OTL Extras logfile created on: 2012-07-26 12:43:40 - Run 1 OTL by OldTimer - Version 3.1.20.1 Folder = C:\Documents and Settings\cc.OWNER-T3GDBBAF7\My Documents\Pobieranie Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 229,00 Mb Available Physical Memory | 45,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 51,00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,26 Gb Total Space | 5,46 Gb Free Space | 14,64% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 3,73 Gb Total Space | 0,05 Gb Free Space | 1,46% Space Free | Partition Type: FAT32 Drive G: | 465,62 Gb Total Space | 174,00 Gb Free Space | 37,37% Space Free | Partition Type: FAT32 H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MARIAN2 Current User Name: cc Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_USERS\S-1-5-21-183450923-4264649163-3499916212-1005\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" %* scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Browse with ACDSee] -- C:\Program Files\ACDSee32\ACDSee32.exe "%1" (ACD Systems, Ltd.) Directory [EMPIK Fotoswiat.exe] -- "C:\Program Files\EMPIK Fotoswiat\EMPIK Fotoswiat\EMPIK Fotoswiat.exe" "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "1542:TCP" = 1542:TCP:*:Enabled:Realtek WPS TCP Prot "1542:UDP" = 1542:UDP:*:Enabled:Realtek WPS UDP Prot "53:UDP" = 53:UDP:*:Enabled:Realtek AP UDP Prot [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.) "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Disabled:Gadu-Gadu - program glowny -- File not found "C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\marian\games\q-2\QUAKE2.EXE" = C:\marian\games\q-2\QUAKE2.EXE:*:Enabled:QUAKE2 -- () "C:\Program Files\Gadu-Gadu7\gg.exe" = C:\Program Files\Gadu-Gadu7\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.) "C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalator AVG -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\REALTEK\RTL8187B Wireless LAN Utility\RtWLan.exe" = C:\Program Files\REALTEK\RTL8187B Wireless LAN Utility\RtWLan.exe:*:Enabled:RtWlan -- File not found "C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Ochrona Sieci -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Uniwersalny skaner poczty e-mail -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath -- (Skype Technologies S.A.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{0C7D85B0-8569-11D4-91EA-00003914300F}" = Network Device Switch "{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11 "{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Camera Support Core Library "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3CF0858D-1AC5-4308-9DE7-AD15288A8BDC}" = TOSHIBA Console "{4DF979D5-464C-4926-AF73-54C1C219F06A}" = Ham Radio Deluxe "{4EF69D40-4DC9-485E-95D3-B1C22F218FC8}" = upapp "{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup 2011 "{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.6 "{670A2206-F20A-490C-8C13-25EA88BF8E54}_is1" = e-pity 2011 wersja 3.0 "{68E7E8BD-2233-49BE-81D6-1A1FAF1B5196}" = RAW Image Task 1.1 "{6B1907E6-1CF2-4B54-A0A7-E880927FDCE6}" = YouTube Downloader Toolbar v6.1 "{738179D8-3D76-4AFF-A7BE-AEF3B4370CB4}" = Opera 9.02 "{7D543DFE-6459-462A-9A62-B5B012B1DCF1}" = AVG 2011 "{821D6F49-1B20-4809-8C73-286CFC52B1B1}" = Samsung Auto Backup "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system "{90280415-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional z programem FrontPage "{929C29A0-E9C3-11D5-BA55-00C0CA129740}" = Europa Universalis 2 "{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver "{A05BE20E-6510-44BC-95ED-6E6D730407D3}" = Vplayer "{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE "{B34BE30D-A759-4EC2-B58F-19FE2DEBF651}" = Camera Window "{BEF56F2D-56ED-4176-BF72-7B68D4A3B98D}" = Canon PhotoRecord "{C1939820-A945-11D4-86F6-0001031E5712}" = InterVideo WinDVD "{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}" = Canon Utilities ZoomBrowser EX "{C8FC7066-4457-4365-9BDF-4E439BF703C8}" = AVG 2011 "{CF2C1A86-5A98-4862-A3AE-9992E3A6427D}" = RemoteCapture Task 1.0.3 "{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = MovieEdit Task "{EF4C7EB0-D71B-43A3-9552-8053DE4B0401}" = PhotoStitch "{F77F95C8-C493-11D8-88E4-0004769F25D1}" = Mroczne Wieki "{F84AC700-7E77-49C5-B1F1-40D1C7760AC9}" = PLANET WAP-4000 Utility "ABBYY FineReader 4.0 Sprint" = ABBYY FineReader 4.0 Sprint "ACDSee 32" = ACDSee 32 "AdAssassin!