OTL Extras logfile created on: 2012-01-07 23:22:31 - Run 4 OTL by OldTimer - Version 3.2.31.0 Folder = E:\OTL Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1013,92 Mb Total Physical Memory | 517,19 Mb Available Physical Memory | 51,01% Memory free 2,39 Gb Paging File | 1,99 Gb Available in Paging File | 83,26% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 13,39 Gb Free Space | 45,70% Space Free | Partition Type: NTFS Drive E: | 82,49 Gb Total Space | 59,36 Gb Free Space | 71,96% Space Free | Partition Type: NTFS Drive G: | 7,45 Gb Total Space | 7,05 Gb Free Space | 94,64% Space Free | Partition Type: FAT32 Computer Name: PATI-80LUKSINHK | User Name: ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htafile [open] -- "%1" %* InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] "DisableMonitoring" = 1 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "G:\operausb1160en\operausb1160en\opera.exe" = G:\operausb1160en\operausb1160en\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] ""SubEdit-Player"" = "SubEdit-Player" "{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan "{14BEB6DF-A499-4A38-8E06-E173BCD5C087}" = ScannerCopy "{17293791-C82E-476C-9997-9A0FF234A19B}" = HP Product Assistant "{181821B7-82AA-44DA-9DAF-EF254CCB670A}" = Fax "{1D7CE340-70C3-4848-BCCF-215950328A4C}" = Facebook Video Calling 1.0.0.8953 "{20FBC0A0-3160-4F14-83ED-3A74BB6B8C31}" = TrayApp "{236BB7C4-4419-42FD-0415-1E257A25E34D}" = Adobe Photoshop CS2 "{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java(TM) 6 Update 21 "{2E8428AD-6CD2-4031-916A-3CF9BBF2DEC9}" = Unload "{342C7C88-D335-4bc2-8CF1-281857629CE2}" = HP PSC & OfficeJet 4.7 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{391E18CE-7D3B-45E9-A8F0-34E77F14F47A}" = ProductContext "{3947442A-1409-45fc-A885-FB1CF937675D}" = 1400 "{442BE28B-782B-4DC0-B490-E70A403B1C69}" = Readme "{64FC0C98-B035-4530-B15D-3D30610B6DF1}" = HP Software Update "{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan "{68963635-14A4-48D9-B431-DF3A74D1AAE1}" = Destinations "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{700A6597-3CE6-49C1-AA75-846B24CDA66D}" = BufferChm "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7AD25C9F-9957-4D1C-95EF-9BCD09F6D31B}" = HPSystemDiagnostics "{85CFD253-38AE-4DB1-ACB7-F0F4C791990D}" = AiOSoftware "{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8F7A4D82-B168-4F89-99C2-B9873EC877AF}" = HP Image Zone Express "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90840415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Excel Viewer 2003 "{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A07BAED2-DA9A-436A-83F1-80BA23FA9E4B}" = 1400_Help "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AB6097D9-D722-4987-BD9E-A076E2848EE2}" = Acer Empowering Technology "{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1 "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{B911B811-BA3E-46D4-90F8-6F3338359651}" = Director "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CDFCF124-115F-4976-8BF4-08C89187A146}" = WebReg "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{DE66E6E1-BFBC-4586-A03C-686598F4CA3C}" = 1400Trb "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F70D5D8C-C1AF-40B3-9E47-3BB5F19EEA3A}" = Atheros for Acer Driver 5.3.0.45_Foxconn Installation Program "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0415-1E257A25E34D}" = Adobe Photoshop CS2 "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "ALLPlayer V2.2" = ALLPlayer V2.2 "AVIcodec" = AVIcodec (remove only) "Avira AntiVir Desktop" = Avira Free Antivirus "CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118" = HDAUDIO Soft Data Fax Modem with SmartCP "DirectShowPack" = DirectShow Pack (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "HDMI" = Intel(R) Graphics Media Accelerator Driver "HijackThis" = HijackThis 2.0.2 "HP Photo & Imaging" = HP Image Zone 4.7 "ipla" = ipla 2.3.5 "KLiteCodecPack_is1" = K-Lite Codec Pack 5.4.4 (Full) "LManager" = Launch Manager "McAfee Security Scan" = McAfee Security Scan Plus "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox 8.0.1 (x86 pl)" = Mozilla Firefox 8.0.1 (x86 pl) "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "QuicktimeAlt_is1" = QuickTime Alternative 3.0.0 "RealAlt_is1" = Real Alternative 1.10 "Revo Uninstaller" = Revo Uninstaller 1.71 "Totalcmd" = Total Commander (Remove or Repair) "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-01-04 14:12:10 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-04 14:12:11 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-04 14:12:11 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-04 14:12:11 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-04 14:12:11 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-04 14:12:12 | Computer Name = PATI-80LUKSINHK | Source = MsiInstaller | ID = 11321 Description = Product: SpyHunter -- Error 1321. Windows Installer has insufficient privileges to modify this file: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe. Error - 2012-01-06 20:00:28 | Computer Name = PATI-80LUKSINHK | Source = Google Update | ID = 20 Description = Error - 2012-01-07 11:00:14 | Computer Name = PATI-80LUKSINHK | Source = Google Update | ID = 20 Description = Error - 2012-01-07 14:27:06 | Computer Name = PATI-80LUKSINHK | Source = Google Update | ID = 20 Description = Error - 2012-01-07 17:00:25 | Computer Name = PATI-80LUKSINHK | Source = Google Update | ID = 20 Description = [ System Events ] Error - 2012-01-07 08:25:16 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Java Quick Starter z powodu następującego błędu: %%3 Error - 2012-01-07 08:25:16 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Pml Driver HPZ12 z powodu następującego błędu: %%3 Error - 2012-01-07 08:25:16 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi XAudioService z powodu następującego błędu: %%193 Error - 2012-01-07 11:12:09 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi XAudioService z powodu następującego błędu: %%193 Error - 2012-01-07 15:22:38 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi XAudioService z powodu następującego błędu: %%193 Error - 2012-01-07 15:22:39 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: sptd Error - 2012-01-07 16:11:09 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi XAudioService z powodu następującego błędu: %%193 Error - 2012-01-07 16:11:10 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: sptd Error - 2012-01-07 16:39:53 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi XAudioService z powodu następującego błędu: %%193 Error - 2012-01-07 16:39:56 | Computer Name = PATI-80LUKSINHK | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: sptd < End of report >