OTL Extras logfile created on: 2014-02-06 13:53:44 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\sandoz\Desktop\06.02.2014 Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 1,64 Gb Available Physical Memory | 54,66% Memory free 6,19 Gb Paging File | 4,85 Gb Available in Paging File | 78,35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 254,15 Gb Total Space | 42,92 Gb Free Space | 16,89% Space Free | Partition Type: NTFS Drive D: | 29,19 Gb Total Space | 20,84 Gb Free Space | 71,40% Space Free | Partition Type: NTFS Computer Name: SANDOZ | User Name: sandoz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-662459261-2097686485-2363488366-1004\SOFTWARE\Classes\] .html [@ = Max3.Association.HTML] -- C:\Program Files\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files\NAPI-PROJEKT\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files\NAPI-PROJEKT\napisy.exe" "%1" -pobierz_ang () Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "UacDisableNotify" = 0 "InternetSettingsDisableNotify" = 0 "AutoUpdateDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{055F4F67-3007-425D-B0E2-93D71C2461D2}" = lport=2869 | protocol=6 | dir=in | app=system | "{0670473C-7CF6-4942-9449-1FCA7EA29E1B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{0BB0B6ED-3D9C-4450-BD7C-86900FB1525B}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{0E11A276-140D-4587-85EA-412FAD51F59D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{171AE320-6639-496A-875C-9C76699D9F48}" = rport=445 | protocol=6 | dir=out | app=system | "{25FEE0E7-AFF9-407A-B66E-6E873BBFF0A3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{3176CECA-4D82-4CEE-B8AA-AF2918B1A452}" = rport=10243 | protocol=6 | dir=out | app=system | "{3D01CDE6-74C9-43A1-A900-A3F4B4CB2FBE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{42F0641A-D99D-42A5-9902-9371886F44BE}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{43B2A647-8CEC-4ECA-B00E-69718D879C82}" = lport=10243 | protocol=6 | dir=in | app=system | "{4D99FA8D-309C-4D19-B04A-ECB8CAB4822A}" = lport=137 | protocol=17 | dir=in | app=system | "{4EBAEA2A-79B2-4413-B7B4-E55A7A43C250}" = rport=139 | protocol=6 | dir=out | app=system | "{5BF021C5-1BB0-468A-8B81-6FEB25EA0E97}" = lport=445 | protocol=6 | dir=in | app=system | "{6396083F-0F3B-4CBF-A3F8-2C58B12E45BE}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{7496BBBA-5DFD-4AFB-8B18-0B5DFB34E261}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | "{762C5494-4230-4903-B24A-A19B2AE655F0}" = rport=138 | protocol=17 | dir=out | app=system | "{7BD53697-DB5B-47C9-B726-426D954E9076}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{9E17A0F9-8A7D-41EB-8F2C-19EBE9C63368}" = rport=137 | protocol=17 | dir=out | app=system | "{A0AAA98D-4B07-496C-9D18-84F9E0359FE1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A0C70545-87B0-42D5-9ECD-D7AF225E8C00}" = lport=139 | protocol=6 | dir=in | app=system | "{A7DAFF7A-14A4-4A5E-BC04-FDDDA4B2577F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C1F4CB6E-903E-4E18-AF64-ED90375C73F0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{D1D8AE92-E8BF-48CE-9357-A4C897C99F36}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{D2763F33-5F61-4EE0-81D2-1A719D7CA74D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{DEF32B7C-77A6-4EE0-91FC-85353FB6D882}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{F49C70E7-8314-47EE-A4AA-2C311D2214CB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{FB8E9D24-A42E-40FE-A446-E3BC5F94871D}" = lport=138 | protocol=17 | dir=in | app=system | "{FD46962A-6423-4070-8382-40D5EF24CBD6}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{09B4651E-EF5E-48D3-82D6-F312EF399EBD}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{09F9B643-A94C-4CD7-A439-74AF07B90C48}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe | "{0AE19CE3-D132-47EB-83DE-6B348D85D51C}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{0E851301-5B3E-4225-8F8A-DD12ED4FAD52}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe | "{102E4084-02A8-4025-A1D1-026B42703241}" = dir=out | app=c:\program files\lenovo\readycomm\common\igrs.exe | "{1EEA59D1-2538-4B1D-89B1-4A03E277C718}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\assassinscreedbrotherhood.exe | "{20B4420F-5010-49C9-9F76-62799522ACC2}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\mxup.exe | "{241A19FF-C3C1-4414-972A-3D19B37020E1}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{2C694D97-ADDF-42FE-8330-43B9512D5AD6}" = dir=out | app=c:\program files\lenovo\readycomm\readycomm.exe | "{307A3D03-4758-4475-9068-D9930193F7D5}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | "{3DCC5074-BB41-477B-A8BA-9F62D9CA9E7A}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe | "{4007AE4E-9258-42E5-A81E-B0099C895D8B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{421D982D-B064-49CA-9BDA-DFBA981829C3}" = dir=out | app=c:\program files\lenovo\readycomm\projectionist.exe | "{4AC0DF2D-08E1-4F51-B6CD-9AA0022CC3D8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{4D241358-B261-4EA8-AAE0-57E6FCBD8892}" = dir=in | app=c:\program files\lenovo\readycomm\common\igrs.exe | "{4DBE00AF-1705-40E7-9830-98BF8D1C0166}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | "{55475987-3566-45B9-96ED-70E599AE72EF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{57F2C984-9283-4AF5-9656-55B360976202}" = dir=in | app=c:\program files\lenovo\readycomm\projectionist.exe | "{5D52DEBE-8EB8-47BC-A0FE-08CDCFE8D23A}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | "{5DE63D2D-63A7-4541-9C6C-3486AD9B1E47}" = dir=out | app=c:\windows\system32\igrssvcs.exe | "{5E0145D4-9517-4B82-BCF3-0C2387D9335B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{60A20EC3-8A85-4DA8-821E-1B80C10E60BE}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{633D06DA-CC22-419B-8E14-A642E245D1C7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{634276C4-33C6-408F-BC07-3560269BBB6E}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{6657D660-0C64-4B72-BBBB-7CB3EC4A2622}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | "{6C54E4B9-A581-40E8-B615-EB99A4ED58B8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7553D90B-1685-4CB5-89D9-85976F90F0CE}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\uplaybrowser.exe | "{7A7C7295-151B-4031-A239-6D05FA1D613F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7EA1E85D-5763-4731-AA9C-F96C2AFBD589}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\assassinscreedbrotherhood.exe | "{80E7DAEA-BAFD-49AC-98AE-29C2CA1AE728}" = dir=in | app=c:\windows\system32\igrssvcs.exe | "{892B2CF3-C426-4259-92B8-266877BB2F16}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\mxup.exe | "{8B2009B1-1498-40FF-A552-F329F7FE39BB}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | "{91251003-24FF-4673-B2EE-36C1BEA00354}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe | "{94543F6E-1346-4493-8BD9-E1A82E34A35D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{9950ADB0-3597-493F-8408-289A591D666D}" = protocol=6 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe | "{A0F82680-CECB-492F-A13D-4397FE6F5407}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\mxup.exe | "{A319CBFF-75A7-4E0C-8C7F-9F563DFC76FF}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | "{A5FCD861-8206-452D-9B7A-4A5AADB12F0C}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe | "{ACD9DABD-CC6A-4C2E-8987-591BAD422D42}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe | "{ACF59AFA-F193-4BB2-8B26-B8B6BA5678D0}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe | "{AED8DB45-8251-4A5B-9EF4-47E5A4535044}" = dir=in | app=c:\program files\lenovo\readycomm\readycomm.exe | "{B2374269-AD7C-4939-BCC1-26619EC55809}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{BA223FC6-BA18-4188-AA4E-8C5AFC68ED44}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbsp.exe | "{BF618C8C-74C0-40E8-BC04-3AA20BC1A23F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{C6555EF7-B0CC-4DB4-9263-229856487D5E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{C86EEE0D-270B-481E-8334-AC6F0C128A55}" = protocol=17 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe | "{C9E27777-27AE-40EE-B806-C7A493176DAA}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\uplaybrowser.exe | "{CA574013-7AE4-4B25-BB1F-26476E05AF9C}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{CA64001F-7FEF-47C1-B265-87B5BDA0F2BA}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe | "{CADF9CE9-785F-4B8C-916D-28C6492B6460}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{D00D88A4-97CD-4FEE-A904-2BBFD57F1A41}" = dir=out | app=c:\program files\lenovo\readycomm\filereceiver.exe | "{D04E4388-8215-45CD-ACA1-434B9C964737}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | "{D18574B5-202B-473D-A4C5-A631FE8163E4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{D3A4B525-6A78-4797-BE32-A1C53753AFC0}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{D42D4DDD-CC00-4478-94F4-8192B537C665}" = dir=in | app=c:\users\sandoz\appdata\local\facebook\video\skype\facebookvideocalling.exe | "{D49F1B73-E15A-449B-BE20-933008257C9F}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbsp.exe | "{D7005EA2-8DC0-4F74-BB34-28AB9A9E033C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{D8DA6A59-ED15-4B32-B276-CEB10E8D9D03}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{D9B249B8-5F8F-4620-9BAE-EB88714A62E5}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{DCCDB120-36CA-4E9D-90B2-695FB231E75B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{E38AE2A1-2DAF-4F59-A495-14BBDA4C69D4}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\mxup.exe | "{E4CED4F0-0F12-4F9E-AE73-2A3B9A355931}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe | "{E62B9FAB-F690-482C-A0AE-90361C812279}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{E6E2227C-7B25-4D5F-8D4B-F3FEC8EBA125}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{EBC4700A-54F6-4501-A697-3D6F53809637}" = dir=in | app=c:\program files\lenovo\readycomm\filereceiver.exe | "{ECF8F1EB-9398-4A0F-A0AC-4A994625304D}" = protocol=6 | dir=out | app=system | "{F1E42F12-124F-4232-80F7-D6565AE78A4C}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{F83634A8-B577-48CF-BBFE-0D919647AA7A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{F9495A35-2369-4005-8C81-895AAA8C8772}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "TCP Query User{18C9CCB0-B340-49C0-967C-B6CF84DC2651}C:\program files\cod2\setup\data\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\program files\cod2\setup\data\cod2mp_s.exe | "TCP Query User{43D245DA-B0E0-474C-92BC-7DD4E5EBAE9B}C:\program files\free download manager\fdm.exe" = protocol=6 | dir=in | app=c:\program files\free download manager\fdm.exe | "TCP Query User{6A2E3DAB-3E5B-45E0-A08F-9A6DD06BED35}C:\users\sandoz\appdata\local\temp\45fb.tmp\kmservice.exe" = protocol=6 | dir=in | app=c:\users\sandoz\appdata\local\temp\45fb.tmp\kmservice.exe | "TCP Query User{79CD1C55-BF06-49B2-9AAC-DC54A18087C5}C:\program files\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files\valve\hl.exe | "TCP Query User{CBCC32F2-42A7-4B62-8B11-FF3437BC8F1E}C:\program files\ea games\battlefield heroes\bfheroes.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield heroes\bfheroes.exe | "UDP Query User{0C637957-9D22-4182-AA6B-FD0246BFC5C7}C:\program files\free download manager\fdm.exe" = protocol=17 | dir=in | app=c:\program files\free download manager\fdm.exe | "UDP Query User{17D3A409-CA5E-4A49-B944-445C23991201}C:\program files\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files\valve\hl.exe | "UDP Query User{363E62B1-0A2B-46D5-8EC5-7164000B1662}C:\program files\cod2\setup\data\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\program files\cod2\setup\data\cod2mp_s.exe | "UDP Query User{ABF1EE88-357C-46B0-8C20-B294BBB9D041}C:\users\sandoz\appdata\local\temp\45fb.tmp\kmservice.exe" = protocol=17 | dir=in | app=c:\users\sandoz\appdata\local\temp\45fb.tmp\kmservice.exe | "UDP Query User{CAE6C758-895D-4414-A149-4012BCAA5594}C:\program files\ea games\battlefield heroes\bfheroes.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield heroes\bfheroes.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = Lenovo Bluetooth with Enhanced Data Rate Software 6.1.0.5100 "{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.8.4.2390 "{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86 "{24190661-2122-40D1-9F7C-8FDEA5AE4197}" = Microsoft Windows Performance Toolkit "{25DDA4EC-DEBF-4297-B4DA-EEEF7FCEBA24}" = Lenovo Screensaver v1.0 for vista x86(en) "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6 "{50A0893D-47D8-48E0-A7E8-44BCD7E4422E}" = Microsoft SQL Server Native Client "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.03 "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6B722793-E77B-41F5-BAB3-6C9832274E75}" = PC Connectivity Solution "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{717E0AD5-91EB-459F-AB8B-1B5219BAF7CE}" = Lenovo System Repair - Windows Update Monitor "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 