_is1" = AdAssassin! 3.60 "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ALLPlayer V3.0_is1" = ALLPlayer V3.X "America Online us" = America Online "ATI Display Driver" = ATI Display Driver "AVG" = AVG 2011 "BitTorrent" = BitTorrent "BNXFAPRO3" = Frontier Analyst Professional 3 Demo "Corel Applications" = Corel Applications "CPATR10" = Easy Button "Cywilizacja III" = Cywilizacja III "Cywilizacja III - Conquests" = Cywilizacja III - Conquests "EchoLink" = EchoLink "E-KEY" = E-KEY "EMPIK Fotoswiat" = EMPIK Fotoswiat "Free Video Downloader_is1" = Free Video Downloader version 1.0.1 "Freez FLV to AVI/MPEG/WMV Converter 1.5_is1" = Freez FLV to AVI/MPEG/WMV Converter "Gadu-Gadu" = Gadu-Gadu 7.7 "Gadu-Gadu 10" = Gadu-Gadu 10 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "InstallShield_{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Canon Camera Support Core Library "InstallShield_{68E7E8BD-2233-49BE-81D6-1A1FAF1B5196}" = Canon RAW Image Task for ZoomBrowser EX "InstallShield_{B34BE30D-A759-4EC2-B58F-19FE2DEBF651}" = Canon Camera Window for ZoomBrowser EX "InstallShield_{CF2C1A86-5A98-4862-A3AE-9992E3A6427D}" = Canon RemoteCapture Task for ZoomBrowser EX "InstallShield_{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = Canon MovieEdit Task for ZoomBrowser EX "InstallShield_{EF4C7EB0-D71B-43A3-9552-8053DE4B0401}" = Canon Utilities PhotoStitch 3.1 "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 4.1.7 (Full) "LiveReg" = LiveReg (Symantec Corporation) "LiveUpdate" = LiveUpdate 2.0 (Symantec Corporation) "Macromedia Shockwave Player" = Macromedia Shockwave Player "Mozilla Firefox (3.6.28)" = Mozilla Firefox (3.6.28) "Multi Media Toolbar" = Multi Media Toolbar "MultiMedia Toolbar" = MultiMedia Toolbar "Nero - Burning Rom!UninstallKey" = Nero - Burning Rom (Web installer) "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "Orbitron_is1" = Orbitron - Satellite Tracking System "PDFCreator Toolbar" = PDFCreator Toolbar "PIT Format 2011_is1" = PIT Format 2011 "Pity 2008_is1" = Pity 2008 "PITy 2009_is1" = PITy 2009 dla Windows kompilacja:1.1.2.6 "Pity Format 2010_is1" = Pity Format 2010 "Plustek USB Scanner" = Plustek USB Scanner "PROSet" = Intel(R) PRO Ethernet Adapter and Software "QedStation Remake" = QedStation Remake "Quicken 2001 New User Edition" = Quicken 2001 New User Edition "RealAlt_is1" = Real Alternative 2.0.2 "RealPlayer 6.0" = RealPlayer Basic "Riva FLV Encoder 2.0_is1" = Riva FLV Encoder 2.0 "RozliczenieRoczne2007_is1" = Rozliczenie Roczne podatki.pl 2007 "SLD CODEC PACK 1.5 PRO beta4" = SLD CODEC PACK 1.5 PRO beta4 "Toshiba Access" = Toshiba Access "TOSHIBA Power Management" = TOSHIBA Power Management "TOSHIBA Software Modem" = TOSHIBA Software Modem "Toshiba Software Upgrades" = Toshiba Software Upgrades "Toshiba System Stability Program" = Toshiba System Stability Program "Toshiba Tbiosdrv Driver" = Toshiba Tbiosdrv Driver "Toshiba WinXP Registration" = Toshiba WinXP Registration "TouchPad On/Off Utility" = TouchPad On/Off Utility "ViewpointMediaPlayer" = Viewpoint Media Player (Remove Only) "VX-7 Commander_is1" = VX-7 Commander v1.3.4 "WIC" = Windows Imaging Component "Winamp" = Winamp (remove only) "Windows XP Service Pack" = Windows XP Service Pack 2 "WinRAR archiver" = WinRAR archiver "WinZip" = WinZip "Wisdom-soft ScreenHunter 4.0 Free" = Wisdom-soft ScreenHunter 4.0 Free [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-183450923-4264649163-3499916212-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Sidoma Trader XTB" = Sidoma Trader XTB [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-06-11 17:52:55 | Computer Name = MARIAN2 | Source = Application Hang | ID = 1002 Description = Hanging application mplayerc.exe, version 6.4.9.1, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error - 2012-06-17 04:28:54 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-06-24 10:38:39 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-06-26 11:19:35 | Computer Name = MARIAN2 | Source = Application Hang | ID = 1002 Description = Hanging application WINWORD.EXE, version 10.0.6856.