2012.exe" = C:\Program Files\Ski Region Simulator 2012 Demo\SkiRegionSimulator2012.exe:*:Enabled:Ski Region Simulator 2012 Demo -- (GIANTS Software GmbH)
"C:\Program Files\Ski Region Simulator 2012 Demo\game.exe" = C:\Program Files\Ski Region Simulator 2012 Demo\game.exe:*:Enabled:Ski Region Simulator 2012 Demo -- (GIANTS Software GmbH)
"C:\WINDOWS\system32\dmwu.exe" = C:\WINDOWS\system32\dmwu.exe:*:Enabled:dmwu -- ()
"C:\WINDOWS\system32\ARFC\wrtc.exe" = C:\WINDOWS\system32\ARFC\wrtc.exe:*:Enabled:wrtc -- ()
"C:\Documents and Settings\ \Dane aplikacji\19D9.exe" = C:\Documents and Settings\ \Dane aplikacji\19D9.exe:*:C:\WINDOWS\ywdrive32.exe -- ()
"C:\Documents and Settings\ \Dane aplikacji\8D2.exe" = C:\Documents and Settings\ \Dane aplikacji\8D2.exe:*:C:\WINDOWS\yndrive32.exe -- ()
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{0A50CB27-D2D5-4B7D-A001-30B1782A450B}" = DJ_AIO_06_K209a-z_SW_Min
"{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}" = DeviceDiscovery
"{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}" = HPProductAssistant
"{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}" = BrowserProtect
"{1C4551A6-4743-4093-91E4-1477CD655043}" = NVIDIA PhysX
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2FB9EA69-51D4-4913-9AD5-762C034DE811}" = Status
"{336D0C35-8A85-403a-B9D2-65C292C39087}_is1" = IB Updater 2.0.0.557
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5A3ECDDA-562C-4281-BFE5-A4C8F32EACA3}" = K209a-z
"{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}" = SolutionCenter
"{6051912A-F7B8-445C-A99D-81AA4C118836}" = HP Deskjet Ink Advant K209a-z All-in-One Driver Software 14.0 Rel. 6
"{60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C}" = 32 Bit HP CIO Components Installer
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{739126B3-1B80-4F9F-8D59-312A19633E1A}_is1" = AVI Player
"{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update
"{7683B745-6060-41FD-AA75-0BBB383FEAD4}" = SweetIM for Messenger 3.7
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B531332-0D5D-4B3B-A22C-8330DEA695A7}" = LogMeIn Hamachi
"{8EE94FD8-5F52-4463-A340-185D16328158}" = WebReg
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}" = Copy
"{AB9A459C-0BE3-4232-A15F-C3B03E19455E}" = Super Stunt Spectacular
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.1 - Polish
"{BB3447F6-9553-4AA9-960E-0DB5310C5779}" = GPBaseService2
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C1E6B103-4FFE-45D5-ACE3-8FD1E14A7F4B}" = FULL-DISKfighter
"{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}" = Internet Explorer Toolbar 4.6 by SweetPacks
"{CD31E63D-47FD-491C-8117-CF201D0AFAB5}" = TrayApp
"{D360FA88-17C8-4F14-B67F-13AAF9607B12}" = MarketResearch
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE}_is1" = NOD32 FiX v2.1
"{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}" = Babylon Chrome Toolbar
"{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}" = Update Manager for SweetPacks 1.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FA0FF682-CC70-4C57-93CD-E276F3E7537E}" = BufferChm
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI
"BabylonToolbar" = Babylon toolbar 
"Call of Duty Single Player Demo" = Call of Duty Single Player Demo
"DAEMON Tools Lite" = DAEMON Tools Lite
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FarmingSimulator2011PL_is1" = Symulator Farmy 2011
"FarmingSimulator2013PL_is1" = Farming Simulator 2013
"FULL-DISKfighter" = FULL-DISKfighter
"funmoods" = Funmoods
"Gadu-Gadu 10" = Gadu-Gadu 10
"giants_editor_4.1.9_is1" = GIANTS Editor 4.1.9
"HP Imaging Device Functions" = HP Imaging Device Functions 14.0
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 14.0
"HPExtendedCapabilities" = HP Customer Participation Program 14.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"incredibar" = Incredibar Toolbar  on IE
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"MiPony" = MiPony 2.0.2
"Mozilla Firefox 18.0.2 (x86 pl)" = Mozilla Firefox 18.0.2 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Optimizer Pro_is1" = Optimizer Pro v3.0
"PriceGong" = PriceGong 2.6.9
"PunkBusterSvc" = PunkBuster Services
"RealAlt_is1" = Real Alternative 1.23
"RocketDock_is1" = RocketDock 1.3.1
"Shaman Odyssey - Tropic Adventure_is1" = Shaman Odyssey - Tropic Adventure
"SimilarSites" = SimilarSites
"SkiRegionSimulator2012DemoEN_is1" = Ski Region Simulator 2012 Demo
"SMPlayer" = SMPlayer 0.6.9
"Softonic" = Softonic toolbar  on IE and Chrome
"VLC media player" = VLC media player 1.1.11
"WIC" = Windows Imaging Component
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = Archiwizator WinRAR
"WNLT" = IB Updater Service
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"3444319201.portal.qtrax.com" = Qtrax Player
"FoxTab PDF Reader" = FoxTab PDF Reader
"Mipony Download Manager Packages" = Mipony Download Manager Packages
"MOVIE MAKER" = MOVIE MAKER
"PDF Reader" = PDF Reader
"PDF Reader Packages" = PDF Reader Packages
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-05-31 12:17:33 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd , wersja 0.0.0.0, moduł powodujący błąd 
unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 06:51:10 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1004
Description = Aplikacja powodująca błąd svchost.exe, wersja 0.0.0.0, moduł powodujący
 błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 14:12:50 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd , wersja 0.0.0.0, moduł powodujący błąd 
unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 15:35:15 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1004
Description = Aplikacja powodująca błąd svchost.exe, wersja 0.0.0.0, moduł powodujący
 błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 15:40:09 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd , wersja 0.0.0.0, moduł powodujący błąd 
unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 15:43:46 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1004
Description = Aplikacja powodująca błąd svchost.exe, wersja 0.0.0.0, moduł powodujący
 błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-01 16:03:54 | Computer Name = 6E5D8DD602FD42F | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca cstrike.exe, wersja 1.1.1.1, moduł zawieszenia
 hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2012-06-02 03:25:10 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd , wersja 0.0.0.0, moduł powodujący błąd 
unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-02 03:49:13 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1004
Description = Aplikacja powodująca błąd svchost.exe, wersja 0.0.0.0, moduł powodujący
 błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000.
 
Error - 2012-06-02 03:55:40 | Computer Name = 6E5D8DD602FD42F | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd mscorsvw.exe, wersja 2.0.50727.42, moduł
 powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0xffffffff.
 
[ OSession Events ]
Error - 2012-10-28 15:44:29 | Computer Name = 6E5D8DD602FD42F | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 58
 seconds with 0 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 2012-04-19 12:50:54 | Computer Name = 6E5D8DD602FD42F | Source = Print | ID = 54
Description = Dokument Microsoft Word - Dokument1 był uszkodzony i został usunięty.
 Skojarzony sterownik: HP Deskjet Ink Advant K209a-z.
 
Error - 2012-04-28 11:03:33 | Computer Name = 6E5D8DD602FD42F | Source = DCOM | ID = 10010
Description = Serwer {66C99B38-BC12-4134-90A2-C5D6ABFC5FFE} nie zarejestrował się
 w modelu DCOM w wymaganym czasie.
 
 
< End of report >