OTL Extras logfile created on: 2012-07-30 09:31:09 - Run 1
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Documents and Settings\Administrator\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
510,79 Mb Total Physical Memory | 375,32 Mb Available Physical Memory | 73,48% Memory free
1,22 Gb Paging File | 1,15 Gb Available in Paging File | 94,11% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29,30 Gb Total Space | 16,36 Gb Free Space | 55,83% Space Free | Partition Type: NTFS
Drive D: | 26,58 Gb Total Space | 19,42 Gb Free Space | 73,05% Space Free | Partition Type: FAT32
Drive G: | 988,02 Mb Total Space | 64,46 Mb Free Space | 6,52% Space Free | Partition Type: FAT32
 
Computer Name: POWERXP | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_USERS\S-1-5-21-1409082233-651377827-1417001333-500\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( )
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Documents and Settings\Administrator\Moje dokumenty\Downloads\(Software) µTorrent (uTorrent) 1.8.1 Build 12083 Beta - DLLOZ\(Software) µTorrent (uTorrent) 1.8.1 Build 12083 Beta - DLLOZ.upx.exe" = C:\Documents and Settings\Administrator\Moje dokumenty\Downloads\(Software) µTorrent (uTorrent) 1.8.1 Build 12083 Beta - DLLOZ\(Software) µTorrent (uTorrent) 1.8.1 Build 12083 Beta - DLLOZ.upx.exe:*:Enabled:µTorrent
"C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\FLVPlayer_Setup.exe" = C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\FLVPlayer_Setup.exe:*:Enabled:Flash FLV Player
"C:\Program Files\Ares\Ares.exe" = C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows
"C:\Documents and Settings\Administrator\Pulpit\eMule0.50a\emule.exe" = C:\Documents and Settings\Administrator\Pulpit\eMule0.50a\emule.exe:*:Enabled:eMule
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10
"C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\TorrentEasy-rytual-the-rite-2011-dvdrip-xvid-napisy-pl.exe" = C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\TorrentEasy-rytual-the-rite-2011-dvdrip-xvid-napisy-pl.exe:*:Disabled:TorrentEasy-rytual-the-rite-2011-dvdrip-xvid-napisy-pl
"C:\Documents and Settings\Administrator\Pulpit\Worms 4\Worms 4.exe" = C:\Documents and Settings\Administrator\Pulpit\Worms 4\Worms 4.exe:*:Enabled:Worms 4 Mayhem
"C:\Program Files\WapSter\WapSter AQQ\AQQ.exe" = C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:AQQ Instant Messenger
"C:\Program Files\K2T\WTW\wtw.exe" = C:\Program Files\K2T\WTW\wtw.exe:*:Enabled:WTW Instant Messenger
"C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Enabled:eMule
"C:\Documents and Settings\Administrator\Pulpit\Ares.exe" = C:\Documents and Settings\Administrator\Pulpit\Ares.exe:*:Enabled:Ares p2p for windows -- (Ares Development Group)
"C:\Documents and Settings\Administrator\Ustawienia lokalne\temp\Rar$EX08.844\eMule.exe" = C:\Documents and Settings\Administrator\Ustawienia lokalne\temp\Rar$EX08.844\eMule.exe:*:Enabled:eMule
"C:\Program Files\easyMule\emule.exe" = C:\Program Files\easyMule\emule.exe:*:Enabled:easyMule1.0
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{2511D82C-2688-41C2-ABF8-AF237795989B}" = pdfforge Toolbar v6.2
"{26E198BF-BB33-434C-9B49-94416CEDE12F}" = Audio Studio 7.8.3.8.1
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{37476589-E48E-439E-A706-56189E2ED4C4}" = TheBflix
"{439C8F8B-5A1B-4A3C-A91A-2F3F8CD34DDB}" = ChomikBox
"{5FE0C13A-63F1-4394-88A8-2D8722A75FE0}_is1" = Convert VOB to AVI 1.7
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{837B34E3-7C30-493C-8F6A-2B0F04E2912C}" = Microsoft Visual C++ 2005 Redistributable
"{92D8437A-9070-43EC-B9D6-9CCD47F981BA}" = calibre
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Adobe_678cd98c8365a5647f9a2e539d120a8" = Adobe Photoshop CS3
"ALLPlayer_is1" = ALLPlayer V4.X
"AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus
"ATI Display Driver" = ATI Display Driver
"CCleaner" = CCleaner (remove only)
"CDex" = CDex extraction audio
"C-Media Audio Driver" = C-Media WDM Audio Driver
"DealPly" = DealPly
"Discover_USA Toolbar" = Discover USA Toolbar
"DT2" = Deutsch Translator 2
"Ekspert CD_is1" = Ekspert CD
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FLVPlayer" = FLV Player 1.3.3
"HP Photo & Imaging" = HP Image Zone 4.2
"ie8" = Windows Internet Explorer 8
"JMicron" = JMicron USB Disk Driver
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.0.4 (Basic)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.61.0.1400
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NapiProjekt_is1" = NapiProjekt 2.0.0 (build 2028)
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"Passage 3 Demo" = PASSAGE 3 Demo
"PhotoScape" = PhotoScape
"RealPlayer 12.0" = RealPlayer
"Total Video Converter 3.14_is1" = Total Video Converter 3.14 081029
"uTorrent" = µTorrent
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = Archiwizator WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-1409082233-651377827-1417001333-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"EngTrans3" = Tłumacz i Słownik Języka Angielskiego 3
"Google Chrome" = Google Chrome
"uTorrent" = µTorrent
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-07-27 13:53:50 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 13:56:53 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 13:56:56 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 13:58:04 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 13:59:11 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 14:00:15 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 14:01:20 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 14:02:12 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 14:02:14 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
Error - 2012-07-27 14:02:53 | Computer Name = POWERXP | Source = VSS | ID = 12289
Description = 
 