4.0 "{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A23E5590-6799-437B-9723-2627BA800B6F}" = Dolby Control Center "{A64A5576-D862-44F8-89DC-2B17FCC9B86E}" = Broadcom Gigabit Integrated Controller "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.9) "{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{B39AA98E-C966-46C9-ACA2-D2586E300988}" = WinFlash "{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287 "{C0D2F614-5CE5-4DCB-8678-E5C9AF7044F8}" = Microsoft SQL Server VSS Writer "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{DDC5B3E0-C656-4070-9CF0-E592EC60AD42}" = MotoConnect "{E0F07676-2C60-4465-A727-20DE3BFCABAC}" = Tony Hawks Pro Skater 4 "{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX "{FCED9B62-34FF-4C15-8A23-F65221F7874D}" = ITECIR Driver "7-Zip" = 7-Zip 9.21beta "Activision_THPS2UninstallKey" = Tony Hawk's Pro Skater 2 "Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin "Belka FREE_is1" = Belka v.3.0.27.640 FREE "CCleaner" = CCleaner "EasyCapture3.0" = EasyCapture "foobar2000" = foobar2000 v1.1.11 "Gadu-Gadu 10" = Gadu-Gadu 10 "HaaliMkx" = Haali Media Splitter "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "KLiteCodecPack_is1" = K-Lite Codec Pack 5.4.4 (Basic) "lenovo_11.74" = Lenovo EasyCamera Driver Package v11.74.2025 "Mafia_is1" = Mafia "Matroska Pack" = Matroska Pack "Maxthon3" = Maxthon Cloud Browser "Media Player - Codec Pack" = Media Player Codec Pack 4.2.9 "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "NapiProjekt_is1" = NapiProjekt (2.0.0.2151) "NVIDIA Drivers" = NVIDIA Drivers "OCCT_is1" = OCCT Perestroika 3.1.0 "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "PhotoScape" = PhotoScape "PunkBusterSvc" = PunkBuster Services "RealAlt_is1" = Real Alternative 2.0.2 "Recuva" = Recuva "SMSERIAL" = Motorola SM56 Speakerphone Modem "SynTPDeinstKey" = Synaptics Pointing Device Driver "Usbfix" = UsbFix By El Desaparecido "uTorrent" = µTorrent "VeriFace III" = VeriFace III [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-662459261-2097686485-2363488366-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-02-04 06:00:54 | Computer Name = sandoz | Source = Windows Search Service | ID = 3013 Description = Error - 2014-02-04 06:00:54 | Computer Name = sandoz | Source = Windows Search Service | ID = 3013 Description = Error - 2014-02-04 06:00:54 | Computer Name = sandoz | Source = Windows Search Service | ID = 3013 Description = Error - 2014-02-04 06:00:55 | Computer Name = sandoz | Source = Windows Search Service | ID = 3013 Description = Error - 2014-02-04 06:00:55 | Computer Name = sandoz | Source = Windows Search Service | ID = 3013 Description = Error - 2014-02-04 06:53:25 | Computer Name = sandoz | Source = WinMgmt | ID = 10 Description = Error - 2014-02-04 09:31:10 | Computer Name = sandoz | Source = WinMgmt | ID = 10 Description = Error - 2014-02-04 12:29:13 | Computer Name = sandoz | Source = WinMgmt | ID = 10 Description = Error - 2014-02-05 04:56:08 | Computer Name = sandoz | Source = WinMgmt | ID = 10 Description = Error - 2014-02-06 05:04:00 | Computer Name = sandoz | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 2014-02-03 17:13:14 | Computer Name = sandoz | Source = Dhcp | ID = 1002 Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.0.18 dla karty sieciowej o adresie 001E65DA8C5C. (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2014-02-04 04:42:30 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-04 05:59:28 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-04 05:59:33 | Computer Name = sandoz | Source = Dhcp | ID = 1002 Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.0.14 dla karty sieciowej o adresie 001E65DA8C5C. (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2014-02-04 06:15:32 | Computer Name = sandoz | Source = iaStor | ID = 262153 Description = Urządzenie \Device\Ide\iaStor0 nie odpowiedziało w ramach ustalonego limitu czasu. Error - 2014-02-04 06:53:12 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-04 09:30:56 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-04 12:29:00 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-05 04:55:57 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 2014-02-06 05:03:49 | Computer Name = sandoz | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = < End of report >