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error - 2012-06-26 12:24:57 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application eu2.exe, version 1.0.0.1, faulting module eu2.exe, version 1.0.0.1, fault address 0x0014e990. Error - 2012-06-27 01:54:57 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-07-10 03:54:20 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application opera.exe, version 9.2.8585.0, faulting module unknown, version 0.0.0.0, fault address 0x6f2e7777. Error - 2012-07-15 17:47:47 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application eu2.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x05a10873. Error - 2012-07-23 19:45:09 | Computer Name = MARIAN2 | Source = ESENT | ID = 490 Description = svchost (332) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error - 2012-07-23 19:45:37 | Computer Name = MARIAN2 | Source = ESENT | ID = 490 Description = svchost (332) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). [ Application Events ] Error - 2012-06-11 17:52:55 | Computer Name = MARIAN2 | Source = Application Hang | ID = 1002 Description = Hanging application mplayerc.exe, version 6.4.9.1, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error - 2012-06-17 04:28:54 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-06-24 10:38:39 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-06-26 11:19:35 | Computer Name = MARIAN2 | Source = Application Hang | ID = 1002 Description = Hanging application WINWORD.EXE, version 10.0.6856.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error - 2012-06-26 12:24:57 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application eu2.exe, version 1.0.0.1, faulting module eu2.exe, version 1.0.0.1, fault address 0x0014e990. Error - 2012-06-27 01:54:57 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application plugin-container.exe, version 1.9.2.4448, faulting module ntdll.dll, version 5.1.2600.3520, fault address 0x0000100b. Error - 2012-07-10 03:54:20 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application opera.exe, version 9.2.8585.0, faulting module unknown, version 0.0.0.0, fault address 0x6f2e7777. Error - 2012-07-15 17:47:47 | Computer Name = MARIAN2 | Source = Application Error | ID = 1000 Description = Faulting application eu2.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x05a10873. Error - 2012-07-23 19:45:09 | Computer Name = MARIAN2 | Source = ESENT | ID = 490 Description = svchost (332) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error - 2012-07-23 19:45:37 | Computer Name = MARIAN2 | Source = ESENT | ID = 490 Description = svchost (332) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). [ System Events ] Error - 2012-07-25 20:12:46 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-25 20:12:50 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-25 20:12:55 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-25 20:12:59 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-25 20:18:49 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-26 00:54:46 | Computer Name = MARIAN2 | Source = Service Control Manager | ID = 7011 Description = Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service. Error - 2012-07-26 00:54:46 | Computer Name = MARIAN2 | Source = Service Control Manager | ID = 7011 Description = Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service. Error - 2012-07-26 02:04:58 | Computer Name = MARIAN2 | Source = Disk | ID = 262151 Description = The device, \Device\Harddisk0\D, has a bad block. Error - 2012-07-26 03:03:17 | Computer Name = MARIAN2 | Source = Windows Update Agent | ID = 16 Description = Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection. Error - 2012-07-26 03:52:37 | Computer Name = MARIAN2 | Source = Service Control Manager | ID = 7011 Description = Timeout (30000 milliseconds) waiting for a transaction response from the avgwd service. < End of report >