OTL Extras logfile created on: 2012-08-10 15:20:39 - Run 1
OTL by OldTimer - Version 3.2.56.0     Folder = C:\Documents and Settings\Maria\Moje dokumenty\Downloads
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1023,48 Mb Total Physical Memory | 729,69 Mb Available Physical Memory | 71,30% Memory free
2,41 Gb Paging File | 2,19 Gb Available in Paging File | 90,88% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 41,35 Gb Free Space | 84,69% Space Free | Partition Type: NTFS
Drive D: | 130,00 Gb Total Space | 13,90 Gb Free Space | 10,69% Space Free | Partition Type: NTFS
Drive E: | 119,25 Gb Total Space | 42,12 Gb Free Space | 35,32% Space Free | Partition Type: NTFS
 
Computer Name: DOM-FD64AE5821D | User Name: Maria | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- C:\Documents and Settings\Maria\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe (Google Inc.)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.)
"C:\Program Files\Epson Software\Event Manager\EEventManager.exe" = C:\Program Files\Epson Software\Event Manager\EEventManager.exe:*:Enabled:EEventManager Application -- (SEIKO EPSON CORPORATION)
"C:\Documents and Settings\Maria\M-10-6897-8685-3464\winmgr.exe" = C:\Documents and Settings\Maria\M-10-6897-8685-3464\winmgr.exe:*:Enabled:Microsoft Windows Manager -- ()
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}" = Epson Event Manager
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{310C1558-F6B5-4889-98B0-7471966BA7F2}" = Epson Easy Photo Print 2
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Polish
"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{E9AA8EB9-FCD1-4829-AE3C-F2D211C67F42}" = Internet Explorer
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
"{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1" = ALLMediaServer
"5513-1208-7298-9440" = JDownloader 0.9
"ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"ALLPlayer_is1" = ALLPlayer V5.X
"EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 9.1.1 Home Edition
"EPSON Scanner" = EPSON Scan
"EPSON SX125 Series" = Odinstaluj drukarkę EPSON SX125 Series
"EPSON SX125 Series Manual" = EPSON SX125 Series Podręcznik
"ffdshow_is1" = ffdshow v1.2.4475 [2012-07-12]
"ie8" = Windows Internet Explorer 8
"Microsoft Security Client" = Microsoft Security Essentials
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Drivers" = NVIDIA Drivers
"searchya" = SearchYa! Web Search
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Winamp Detect" = Detektor Winampa
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-07-17 16:31:55 | Computer Name = DOM-FD64AE5821D | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 4.0.1526.0,
 P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.
 
Error - 2012-07-17 16:31:59 | Computer Name = DOM-FD64AE5821D | Source = Microsoft Security Client | ID = 5000
Description = 
 
Error - 2012-08-10 07:52:56 | Computer Name = DOM-FD64AE5821D | Source = Microsoft Security Client | ID = 5000
Description = 
 
Error - 2012-08-10 07:52:56 | Computer Name = DOM-FD64AE5821D | Source = Microsoft Security Client | ID = 5000
Description = 
 
Error - 2012-08-10 07:53:41 | Computer Name = DOM-FD64AE5821D | Source = Microsoft Security Client | ID = 5000
Description = 
 
Error - 2012-08-10 09:10:35 | Computer Name = DOM-FD64AE5821D | Source = MPSampleSubmission | ID = 5000
Description = EventType avsubmit, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
 P2 1.1.8601.0, P3 1.131.1768.0, P4 1.131.1768.0, P5 backdoor_win32_ircbot.fy, P6
 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.
 
[ System Events ]
Error - 2012-08-01 05:07:32 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-02 06:28:46 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-02 06:28:46 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-04 06:16:29 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-04 06:16:29 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-06 03:45:13 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-06 03:45:13 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-08 14:54:02 | Computer Name = DOM-FD64AE5821D | Source = Microsoft Antimalware | ID = 2001
Description = Produkt %%860 napotkał błąd podczas próby aktualizacji podpisów.     Nowa
 wersja podpisu:      Poprzednia wersja podpisu: 1.131.1474.0     Źródło aktualizacji: %%859

	Etap
 aktualizacji: %%852     Ścieżka źródła: http://www.microsoft.com     Typ podpisu: %%800     Typ
 aktualizacji: %%803     Użytkownik: ZARZĄDZANIE NT\SYSTEM     Bieżąca wersja aparatu:      Poprzednia
 wersja aparatu: 1.1.8601.0     Kod błędu: 0x80072efe     Opis błędu: The connection with 
the server was terminated abnormally 
 
Error - 2012-08-08 14:57:12 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
Error - 2012-08-08 14:57:12 | Computer Name = DOM-FD64AE5821D | Source = NVENETFD | ID = 5008
Description = NVIDIA nForce 10/100/1000 Mbps Ethernet : wykryto nieprawidłowy adres
 sieciowy.
 
 
< End of report >