[ OSession Events ]
Error - 2012-03-18 08:54:58 | Computer Name = POWERXP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 862
 seconds with 720 seconds of active time.  This session ended with a crash.
 
Error - 2012-04-01 04:22:29 | Computer Name = POWERXP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2340
 seconds with 1860 seconds of active time.  This session ended with a crash.
 
Error - 2012-04-01 04:32:20 | Computer Name = POWERXP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 579
 seconds with 300 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 2012-07-30 03:26:18 | Computer Name = POWERXP | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
EventSystem z argumentami „”  w celu uruchomienia serwera:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7001
Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie
 można uruchomić z powodu następującego błędu:   %%31
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7001
Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której
 nie można uruchomić z powodu następującego błędu:   %%31
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7001
Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można
 uruchomić z powodu następującego błędu:   %%31
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7001
Description = Usługa Apple Mobile Device zależy od usługi Sterownik protokołu TCP/IP,
 której nie można uruchomić z powodu następującego błędu:   %%31
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7001
Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można
 uruchomić z powodu następującego błędu:   %%31
 
Error - 2012-07-30 03:27:17 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7026
Description = Nie można załadować następujących sterowników startu rozruchowego 
lub systemowego:   AFD  avipbb  Fips  intelppm  IPSec  MRxSmb  NetBIOS  NetBT  RasAcd  Rdbss  ssmdrv  Tcpip
 
Error - 2012-07-30 03:28:15 | Computer Name = POWERXP | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
EventSystem z argumentami „”  w celu uruchomienia serwera:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 2012-07-30 03:29:29 | Computer Name = POWERXP | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
EventSystem z argumentami „”  w celu uruchomienia serwera:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 2012-07-30 03:30:47 | Computer Name = POWERXP | Source = Service Control Manager | ID = 7026
Description = Nie można załadować następujących sterowników startu rozruchowego 
lub systemowego:   avipbb  Fips  intelppm  ssmdrv
 
 
< End of report >