OTL Extras logfile created on: 2013-05-03 18:59:24 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = F:\ 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16540) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,70 Gb Total Physical Memory | 6,67 Gb Available Physical Memory | 86,58% Memory free 15,40 Gb Paging File | 14,37 Gb Available in Paging File | 93,31% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 465,76 Gb Total Space | 367,74 Gb Free Space | 78,96% Space Free | Partition Type: NTFS Drive D: | 698,64 Gb Total Space | 307,67 Gb Free Space | 44,04% Space Free | Partition Type: NTFS Drive F: | 29,86 Gb Total Space | 3,79 Gb Free Space | 12,68% Space Free | Partition Type: FAT32 Computer Name: MARCIN | User Name: Łagi | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-1459386345-2676534600-2803410924-1000\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1A1A334E-F398-4716-87BC-8D4D22044E64}" = lport=3389 | protocol=6 | dir=in | app=system | "{1A714361-9DEF-4892-875B-C6CECA2E4DD7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{207CBE85-DBD9-413A-97D3-4D8BD148E6AD}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | "{23DFFE78-77DB-4A3D-935F-74181B1E3858}" = rport=138 | protocol=17 | dir=out | app=system | "{2A441832-73AF-4AB1-9437-127870C3378D}" = lport=2869 | protocol=6 | dir=in | app=system | "{2A8158F3-476A-41FE-BC4A-132920146C7E}" = rport=137 | protocol=17 | dir=out | app=system | "{37D8ECD5-FD4E-4344-A1AD-D3912B06ABBB}" = lport=15002 | protocol=6 | dir=in | name=bitcomet 15002 tcp | "{45072DF7-7A9C-4BD7-BF16-AA201B37401C}" = lport=139 | protocol=6 | dir=in | app=system | "{54FA57B0-CC72-4EC3-813A-A040F62B217F}" = rport=10243 | protocol=6 | dir=out | app=system | "{6B741B54-7C22-4726-947F-2A6E62A94785}" = lport=13920 | protocol=6 | dir=in | name=bitcomet 13920 tcp | "{6C1D1BD9-6CFD-44C8-B088-734E6629EC63}" = lport=15002 | protocol=17 | dir=in | name=bitcomet 15002 udp | "{7F700187-8788-4EC3-B8C6-94B2516BB0E0}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{8515F26A-4C5A-46A9-8FB3-CD727357A098}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A9698A0C-BCC1-41E9-A448-D51E1CCB9E82}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{AFFB2304-B049-4AD6-B02C-0B161127576A}" = rport=139 | protocol=6 | dir=out | app=system | "{B0BF0A6B-035D-40CC-B8FC-BEB4A6A4A7BB}" = rport=445 | protocol=6 | dir=out | app=system | "{B4F6DF1D-50CD-4144-B806-61BD8347C891}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{BA606162-5962-47D0-A7E2-5C3B585B5062}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{BEBC9FFF-0672-44B6-BFF0-FEBC57750F08}" = lport=13920 | protocol=17 | dir=in | name=bitcomet 13920 udp | "{C0E3A6BD-A797-474F-A37B-7144597925AB}" = lport=137 | protocol=17 | dir=in | app=system | "{CF8B5709-C51F-4760-BB6F-57143C9C4AE6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{D6F1B662-519E-4955-AC41-DB675AC0D39A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{E91347CB-F956-43AF-B49F-D66578E5ACAB}" = lport=445 | protocol=6 | dir=in | app=system | "{EBD2FCFB-F94A-4411-8CD3-18B9F2AB3188}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{F3F2E436-BEF0-4DEA-9C8A-4EDC5C9EEAC3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{F4E722EB-153C-49F9-B525-989CE6F4D84F}" = lport=10243 | protocol=6 | dir=in | app=system | "{F6360B38-EB50-4B86-A422-A73C419E62E2}" = lport=3389 | protocol=17 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe | "{F931259D-1F59-406D-A95C-F88749D0A25E}" = lport=138 | protocol=17 | dir=in | app=system | "{F9C8BF2A-221A-43EC-AD44-FC005AD6F11C}" = lport=3389 | protocol=6 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{067AEC6C-7596-4940-B785-BEC3224FD7B1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0AABBBF5-3F3B-48AD-91EC-07F17C27C6A7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{0CCDC438-8DE3-4E90-BA33-446522513304}" = protocol=6 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\warlords\civ4warlords_pitboss.exe | "{108022E2-FB43-4D37-8AF7-1C83FF7FA6E5}" = protocol=6 | dir=out | app=system | "{1F9AA66C-9ABE-41E8-B25E-30114A25A139}" = protocol=17 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\beyond the sword\civ4beyondsword.exe | "{1FF71329-5F87-4FF1-AA0F-07E9A4797FE4}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{305D3088-506D-4464-97BD-370530A2AF88}" = protocol=17 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\warlords\civ4warlords_pitboss.exe | "{46F39A1A-079E-4744-B324-FC32B77F1307}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{509B6CAF-7CFB-4F64-9ED3-7410B2F7479C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{53D0A040-0222-4A46-9040-3DCFC5D3CD0F}" = protocol=6 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\beyond the sword\civ4beyondsword.exe | "{57582394-6B6A-444D-BCB4-C0F1E15BB4F3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{62664D66-702B-4265-8077-7F1CEA1FBFAA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{6C6AEF65-9824-42D5-94BA-D4FB105C8C8D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{724D45B3-D401-4397-A0ED-F83558B33F67}" = protocol=17 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\beyond the sword\civ4beyondsword_pitboss.exe | "{74D35492-1F6F-4B83-85A7-C9727D1CA52A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{75410020-D5E4-4C9B-8B3C-2FF0BD7F43C8}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{76039114-3D76-4B8A-8323-63550DD48377}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{7A058AD7-AB3F-4C50-9CAB-07E90ACA7F9D}" = protocol=6 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\beyond the sword\civ4beyondsword_pitboss.exe | "{8617CDFB-638A-42E3-8DC4-41D022E6755E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{861AA257-7D8D-47BA-89BE-E863D42813D9}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{87933B0E-5DFC-46E0-AF2D-20B86FECEAC1}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{9520D69D-3EDF-4799-9E8C-FD6927751765}" = dir=in | app=c:\program files (x86)\cyberlink powerdvd10\powerdvd10\powerdvd cinema\powerdvdcinema10.exe | "{9A00314E-4E18-477D-A882-FEB245D949D9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{9D6AB06E-8835-48C1-9DB2-03190142F5DC}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{A31FAC62-B056-4B0E-94F3-2D664862B78D}" = protocol=6 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\warlords\civ4warlords.exe | "{AABCD829-F5D1-49A1-A280-3979238DBDE7}" = protocol=17 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\civilization4.exe | "{ABFB1252-56AB-46A1-9F40-303FBDBE7D38}" = dir=in | app=c:\program files (x86)\cyberlink powerdvd10\powerdvd10\powerdvd10.exe | "{AE482D38-ECEF-449C-9F77-5DCB1B038F81}" = protocol=6 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\civilization4.exe | "{B0963477-B868-4EE5-8147-8B92C8BA1C25}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{D7DDA212-5648-42FA-BD5F-7F118CC21C42}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{D94A7C91-3CBC-4B4E-BA03-AF15B32E376D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{E4E00EBD-5D4F-4A95-9B08-C50A45652500}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{E7EA8418-D5E3-4845-ADB8-9D643430D758}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{ECA54A29-0BC2-45AB-8036-CF60C6722A12}" = dir=in | app=c:\program files (x86)\cyberlink powerdvd10\powerdvd10\powerdvd9.exe | "{FE9D0054-90AC-4DD3-8A48-4589CC6F2FF0}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{FFAD87D4-ACCB-42D6-8986-F2A3AFAD94DB}" = protocol=17 | dir=in | app=c:\program files (x86)\sid meier's civilization 4\warlords\civ4warlords.exe | "TCP Query User{1549D38F-33E9-4FC7-AF21-313DB9A9DC15}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "TCP Query User{EE73BA7A-2B7C-47B9-9321-D3C3FBC2D272}C:\windows\kmsemulator.exe" = protocol=6 | dir=in | app=c:\windows\kmsemulator.exe | "UDP Query User{3804910D-5123-4D99-8B9C-9978968EA2C4}C:\windows\kmsemulator.exe" = protocol=17 | dir=in | app=c:\windows\kmsemulator.exe | "UDP Query User{F83EEA96-6349-4096-AE97-0AAFBE222474}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{26A24AE4-039D-4CA4-87B4-2F86417009FF}" = Java 7 Update 9 (64-bit) "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{977D1ABF-4089-4CA7-BA33-CC75808B7ACE}" = Intel® Trusted Connect Service Client "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 306.97 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 306.97 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.10.8 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "KLiteCodecPack64_is1" = K-Lite Codec Pack 9.4.0 (64-bit) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "sp6" = Logitech SetPoint 6.51 "WinRAR archiver" = WinRAR 4.20 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{04352ea6-fc60-4ab6-bd6d-b4f4aead2fd6}" = Nero 9 "{11A84FCA-C3C7-4AFD-A797-111DB8569DBC}" = Nero BurningROM "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1B040683-C390-4711-ABC7-DA8D85E470E7}" = NeroBurningROM "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver "{26A24AE4-039D-4CA4-87B4-2F83217013FF}" = Java 7 Update 13 "{2D3455A8-3B15-41A8-99F8-0D4215746463}" = Nero StartSmart "{32E4F0D2-C135-475E-A841-1D59A0D22989}" = Sid Meier's Civilization 4 - Beyond the Sword "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{3E4B349F-10B5-4586-9D99-489A90A8B228}" = Sid Meier's Civilization 4 - Warlords "{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX "{4377F918-E6C9-4ECA-A7F5-754B310B7ED8}" = Sid Meier's Civilization 4 "{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}" = 3DMark 11 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}" = Nero ControlCenter "{56BE5CC9-95E6-4128-ABEA-968414CA9C80}" = DolbyFiles "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}" = Asmedia ASM106x SATA Host Controller Driver "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0015-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-001F-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{1D751709-BA6C-49E2-844B-4F4F20F410C9}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0415-1000-0000000FF1CE}_Office14.PROPLUSR_{0844B6E1-0A6F-4D81-8BCF-48F883F521FE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{6606F321-8216-466E-981E-B75A14C46894}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{6AF8887A-72F7-4FA0-ABE4-396172B64550}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}_Office14.PROPLUSR_{39EFF327-D2C4-4C4B-B8EE-37325DECE1A4}" = Microsoft Office 2010 Service Pack 1 (SP1) "{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{943CC0C0-2253-4FE0-9493-DD386F7857FD}" = Nero Express "{961D53EA-40DC-4156-AD74-25684CE05F81}" = Nero Installer "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}" = Nero ControlCenter "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}" = Advertising Center "{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR "{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent "{A73BEC3C-40A0-480E-87EF-EFCD33629088}" = NeroExpress "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) - Polish "{ADE91A13-434D-4229-00BC-182BAD607303}" = Need for Speed™ Most Wanted "{BCD82AB5-670D-4242-90FA-1F97103C16CD}" = Movie Templates - Starter Kit "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage "{C573C350-C666-586C-B309-7C9BD4A44BBF}" = e-Deklaracje Desktop "{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}" = Menu Templates - Starter Kit "{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}" = Sid Meier's Civilization 4 "{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}" = Nero StartSmart Help "{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "{EA0B5D51-C2FA-4F33-9F8A-8B8EA2A2546F}" = Sid Meier's Civilization 4 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "avast" = avast! Free Antivirus "BitComet_x64" = BitComet 1.34 64-bit "DAEMON Tools Lite" = DAEMON Tools Lite "e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1" = e-Deklaracje Desktop "Google Chrome" = Google Chrome "InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.4.0 "Office14.PROPLUSR" = Microsoft Office Professional Plus 2010 "Winamp" = Winamp [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1459386345-2676534600-2803410924-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater "UnityWebPlayer" = Unity Web Player [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-05-01 14:38:40 | Computer Name = MARCIN | Source = Winlogon | ID = 4103 Description = Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error - 2013-05-01 14:40:18 | Computer Name = MARCIN | Source = WinMgmt | ID = 10 Description = Error - 2013-05-01 15:27:41 | Computer Name = MARCIN | Source = Software Protection Platform Service | ID = 8193 Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error - 2013-05-01 16:27:41 | Computer Name = MARCIN | Source = Software Protection Platform Service | ID = 8193 Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error - 2013-05-01 17:27:41 | Computer Name = MARCIN | Source = Software Protection Platform Service | ID = 8193 Description = Wystąpił błąd harmonogramu aktywacji licencji (sppuinotify.dll), kod błędu: 0x80070005 Error - 2013-05-02 08:48:28 | Computer Name = MARCIN | Source = Winlogon | ID = 4103 Description = Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error - 2013-05-02 08:50:05 | Computer Name = MARCIN | Source = WinMgmt | ID = 10 Description = Error - 2013-05-02 12:23:51 | Computer Name = MARCIN | Source = Winlogon | ID = 4103 Description = Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error - 2013-05-02 12:25:30 | Computer Name = MARCIN | Source = WinMgmt | ID = 10 Description = Error - 2013-05-03 11:58:44 | Computer Name = MARCIN | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: BESTplayer.exe, wersja: 2.1.0.263, sygnatura czasowa: 0x2a425e19 Nazwa modułu powodującego błąd: MSHTML.dll, wersja: 10.0.9200.16540, sygnatura czasowa: 0x5125ef5c Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0007cf45 Identyfikator procesu powodującego błąd: 0x1674 Godzina uruchomienia aplikacji powodującej błąd: 0x01ce481713d99d78 Ścieżka aplikacji powodującej błąd: C:\Users\Łagi\Desktop\BESTplayer.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\MSHTML.dll Identyfikator raportu: 54668d26-b40a-11e2-adf9-001986002b48 Error - 2013-05-03 12:59:27 | Computer Name = MARCIN | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik obsługi starszych urządzeń TDI NetIO, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi Ancillary Function Driver for Winsock, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Usługa interfejsu magazynu sieciowego zależy od usługi NSI proxy service driver., której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Stacja robocza zależy od usługi Usługa interfejsu magazynu sieciowego, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc IP zależy od usługi Usługa interfejsu magazynu sieciowego, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Otoka i aparat minireadresatora SMB zależy od usługi Podsystem buforowania przekierowywanych danych, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Minireadresator SMB 1.x zależy od usługi Otoka i aparat minireadresatora SMB, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Minireadresator SMB 2.0 zależy od usługi Otoka i aparat minireadresatora SMB, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7001 Description = Usługa Rozpoznawanie lokalizacji w sieci zależy od usługi Usługa interfejsu magazynu sieciowego, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2013-05-03 12:57:57 | Computer Name = MARCIN | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD aswRdr aswSnx aswSP aswTdi CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf < End of report >